Bug 1846847 [wpt PR 41301] - [FedCM] Don't omit schemes when formatting URLs, a=testonly
[gecko.git] / supply-chain / imports.lock
blob0c7094f6a0c7c1da451b49e430e61bf9f82e0607
2 # cargo-vet imports lock
4 [[publisher.aho-corasick]]
5 version = "0.7.20"
6 when = "2022-11-22"
7 user-id = 189
8 user-login = "BurntSushi"
9 user-name = "Andrew Gallant"
11 [[publisher.arbitrary]]
12 version = "1.3.0"
13 when = "2023-03-13"
14 user-id = 696
15 user-login = "fitzgen"
16 user-name = "Nick Fitzgerald"
18 [[publisher.async-trait]]
19 version = "0.1.68"
20 when = "2023-03-24"
21 user-id = 3618
22 user-login = "dtolnay"
23 user-name = "David Tolnay"
25 [[publisher.atomic]]
26 version = "0.4.6"
27 when = "2020-07-05"
28 user-id = 2915
29 user-login = "Amanieu"
30 user-name = "Amanieu d'Antras"
32 [[publisher.audio_thread_priority]]
33 version = "0.26.1"
34 when = "2022-03-22"
35 user-id = 1258
36 user-login = "padenot"
37 user-name = "Paul Adenot"
39 [[publisher.authenticator]]
40 version = "0.4.0-alpha.15"
41 when = "2023-05-15"
42 user-id = 175410
43 user-login = "jschanck"
44 user-name = "John Schanck"
46 [[publisher.authenticator]]
47 version = "0.4.0-alpha.18"
48 when = "2023-06-20"
49 user-id = 175410
50 user-login = "jschanck"
51 user-name = "John Schanck"
53 [[publisher.bhttp]]
54 version = "0.3.1"
55 when = "2023-02-23"
56 user-id = 128763
57 user-login = "martinthomson"
58 user-name = "Martin Thomson"
60 [[publisher.byteorder]]
61 version = "1.4.3"
62 when = "2021-03-10"
63 user-id = 189
64 user-login = "BurntSushi"
65 user-name = "Andrew Gallant"
67 [[publisher.bytes]]
68 version = "1.4.0"
69 when = "2023-01-31"
70 user-id = 6741
71 user-login = "Darksonn"
72 user-name = "Alice Ryhl"
74 [[publisher.cexpr]]
75 version = "0.6.0"
76 when = "2021-10-11"
77 user-id = 3788
78 user-login = "emilio"
79 user-name = "Emilio Cobos Álvarez"
81 [[publisher.clap]]
82 version = "4.1.14"
83 when = "2023-03-28"
84 user-id = 6743
85 user-login = "epage"
86 user-name = "Ed Page"
88 [[publisher.clap_builder]]
89 version = "4.1.14"
90 when = "2023-03-28"
91 user-id = 6743
92 user-login = "epage"
93 user-name = "Ed Page"
95 [[publisher.clap_derive]]
96 version = "4.1.14"
97 when = "2023-03-28"
98 user-id = 6743
99 user-login = "epage"
100 user-name = "Ed Page"
102 [[publisher.clap_lex]]
103 version = "0.4.1"
104 when = "2023-03-28"
105 user-id = 6743
106 user-login = "epage"
107 user-name = "Ed Page"
109 [[publisher.core-foundation]]
110 version = "0.9.3"
111 when = "2022-02-07"
112 user-id = 5946
113 user-login = "jrmuizel"
114 user-name = "Jeff Muizelaar"
116 [[publisher.core-foundation-sys]]
117 version = "0.8.3"
118 when = "2021-10-12"
119 user-id = 2396
120 user-login = "jdm"
121 user-name = "Josh Matthews"
123 [[publisher.core-graphics]]
124 version = "0.22.3"
125 when = "2021-11-02"
126 user-id = 5946
127 user-login = "jrmuizel"
128 user-name = "Jeff Muizelaar"
130 [[publisher.core-graphics-types]]
131 version = "0.1.1"
132 when = "2020-09-15"
133 user-id = 2396
134 user-login = "jdm"
135 user-name = "Josh Matthews"
137 [[publisher.core-text]]
138 version = "19.2.0"
139 when = "2021-02-14"
140 user-id = 5946
141 user-login = "jrmuizel"
142 user-name = "Jeff Muizelaar"
144 [[publisher.derive_arbitrary]]
145 version = "1.3.0"
146 when = "2023-03-13"
147 user-id = 696
148 user-login = "fitzgen"
149 user-name = "Nick Fitzgerald"
151 [[publisher.dogear]]
152 version = "0.4.0"
153 when = "2019-09-16"
154 user-id = 27901
155 user-login = "linabutler"
156 user-name = "Lina Butler"
158 [[publisher.dtoa]]
159 version = "0.4.8"
160 when = "2021-03-29"
161 user-id = 3618
162 user-login = "dtolnay"
163 user-name = "David Tolnay"
165 [[publisher.etagere]]
166 version = "0.2.7"
167 when = "2022-05-04"
168 user-id = 1281
169 user-login = "nical"
170 user-name = "Nicolas Silva"
172 [[publisher.euclid]]
173 version = "0.22.7"
174 when = "2022-04-04"
175 user-id = 1281
176 user-login = "nical"
177 user-name = "Nicolas Silva"
179 [[publisher.flate2]]
180 version = "1.0.24"
