supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "1.1.0"
   6 when = "2023-09-18"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.anstyle]]
  12 version = "1.0.3"
  13 when = "2023-09-11"
  14 user-id = 6743
  15 user-login = "epage"
  16 user-name = "Ed Page"
  17
  18 [[publisher.arbitrary]]
  19 version = "1.3.0"
  20 when = "2023-03-13"
  21 user-id = 696
  22 user-login = "fitzgen"
  23 user-name = "Nick Fitzgerald"
  24
  25 [[publisher.async-trait]]
  26 version = "0.1.68"
  27 when = "2023-03-24"
  28 user-id = 3618
  29 user-login = "dtolnay"
  30 user-name = "David Tolnay"
  31
  32 [[publisher.atomic]]
  33 version = "0.4.6"
  34 when = "2020-07-05"
  35 user-id = 2915
  36 user-login = "Amanieu"
  37 user-name = "Amanieu d'Antras"
  38
  39 [[publisher.audio_thread_priority]]
  40 version = "0.31.0"
  41 when = "2024-01-17"
  42 user-id = 1258
  43 user-login = "padenot"
  44 user-name = "Paul Adenot"
  45
  46 [[publisher.authenticator]]
  47 version = "0.4.0-alpha.24"
  48 when = "2023-11-29"
  49 user-id = 175410
  50 user-login = "jschanck"
  51 user-name = "John Schanck"
  52
  53 [[publisher.bhttp]]
  54 version = "0.3.1"
  55 when = "2023-02-23"
  56 user-id = 128763
  57 user-login = "martinthomson"
  58 user-name = "Martin Thomson"
  59
  60 [[publisher.byteorder]]
  61 version = "1.4.3"
  62 when = "2021-03-10"
  63 user-id = 189
  64 user-login = "BurntSushi"
  65 user-name = "Andrew Gallant"
  66
  67 [[publisher.bytes]]
  68 version = "1.4.0"
  69 when = "2023-01-31"
  70 user-id = 6741
  71 user-login = "Darksonn"
  72 user-name = "Alice Ryhl"
  73
  74 [[publisher.cc]]
  75 version = "1.0.89"
  76 when = "2024-03-04"
  77 user-id = 2915
  78 user-login = "Amanieu"
  79 user-name = "Amanieu d'Antras"
  80
  81 [[publisher.cexpr]]
  82 version = "0.6.0"
  83 when = "2021-10-11"
  84 user-id = 3788
  85 user-login = "emilio"
  86 user-name = "Emilio Cobos Álvarez"
  87
  88 [[publisher.clap]]
  89 version = "4.4.5"
  90 when = "2023-09-25"
  91 user-id = 6743
  92 user-login = "epage"
  93 user-name = "Ed Page"
  94
  95 [[publisher.clap_builder]]
  96 version = "4.4.5"
  97 when = "2023-09-25"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.clap_derive]]
 103 version = "4.4.2"
 104 when = "2023-08-31"
 105 user-id = 6743
 106 user-login = "epage"
 107 user-name = "Ed Page"
 108
 109 [[publisher.clap_lex]]
 110 version = "0.5.1"
 111 when = "2023-08-24"
 112 user-id = 6743
 113 user-login = "epage"
 114 user-name = "Ed Page"
 115
 116 [[publisher.core-foundation]]
 117 version = "0.9.3"
 118 when = "2022-02-07"
 119 user-id = 5946
 120 user-login = "jrmuizel"
 121 user-name = "Jeff Muizelaar"
 122
 123 [[publisher.core-foundation-sys]]
 124 version = "0.8.3"
 125 when = "2021-10-12"
 126 user-id = 2396
 127 user-login = "jdm"
 128 user-name = "Josh Matthews"
 129
 130 [[publisher.core-graphics]]
 131 version = "0.22.3"
 132 when = "2021-11-02"
 133 user-id = 5946
 134 user-login = "jrmuizel"
 135 user-name = "Jeff Muizelaar"
 136
 137 [[publisher.core-graphics-types]]