181 when = "2022-05-28"
182 user-id = 4333
183 user-login = "joshtriplett"
184 user-name = "Josh Triplett"
186 [[publisher.freetype]]
187 version = "0.7.0"
188 when = "2020-07-14"
189 user-id = 2396
190 user-login = "jdm"
191 user-name = "Josh Matthews"
193 [[publisher.gleam]]
194 version = "0.15.0"
195 when = "2023-04-21"
196 user-id = 5946
197 user-login = "jrmuizel"
198 user-name = "Jeff Muizelaar"
200 [[publisher.glean]]
201 version = "53.2.0"
202 when = "2023-08-02"
203 user-id = 48
204 user-login = "badboy"
205 user-name = "Jan-Erik Rediger"
207 [[publisher.glean-core]]
208 version = "53.2.0"
209 when = "2023-08-02"
210 user-id = 48
211 user-login = "badboy"
212 user-name = "Jan-Erik Rediger"
214 [[publisher.glslopt]]
215 version = "0.1.9"
216 when = "2021-03-17"
217 user-id = 84794
218 user-login = "jamienicol"
219 user-name = "Jamie Nicol"
221 [[publisher.headers]]
222 version = "0.3.8"
223 when = "2022-09-02"
224 user-id = 359
225 user-login = "seanmonstar"
226 user-name = "Sean McArthur"
228 [[publisher.httparse]]
229 version = "1.8.0"
230 when = "2022-08-30"
231 user-id = 359
232 user-login = "seanmonstar"
233 user-name = "Sean McArthur"
235 [[publisher.indexmap]]
236 version = "1.9.3"
237 when = "2023-03-24"
238 user-id = 539
239 user-login = "cuviper"
240 user-name = "Josh Stone"
242 [[publisher.inherent]]
243 version = "1.0.7"
244 when = "2023-03-25"
245 user-id = 3618
246 user-login = "dtolnay"
247 user-name = "David Tolnay"
249 [[publisher.iovec]]
250 version = "0.1.4"
251 when = "2019-10-09"
252 user-id = 10
253 user-login = "carllerche"
254 user-name = "Carl Lerche"
256 [[publisher.itoa]]
257 version = "1.0.5"
258 when = "2022-12-17"
259 user-id = 3618
260 user-login = "dtolnay"
261 user-name = "David Tolnay"
263 [[publisher.jobserver]]
264 version = "0.1.25"
265 when = "2022-09-23"
266 user-id = 1
267 user-login = "alexcrichton"
268 user-name = "Alex Crichton"
270 [[publisher.libc]]
271 version = "0.2.132"
272 when = "2022-08-16"
273 user-id = 2915
274 user-login = "Amanieu"
275 user-name = "Amanieu d'Antras"
277 [[publisher.lock_api]]
278 version = "0.4.9"
279 when = "2022-09-20"
280 user-id = 2915
281 user-login = "Amanieu"
282 user-name = "Amanieu d'Antras"
284 [[publisher.memchr]]
285 version = "2.5.0"
286 when = "2022-04-30"
287 user-id = 189
288 user-login = "BurntSushi"
289 user-name = "Andrew Gallant"
291 [[publisher.mime]]
292 version = "0.3.16"
293 when = "2020-01-07"
294 user-id = 359
295 user-login = "seanmonstar"
296 user-name = "Sean McArthur"
298 [[publisher.mio]]
299 version = "0.6.21"
300 when = "2019-11-27"
301 user-id = 10
302 user-login = "carllerche"
303 user-name = "Carl Lerche"
305 [[publisher.nss-gk-api]]
306 version = "0.3.0"
307 when = "2023-06-14"
308 user-id = 175410
309 user-login = "jschanck"
310 user-name = "John Schanck"
312 [[publisher.num_cpus]]
313 version = "1.15.0"
314 when = "2022-12-20"
315 user-id = 359
316 user-login = "seanmonstar"
317 user-name = "Sean McArthur"
319 [[publisher.ohttp]]
320 version = "0.3.1"
321 when = "2023-02-23"
322 user-id = 128763
323 user-login = "martinthomson"
324 user-name = "Martin Thomson"
326 [[publisher.ordered-float]]
327 version = "3.4.0"
328 when = "2022-11-06"
329 user-id = 2017
330 user-login = "mbrubeck"
331 user-name = "Matt Brubeck"
333 [[publisher.parking_lot]]
334 version = "0.12.1"
335 when = "2022-05-31"
336 user-id = 2915
337 user-login = "Amanieu"
338 user-name = "Amanieu d'Antras"
340 [[publisher.parking_lot_core]]
341 version = "0.9.8"
342 when = "2023-06-05"
343 user-id = 2915
344 user-login = "Amanieu"
345 user-name = "Amanieu d'Antras"
347 [[publisher.paste]]
348 version = "1.0.11"
349 when = "2022-12-17"
350 user-id = 3618
351 user-login = "dtolnay"
352 user-name = "David Tolnay"
354 [[publisher.prio]]
355 version = "0.12.1"
356 when = "2023-04-13"
357 user-id = 101233
358 user-login = "le-automaton"
360 [[publisher.proc-macro2]]
361 version = "1.0.59"
362 when = "2023-05-25"
363 user-id = 3618
364 user-login = "dtolnay"
365 user-name = "David Tolnay"
367 [[publisher.quote]]
368 version = "1.0.28"
369 when = "2023-05-25"
370 user-id = 3618
371 user-login = "dtolnay"
372 user-name = "David Tolnay"
374 [[publisher.regex]]
375 version = "1.7.1"
376 when = "2023-01-09"
377 user-id = 189
378 user-login = "BurntSushi"
379 user-name = "Andrew Gallant"
381 [[publisher.regex-syntax]]
382 version = "0.6.28"
383 when = "2022-11-05"
384 user-id = 189
385 user-login = "BurntSushi"
386 user-name = "Andrew Gallant"
388 [[publisher.rust_cascade]]
389 version = "1.5.0"
390 when = "2023-04-05"
391 user-id = 57462
392 user-login = "mozkeeler"
393 user-name = "Dana Keeler"
395 [[publisher.ryu]]
396 version = "1.0.12"
397 when = "2022-12-17"
398 user-id = 3618
399 user-login = "dtolnay"
400 user-name = "David Tolnay"
402 [[publisher.same-file]]
403 version = "1.0.6"
404 when = "2020-01-11"
405 user-id = 189
406 user-login = "BurntSushi"
407 user-name = "Andrew Gallant"
409 [[publisher.scopeguard]]
410 version = "1.1.0"
411 when = "2020-02-16"
412 user-id = 2915
413 user-login = "Amanieu"
414 user-name = "Amanieu d'Antras"
416 [[publisher.serde]]
417 version = "1.0.163"
418 when = "2023-05-11"
419 user-id = 3618
420 user-login = "dtolnay"
421 user-name = "David Tolnay"
423 [[publisher.serde_bytes]]
424 version = "0.11.9"
425 when = "2023-02-05"
426 user-id = 3618
427 user-login = "dtolnay"
428 user-name = "David Tolnay"
430 [[publisher.serde_derive]]
431 version = "1.0.163"
432 when = "2023-05-10"
433 user-id = 3618
434 user-login = "dtolnay"
435 user-name = "David Tolnay"
437 [[publisher.serde_json]]
438 version = "1.0.93"
439 when = "2023-02-08"
440 user-id = 3618
441 user-login = "dtolnay"
442 user-name = "David Tolnay"
444 [[publisher.serde_repr]]
445 version = "0.1.12"
446 when = "2023-03-18"
447 user-id = 3618
448 user-login = "dtolnay"
449 user-name = "David Tolnay"
451 [[publisher.serde_yaml]]
452 version = "0.8.26"
453 when = "2022-07-16"
454 user-id = 3618
455 user-login = "dtolnay"
456 user-name = "David Tolnay"
458 [[publisher.smallvec]]
459 version = "1.10.0"
460 when = "2022-10-02"
461 user-id = 2017
462 user-login = "mbrubeck"
463 user-name = "Matt Brubeck"
465 [[publisher.syn]]
466 version = "1.0.107"
467 when = "2022-12-18"
468 user-id = 3618
469 user-login = "dtolnay"
470 user-name = "David Tolnay"
472 [[publisher.syn]]
473 version = "2.0.18"
474 when = "2023-05-26"
475 user-id = 3618
476 user-login = "dtolnay"
477 user-name = "David Tolnay"
479 [[publisher.termcolor]]
480 version = "1.2.0"
481 when = "2023-01-15"
482 user-id = 189
483 user-login = "BurntSushi"
484 user-name = "Andrew Gallant"
486 [[publisher.threadbound]]
487 version = "0.1.5"
488 when = "2022-12-17"
489 user-id = 3618
490 user-login = "dtolnay"
491 user-name = "David Tolnay"
493 [[publisher.tokio-util]]
494 version = "0.7.2"
495 when = "2022-05-15"
496 user-id = 6741
497 user-login = "Darksonn"
498 user-name = "Alice Ryhl"
500 [[publisher.toml]]
501 version = "0.5.7"
502 when = "2020-10-11"
503 user-id = 1
504 user-login = "alexcrichton"
505 user-name = "Alex Crichton"
507 [[publisher.unicode-ident]]
508 version = "1.0.6"
509 when = "2022-12-17"
510 user-id = 3618
511 user-login = "dtolnay"
512 user-name = "David Tolnay"
514 [[publisher.unicode-segmentation]]
515 version = "1.10.0"
516 when = "2022-09-13"
517 user-id = 1139
518 user-login = "Manishearth"
519 user-name = "Manish Goregaokar"
521 [[publisher.unicode-width]]
522 version = "0.1.10"
523 when = "2022-09-13"
524 user-id = 1139
525 user-login = "Manishearth"
526 user-name = "Manish Goregaokar"
528 [[publisher.unicode-xid]]
529 version = "0.2.4"
530 when = "2022-09-15"
531 user-id = 1139
532 user-login = "Manishearth"
533 user-name = "Manish Goregaokar"
535 [[publisher.uniffi]]
536 version = "0.24.3"
537 when = "2023-08-01"
538 user-id = 48
539 user-login = "badboy"
540 user-name = "Jan-Erik Rediger"
542 [[publisher.uniffi_bindgen]]
543 version = "0.24.3"
544 when = "2023-08-01"
545 user-id = 48
546 user-login = "badboy"