 138 version = "0.1.1"
 139 when = "2020-09-15"
 140 user-id = 2396
 141 user-login = "jdm"
 142 user-name = "Josh Matthews"
 143
 144 [[publisher.core-text]]
 145 version = "19.2.0"
 146 when = "2021-02-14"
 147 user-id = 5946
 148 user-login = "jrmuizel"
 149 user-name = "Jeff Muizelaar"
 150
 151 [[publisher.derive_arbitrary]]
 152 version = "1.3.0"
 153 when = "2023-03-13"
 154 user-id = 696
 155 user-login = "fitzgen"
 156 user-name = "Nick Fitzgerald"
 157
 158 [[publisher.dogear]]
 159 version = "0.4.0"
 160 when = "2019-09-16"
 161 user-id = 27901
 162 user-login = "linabutler"
 163 user-name = "Lina Butler"
 164
 165 [[publisher.dtoa]]
 166 version = "0.4.8"
 167 when = "2021-03-29"
 168 user-id = 3618
 169 user-login = "dtolnay"
 170 user-name = "David Tolnay"
 171
 172 [[publisher.encoding_rs]]
 173 version = "0.8.33"
 174 when = "2023-08-23"
 175 user-id = 4484
 176 user-login = "hsivonen"
 177 user-name = "Henri Sivonen"
 178
 179 [[publisher.errno]]
 180 version = "0.3.8"
 181 when = "2023-11-28"
 182 user-id = 6825
 183 user-login = "sunfishcode"
 184 user-name = "Dan Gohman"
 185
 186 [[publisher.etagere]]
 187 version = "0.2.7"
 188 when = "2022-05-04"
 189 user-id = 1281
 190 user-login = "nical"
 191 user-name = "Nicolas Silva"
 192
 193 [[publisher.euclid]]
 194 version = "0.22.7"
 195 when = "2022-04-04"
 196 user-id = 1281
 197 user-login = "nical"
 198 user-name = "Nicolas Silva"
 199
 200 [[publisher.flate2]]
 201 version = "1.0.26"
 202 when = "2023-04-28"
 203 user-id = 4333
 204 user-login = "joshtriplett"
 205 user-name = "Josh Triplett"
 206
 207 [[publisher.freetype]]
 208 version = "0.7.0"
 209 when = "2020-07-14"
 210 user-id = 2396
 211 user-login = "jdm"
 212 user-name = "Josh Matthews"
 213
 214 [[publisher.gleam]]
 215 version = "0.15.0"
 216 when = "2023-04-21"
 217 user-id = 5946
 218 user-login = "jrmuizel"
 219 user-name = "Jeff Muizelaar"
 220
 221 [[publisher.glean]]
 222 version = "58.0.0"
 223 when = "2024-02-29"
 224 user-id = 48
 225 user-login = "badboy"
 226 user-name = "Jan-Erik Rediger"
 227
 228 [[publisher.glean-core]]
 229 version = "58.0.0"
 230 when = "2024-02-29"
 231 user-id = 48
 232 user-login = "badboy"
 233 user-name = "Jan-Erik Rediger"
 234
 235 [[publisher.glslopt]]
 236 version = "0.1.9"
 237 when = "2021-03-17"
 238 user-id = 84794
 239 user-login = "jamienicol"
 240 user-name = "Jamie Nicol"
 241
 242 [[publisher.glslopt]]
 243 version = "0.1.10"
 244 when = "2024-02-13"
 245 user-id = 84794
 246 user-login = "jamienicol"
 247 user-name = "Jamie Nicol"
 248
 249 [[publisher.h2]]
 250 version = "0.3.22"
 251 when = "2023-11-15"
 252 user-id = 359
 253 user-login = "seanmonstar"
 254 user-name = "Sean McArthur"
 255
 256 [[publisher.headers]]
 257 version = "0.3.9"
 258 when = "2023-08-31"
 259 user-id = 359
 260 user-login = "seanmonstar"
 261 user-name = "Sean McArthur"
 262
 263 [[publisher.httparse]]
 264 version = "1.8.0"
 265 when = "2022-08-30"
 266 user-id = 359
 267 user-login = "seanmonstar"
 268 user-name = "Sean McArthur"
 269