547 user-name = "Jan-Erik Rediger"
549 [[publisher.uniffi_build]]
550 version = "0.24.3"
551 when = "2023-08-01"
552 user-id = 48
553 user-login = "badboy"
554 user-name = "Jan-Erik Rediger"
556 [[publisher.uniffi_checksum_derive]]
557 version = "0.24.3"
558 when = "2023-08-01"
559 user-id = 48
560 user-login = "badboy"
561 user-name = "Jan-Erik Rediger"
563 [[publisher.uniffi_core]]
564 version = "0.24.3"
565 when = "2023-08-01"
566 user-id = 48
567 user-login = "badboy"
568 user-name = "Jan-Erik Rediger"
570 [[publisher.uniffi_macros]]
571 version = "0.24.3"
572 when = "2023-08-01"
573 user-id = 48
574 user-login = "badboy"
575 user-name = "Jan-Erik Rediger"
577 [[publisher.uniffi_meta]]
578 version = "0.24.3"
579 when = "2023-08-01"
580 user-id = 48
581 user-login = "badboy"
582 user-name = "Jan-Erik Rediger"
584 [[publisher.uniffi_testing]]
585 version = "0.24.3"
586 when = "2023-08-01"
587 user-id = 48
588 user-login = "badboy"
589 user-name = "Jan-Erik Rediger"
591 [[publisher.utf8_iter]]
592 version = "1.0.3"
593 when = "2022-09-09"
594 user-id = 4484
595 user-login = "hsivonen"
596 user-name = "Henri Sivonen"
598 [[publisher.walkdir]]
599 version = "2.3.2"
600 when = "2021-03-22"
601 user-id = 189
602 user-login = "BurntSushi"
603 user-name = "Andrew Gallant"
605 [[publisher.warp]]
606 version = "0.3.3"
607 when = "2022-09-27"
608 user-id = 359
609 user-login = "seanmonstar"
610 user-name = "Sean McArthur"
612 [[publisher.wasi]]
613 version = "0.11.0+wasi-snapshot-preview1"
614 when = "2022-01-19"
615 user-id = 1
616 user-login = "alexcrichton"
617 user-name = "Alex Crichton"
619 [[publisher.wasm-encoder]]
620 version = "0.31.0"
621 when = "2023-07-17"
622 user-id = 1
623 user-login = "alexcrichton"
624 user-name = "Alex Crichton"
626 [[publisher.wasm-smith]]
627 version = "0.12.12"
628 when = "2023-07-17"
629 user-id = 1
630 user-login = "alexcrichton"
631 user-name = "Alex Crichton"
633 [[publisher.wasmparser]]
634 version = "0.109.0"
635 when = "2023-07-17"
636 user-id = 1
637 user-login = "alexcrichton"
638 user-name = "Alex Crichton"
640 [[publisher.wast]]
641 version = "62.0.0"
642 when = "2023-07-17"
643 user-id = 1
644 user-login = "alexcrichton"
645 user-name = "Alex Crichton"
647 [[publisher.winapi-util]]
648 version = "0.1.5"
649 when = "2020-04-20"
650 user-id = 189
651 user-login = "BurntSushi"
652 user-name = "Andrew Gallant"
654 [[publisher.zeitstempel]]
655 version = "0.1.1"
656 when = "2021-03-18"
657 user-id = 48
658 user-login = "badboy"
659 user-name = "Jan-Erik Rediger"
661 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
662 who = "Nick Fitzgerald <fitzgen@gmail.com>"
663 criteria = "safe-to-deploy"
664 user-id = 696 # Nick Fitzgerald (fitzgen)
665 start = "2020-01-14"
666 end = "2024-04-21"
667 notes = "I am an author of this crate."
669 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
670 who = "Nick Fitzgerald <fitzgen@gmail.com>"
671 criteria = "safe-to-deploy"
672 user-id = 696 # Nick Fitzgerald (fitzgen)
673 start = "2020-01-14"
674 end = "2024-04-27"
675 notes = "I am an author of this crate"
677 [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
678 who = "Alex Crichton <alex@alexcrichton.com>"
679 criteria = "safe-to-deploy"
680 user-id = 1 # Alex Crichton (alexcrichton)
681 start = "2020-12-11"
682 end = "2024-04-14"
683 notes = """
684 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
685 repository of which I'm one of the primary maintainers and publishers for.
686 I am employed by a member of the Bytecode Alliance and plan to continue doing
687 so and will actively maintain this crate over time.
690 [[audits.bytecode-alliance.wildcard-audits.wasm-smith]]
691 who = "Alex Crichton <alex@alexcrichton.com>"
692 criteria = "safe-to-deploy"
693 user-id = 1 # Alex Crichton (alexcrichton)
694 start = "2020-09-03"
695 end = "2024-04-14"
696 notes = """
697 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
698 repository of which I'm one of the primary maintainers and publishers for.
699 I am employed by a member of the Bytecode Alliance and plan to continue doing
700 so and will actively maintain this crate over time.
703 [[audits.bytecode-alliance.wildcard-audits.wasmparser]]
704 who = "Alex Crichton <alex@alexcrichton.com>"
705 criteria = "safe-to-deploy"
706 user-id = 1 # Alex Crichton (alexcrichton)
707 start = "2020-07-13"
708 end = "2024-04-14"
709 notes = """
710 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
711 repository of which I'm one of the primary maintainers and publishers for.
712 I am employed by a member of the Bytecode Alliance and plan to continue doing
713 so and will actively maintain this crate over time.
716 [[audits.bytecode-alliance.wildcard-audits.wast]]
717 who = "Alex Crichton <alex@alexcrichton.com>"
718 criteria = "safe-to-deploy"
719 user-id = 1 # Alex Crichton (alexcrichton)
720 start = "2019-10-16"
721 end = "2024-04-14"
722 notes = """
723 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
724 repository of which I'm one of the primary maintainers and publishers for.
725 I am employed by a member of the Bytecode Alliance and plan to continue doing
726 so and will actively maintain this crate over time.
729 [[audits.bytecode-alliance.audits.adler]]
730 who = "Alex Crichton <alex@alexcrichton.com>"
731 criteria = "safe-to-deploy"
732 version = "1.0.2"
733 notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
735 [[audits.bytecode-alliance.audits.arrayref]]
736 who = "Nick Fitzgerald <fitzgen@gmail.com>"
737 criteria = "safe-to-deploy"
738 version = "0.3.6"
739 notes = """
740 Unsafe code, but its logic looks good to me. Necessary given what it is
741 doing. Well tested, has quickchecks.
744 [[audits.bytecode-alliance.audits.arrayvec]]
745 who = "Nick Fitzgerald <fitzgen@gmail.com>"
746 criteria = "safe-to-deploy"
747 version = "0.7.2"
748 notes = """
749 Well documented invariants, good assertions for those invariants in unsafe code,
750 and tested with MIRI to boot. LGTM.
753 [[audits.bytecode-alliance.audits.base64]]
754 who = "Pat Hickey <phickey@fastly.com>"
755 criteria = "safe-to-deploy"
756 version = "0.21.0"
757 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
759 [[audits.bytecode-alliance.audits.block-buffer]]
760 who = "Benjamin Bouvier <public@benj.me>"
761 criteria = "safe-to-deploy"
762 delta = "0.9.0 -> 0.10.2"
764 [[audits.bytecode-alliance.audits.bumpalo]]
765 who = "Nick Fitzgerald <fitzgen@gmail.com>"
766 criteria = "safe-to-deploy"
767 version = "3.11.1"
768 notes = "I am the author of this crate."
770 [[audits.bytecode-alliance.audits.cargo-platform]]
771 who = "Pat Hickey <phickey@fastly.com>"
772 criteria = "safe-to-deploy"
773 version = "0.1.2"
774 notes = "no build, no ambient capabilities, no unsafe"
776 [[audits.bytecode-alliance.audits.cc]]
777 who = "Alex Crichton <alex@alexcrichton.com>"
778 criteria = "safe-to-deploy"
779 version = "1.0.73"
780 notes = "I am the author of this crate."
782 [[audits.bytecode-alliance.audits.cfg-if]]
783 who = "Alex Crichton <alex@alexcrichton.com>"
784 criteria = "safe-to-deploy"
785 version = "1.0.0"
786 notes = "I am the author of this crate."
788 [[audits.bytecode-alliance.audits.codespan-reporting]]
789 who = "Jamey Sharp <jsharp@fastly.com>"
790 criteria = "safe-to-deploy"
791 version = "0.11.1"
792 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
794 [[audits.bytecode-alliance.audits.cpufeatures]]
795 who = "Alex Crichton <alex@alexcrichton.com>"
796 criteria = "safe-to-deploy"
797 delta = "0.2.2 -> 0.2.7"
798 notes = """
799 This is a minor update that looks to add some more detected CPU features and
800 various other minor portability fixes such as MIRI support.
803 [[audits.bytecode-alliance.audits.crypto-common]]
804 who = "Benjamin Bouvier <public@benj.me>"
805 criteria = "safe-to-deploy"
806 version = "0.1.3"
808 [[audits.bytecode-alliance.audits.foreign-types]]
809 who = "Pat Hickey <phickey@fastly.com>"
810 criteria = "safe-to-deploy"
811 version = "0.3.2"
812 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
814 [[audits.bytecode-alliance.audits.foreign-types-shared]]
815 who = "Pat Hickey <phickey@fastly.com>"
816 criteria = "safe-to-deploy"
817 version = "0.1.1"
819 [[audits.bytecode-alliance.audits.form_urlencoded]]
820 who = "Alex Crichton <alex@alexcrichton.com>"
821 criteria = "safe-to-deploy"
822 version = "1.1.0"
823 notes = """
824 This is a small crate for working with url-encoded forms which doesn't have any
825 more than what it says on the tin. Contains one `unsafe` block related to
826 performance around utf-8 validation which is fairly easy to verify as correct.
829 [[audits.bytecode-alliance.audits.futures-channel]]
830 who = "Pat Hickey <phickey@fastly.com>"
831 criteria = "safe-to-deploy"
832 version = "0.3.27"
833 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
835 [[audits.bytecode-alliance.audits.futures-core]]
836 who = "Pat Hickey <phickey@fastly.com>"
837 criteria = "safe-to-deploy"
838 version = "0.3.27"
839 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
841 [[audits.bytecode-alliance.audits.futures-executor]]
842 who = "Pat Hickey <phickey@fastly.com>"
843 criteria = "safe-to-deploy"
844 version = "0.3.27"
845 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
847 [[audits.bytecode-alliance.audits.futures-io]]
848 who = "Pat Hickey <phickey@fastly.com>"
849 criteria = "safe-to-deploy"
850 version = "0.3.27"
852 [[audits.bytecode-alliance.audits.futures-sink]]
853 who = "Pat Hickey <phickey@fastly.com>"
854 criteria = "safe-to-deploy"
855 version = "0.3.27"
857 [[audits.bytecode-alliance.audits.heck]]
858 who = "Alex Crichton <alex@alexcrichton.com>"
859 criteria = "safe-to-deploy"
860 version = "0.4.0"
861 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
863 [[audits.bytecode-alliance.audits.id-arena]]
864 who = "Nick Fitzgerald <fitzgen@gmail.com>"
865 criteria = "safe-to-deploy"
866 version = "2.2.1"
867 notes = "I am the author of this crate."
869 [[audits.bytecode-alliance.audits.idna]]
870 who = "Alex Crichton <alex@alexcrichton.com>"
871 criteria = "safe-to-deploy"
872 version = "0.3.0"
873 notes = """
874 This is a crate without unsafe code or usage of the standard library. The large
875 size of this crate comes from the large generated unicode tables file. This
876 crate is broadly used throughout the ecosystem and does not contain anything
877 suspicious.
880 [[audits.bytecode-alliance.audits.leb128]]
881 who = "Nick Fitzgerald <fitzgen@gmail.com>"
882 criteria = "safe-to-deploy"
883 version = "0.2.5"
884 notes = "I am the author of this crate."
886 [[audits.bytecode-alliance.audits.memoffset]]
887 who = "Alex Crichton <alex@alexcrichton.com>"
888 criteria = "safe-to-deploy"
889 delta = "0.7.1 -> 0.8.0"
890 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
892 [[audits.bytecode-alliance.audits.peeking_take_while]]
893 who = "Nick Fitzgerald <fitzgen@gmail.com>"
894 criteria = "safe-to-deploy"
895 version = "1.0.0"
896 notes = "I am the author of this crate."
898 [[audits.bytecode-alliance.audits.percent-encoding]]
899 who = "Alex Crichton <alex@alexcrichton.com>"
900 criteria = "safe-to-deploy"
901 version = "2.2.0"
902 notes = """
903 This crate is a single-file crate that does what it says on the tin. There are
904 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
905 as correct and otherwise this crate is good to go.
908 [[audits.bytecode-alliance.audits.pin-utils]]
909 who = "Pat Hickey <phickey@fastly.com>"
910 criteria = "safe-to-deploy"
911 version = "0.1.0"
913 [[audits.bytecode-alliance.audits.pkg-config]]
914 who = "Pat Hickey <phickey@fastly.com>"
915 criteria = "safe-to-deploy"
916 version = "0.3.25"
917 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
919 [[audits.bytecode-alliance.audits.rustc-demangle]]
920 who = "Alex Crichton <alex@alexcrichton.com>"
921 criteria = "safe-to-deploy"
922 version = "0.1.21"
923 notes = "I am the author of this crate."
925 [[audits.bytecode-alliance.audits.semver]]
926 who = "Pat Hickey <phickey@fastly.com>"
927 criteria = "safe-to-deploy"
928 version = "1.0.17"
929 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
931 [[audits.bytecode-alliance.audits.slab]]
932 who = "Pat Hickey <phickey@fastly.com>"
933 criteria = "safe-to-deploy"
934 version = "0.4.6"
935 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
937 [[audits.bytecode-alliance.audits.unicase]]
938 who = "Alex Crichton <alex@alexcrichton.com>"
939 criteria = "safe-to-deploy"
940 version = "2.6.0"
941 notes = """
942 This crate contains no `unsafe` code and no unnecessary use of the standard
943 library.
946 [[audits.bytecode-alliance.audits.unicode-bidi]]
947 who = "Alex Crichton <alex@alexcrichton.com>"
948 criteria = "safe-to-deploy"
949 version = "0.3.8"
950 notes = """
951 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
952 does not attempt to out of the bounds of what it's already supposed to be doing.
955 [[audits.bytecode-alliance.audits.unicode-normalization]]
956 who = "Alex Crichton <alex@alexcrichton.com>"
957 criteria = "safe-to-deploy"
958 version = "0.1.19"
959 notes = """
960 This crate contains one usage of `unsafe` which I have manually checked to see
961 it as correct. This crate's size comes in large part due to the generated
962 unicode tables that it contains. This crate is additionally widely used
963 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
964 and nothing suspicious.
967 [[audits.embark-studios.audits.anyhow]]
968 who = "Johan Andersson <opensource@embark-studios.com>"
969 criteria = "safe-to-deploy"
970 version = "1.0.58"
972 [[audits.embark-studios.audits.cty]]
973 who = "Johan Andersson <opensource@embark-studios.com>"
974 criteria = "safe-to-deploy"
975 version = "0.2.2"
976 notes = "Inspected it and is a tiny crate with just type definitions"
978 [[audits.embark-studios.audits.derive_more]]
979 who = "Johan Andersson <opensource@embark-studios.com>"
980 criteria = "safe-to-deploy"
981 version = "0.99.17"
982 notes = "No unsafe usage or ambient capabilities"
984 [[audits.embark-studios.audits.ident_case]]
985 who = "Johan Andersson <opensource@embark-studios.com>"
986 criteria = "safe-to-deploy"
987 version = "1.0.1"
988 notes = "No unsafe usage or ambient capabilities"
990 [[audits.embark-studios.audits.line-wrap]]
991 who = "Johan Andersson <opensource@embark-studios.com>"
992 criteria = "safe-to-deploy"
993 version = "0.1.1"
994 notes = "No unsafe usage or ambient capabilities"
996 [[audits.embark-studios.audits.thiserror]]
997 who = "Johan Andersson <opensource@embark-studios.com>"
998 criteria = "safe-to-deploy"
999 version = "1.0.40"
1000 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
1002 [[audits.embark-studios.audits.thiserror-impl]]
1003 who = "Johan Andersson <opensource@embark-studios.com>"
1004 criteria = "safe-to-deploy"
1005 version = "1.0.40"
1006 notes = "Found no unsafe or ambient capabilities used"
1008 [[audits.embark-studios.audits.yaml-rust]]
1009 who = "Johan Andersson <opensource@embark-studios.com>"
1010 criteria = "safe-to-deploy"
1011 version = "0.4.5"
1012 notes = "No unsafe usage or ambient capabilities"
1014 [[audits.google.audits.ash]]
1015 who = "David Koloski <dkoloski@google.com>"
1016 criteria = "safe-to-deploy"
1017 version = "0.37.0+1.3.209"
1018 notes = "Reviewed on https://fxrev.dev/694269"
1019 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1021 [[audits.google.audits.fastrand]]
1022 who = "George Burgess IV <gbiv@google.com>"
1023 criteria = "safe-to-deploy"
1024 version = "1.9.0"
1025 notes = """
1026 `does-not-implement-crypto` is certified because this crate explicitly says
1027 that the RNG here is not cryptographically secure.
1029 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1031 [[audits.google.audits.futures]]
1032 who = "George Burgess IV <gbiv@google.com>"
1033 criteria = "safe-to-deploy"
1034 version = "0.3.28"
1035 notes = """
1036 `futures` has no logic other than tests - it simply `pub use`s things from
1037 other crates.
1039 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1041 [[audits.google.audits.glob]]
1042 who = "George Burgess IV <gbiv@google.com>"
1043 criteria = "safe-to-deploy"
1044 version = "0.3.1"
1045 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1047 [[audits.google.audits.h2]]
1048 who = "ChromeOS"
1049 criteria = "safe-to-run"
1050 version = "0.3.14"
1051 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1053 [[audits.google.audits.http]]
1054 who = "ChromeOS"
1055 criteria = "safe-to-run"
1056 version = "0.2.8"
1057 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1059 [[audits.google.audits.http-body]]
1060 who = "ChromeOS"
1061 criteria = "safe-to-run"
1062 version = "0.4.5"
1063 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1065 [[audits.google.audits.httpdate]]
1066 who = "ChromeOS"
1067 criteria = "safe-to-run"
1068 version = "1.0.2"
1069 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1071 [[audits.google.audits.hyper]]
1072 who = "ChromeOS"
1073 criteria = "safe-to-run"
1074 version = "0.14.20"
1075 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1077 [[audits.google.audits.pin-project]]
1078 who = "ChromeOS"
1079 criteria = "safe-to-run"
1080 version = "1.0.12"
1081 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1083 [[audits.google.audits.pin-project-internal]]
1084 who = "ChromeOS"
1085 criteria = "safe-to-run"
1086 version = "1.0.12"
1087 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1089 [[audits.google.audits.pin-project-lite]]
1090 who = "David Koloski <dkoloski@google.com>"
1091 criteria = "safe-to-deploy"
1092 version = "0.2.9"
1093 notes = "Reviewed on https://fxrev.dev/824504"
1094 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1096 [[audits.google.audits.scoped-tls]]
1097 who = "George Burgess IV <gbiv@google.com>"
1098 criteria = "safe-to-run"
1099 version = "1.0.0"
1100 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1102 [[audits.google.audits.serde_urlencoded]]
1103 who = "ChromeOS"
1104 criteria = "safe-to-run"
1105 version = "0.7.1"
1106 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1108 [[audits.google.audits.tokio-stream]]
1109 who = "David Koloski <dkoloski@google.com>"
1110 criteria = "safe-to-deploy"
1111 version = "0.1.11"
1112 notes = "Reviewed on https://fxrev.dev/804724"
1113 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1115 [[audits.google.audits.tower-service]]
1116 who = "ChromeOS"
1117 criteria = "safe-to-run"
1118 version = "0.3.2"
1119 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1121 [[audits.google.audits.tracing]]
1122 who = "ChromeOS"
1123 criteria = "safe-to-run"
1124 version = "0.1.35"
1125 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1127 [[audits.google.audits.tracing-attributes]]
1128 who = "ChromeOS"
1129 criteria = "safe-to-run"
1130 version = "0.1.22"
1131 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1133 [[audits.google.audits.tracing-core]]
1134 who = "ChromeOS"
1135 criteria = "safe-to-run"
1136 version = "0.1.29"
1137 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1139 [[audits.google.audits.try-lock]]
1140 who = "ChromeOS"
1141 criteria = "safe-to-run"
1142 version = "0.2.3"
1143 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1145 [[audits.google.audits.version_check]]
1146 who = "George Burgess IV <gbiv@google.com>"
1147 criteria = "safe-to-deploy"
1148 version = "0.9.4"
1149 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1151 [[audits.google.audits.want]]
1152 who = "ChromeOS"
1153 criteria = "safe-to-run"
1154 version = "0.3.0"
1155 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1157 [[audits.isrg.wildcard-audits.prio]]
1158 who = "David Cook <dcook@divviup.org>"
1159 criteria = "safe-to-deploy"
1160 user-id = 101233 # le-automaton
1161 start = "2020-09-28"
1162 end = "2024-03-23"
1164 [[audits.isrg.audits.block-buffer]]
1165 who = "David Cook <dcook@divviup.org>"
1166 criteria = "safe-to-deploy"
1167 version = "0.9.0"
1169 [[audits.isrg.audits.keccak]]
1170 who = "David Cook <dcook@divviup.org>"
1171 criteria = "safe-to-deploy"
1172 version = "0.1.2"
1174 [[audits.isrg.audits.once_cell]]
1175 who = "Brandon Pitman <bran@bran.land>"
1176 criteria = "safe-to-deploy"
1177 delta = "1.17.1 -> 1.17.2"
1179 [[audits.isrg.audits.once_cell]]
1180 who = "David Cook <dcook@divviup.org>"
1181 criteria = "safe-to-deploy"
1182 delta = "1.17.2 -> 1.18.0"
1184 [[audits.isrg.audits.rand_core]]
1185 who = "David Cook <dcook@divviup.org>"
1186 criteria = "safe-to-deploy"
1187 version = "0.6.3"
1189 [[audits.isrg.audits.rayon-core]]
1190 who = "Brandon Pitman <bran@bran.land>"
1191 criteria = "safe-to-deploy"
1192 delta = "1.10.2 -> 1.11.0"
1194 [[audits.isrg.audits.sha2]]
1195 who = "David Cook <dcook@divviup.org>"
1196 criteria = "safe-to-deploy"
1197 version = "0.10.2"
1199 [[audits.isrg.audits.sha3]]
1200 who = "David Cook <dcook@divviup.org>"
1201 criteria = "safe-to-deploy"
1202 version = "0.10.6"
1204 [[audits.mozilla.wildcard-audits.zeitstempel]]
1205 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1206 criteria = "safe-to-deploy"
1207 user-id = 48 # Jan-Erik Rediger (badboy)
1208 start = "2021-03-03"
1209 end = "2024-05-10"
1210 notes = "Maintained by me"
1211 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1213 [[audits.mozilla.audits.askama]]
1214 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1215 criteria = "safe-to-deploy"
1216 delta = "0.11.1 -> 0.12.0"
1217 notes = "No new unsafe usage, mostly dependency updates and smaller API changes"
1218 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1220 [[audits.mozilla.audits.askama_derive]]
1221 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1222 criteria = "safe-to-deploy"
1223 delta = "0.11.2 -> 0.12.1"
1224 notes = "Dependency updates, a new toml dependency and some API changes. No unsafe use."
1225 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1227 [[audits.mozilla.audits.basic-toml]]
1228 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1229 criteria = "safe-to-deploy"
1230 version = "0.1.2"
1231 notes = "TOML parser, forked from toml 0.5"
1232 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1234 [[audits.mozilla.audits.either]]
1235 who = "Nika Layzell <nika@thelayzells.com>"
1236 criteria = "safe-to-deploy"
1237 version = "1.6.1"
1238 notes = """
1239 Straightforward crate providing the Either enum and trait implementations with
1240 no unsafe code.
1242 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1244 [[audits.mozilla.audits.lazy_static]]
1245 who = "Nika Layzell <nika@thelayzells.com>"
1246 criteria = "safe-to-deploy"
1247 version = "1.4.0"
1248 notes = "I have read over the macros, and audited the unsafe code."
1249 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1251 [[audits.mozilla.audits.time]]
1252 who = "Kershaw Chang <kershaw@mozilla.com>"
1253 criteria = "safe-to-deploy"
1254 delta = "0.1.45 -> 0.3.17"
1255 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
1257 [[audits.mozilla.audits.time-macros]]
1258 who = "Kershaw Chang <kershaw@mozilla.com>"
1259 criteria = "safe-to-deploy"
1260 version = "0.2.6"
1261 aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"