 270 [[publisher.indexmap]]
 271 version = "1.9.3"
 272 when = "2023-03-24"
 273 user-id = 539
 274 user-login = "cuviper"
 275 user-name = "Josh Stone"
 276
 277 [[publisher.inherent]]
 278 version = "1.0.7"
 279 when = "2023-03-25"
 280 user-id = 3618
 281 user-login = "dtolnay"
 282 user-name = "David Tolnay"
 283
 284 [[publisher.iovec]]
 285 version = "0.1.4"
 286 when = "2019-10-09"
 287 user-id = 10
 288 user-login = "carllerche"
 289 user-name = "Carl Lerche"
 290
 291 [[publisher.itoa]]
 292 version = "1.0.5"
 293 when = "2022-12-17"
 294 user-id = 3618
 295 user-login = "dtolnay"
 296 user-name = "David Tolnay"
 297
 298 [[publisher.jobserver]]
 299 version = "0.1.25"
 300 when = "2022-09-23"
 301 user-id = 1
 302 user-login = "alexcrichton"
 303 user-name = "Alex Crichton"
 304
 305 [[publisher.libc]]
 306 version = "0.2.152"
 307 when = "2024-01-07"
 308 user-id = 51017
 309 user-login = "JohnTitor"
 310 user-name = "Yuki Okushi"
 311
 312 [[publisher.linux-raw-sys]]
 313 version = "0.4.12"
 314 when = "2023-11-30"
 315 user-id = 6825
 316 user-login = "sunfishcode"
 317 user-name = "Dan Gohman"
 318
 319 [[publisher.lock_api]]
 320 version = "0.4.9"
 321 when = "2022-09-20"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.memchr]]
 327 version = "2.5.0"
 328 when = "2022-04-30"
 329 user-id = 189
 330 user-login = "BurntSushi"
 331 user-name = "Andrew Gallant"
 332
 333 [[publisher.mime]]
 334 version = "0.3.16"
 335 when = "2020-01-07"
 336 user-id = 359
 337 user-login = "seanmonstar"
 338 user-name = "Sean McArthur"
 339
 340 [[publisher.mio]]
 341 version = "0.6.21"
 342 when = "2019-11-27"
 343 user-id = 10
 344 user-login = "carllerche"
 345 user-name = "Carl Lerche"
 346
 347 [[publisher.nss-gk-api]]
 348 version = "0.3.0"
 349 when = "2023-06-14"
 350 user-id = 175410
 351 user-login = "jschanck"
 352 user-name = "John Schanck"
 353
 354 [[publisher.num_cpus]]
 355 version = "1.15.0"
 356 when = "2022-12-20"
 357 user-id = 359
 358 user-login = "seanmonstar"
 359 user-name = "Sean McArthur"
 360
 361 [[publisher.ohttp]]
 362 version = "0.3.1"
 363 when = "2023-02-23"
 364 user-id = 128763
 365 user-login = "martinthomson"
 366 user-name = "Martin Thomson"
 367
 368 [[publisher.ordered-float]]
 369 version = "3.4.0"
 370 when = "2022-11-06"
 371 user-id = 2017
 372 user-login = "mbrubeck"
 373 user-name = "Matt Brubeck"
 374
 375 [[publisher.parking_lot]]
 376 version = "0.12.1"
 377 when = "2022-05-31"
 378 user-id = 2915
 379 user-login = "Amanieu"
 380 user-name = "Amanieu d'Antras"
 381
 382 [[publisher.parking_lot_core]]
 383 version = "0.9.9"
 384 when = "2023-10-17"
 385 user-id = 2915
 386 user-login = "Amanieu"
 387 user-name = "Amanieu d'Antras"
 388
 389 [[publisher.paste]]
 390 version = "1.0.11"
 391 when = "2022-12-17"
 392 user-id = 3618
 393 user-login = "dtolnay"
 394 user-name = "David Tolnay"
 395
 396 [[publisher.presser]]
 397 version = "0.3.1"
 398 when = "2022-10-16"
 399 user-id = 52553
 400 user-login = "embark-studios"
 401
 402 [[publisher.prio]]
 403 version = "0.15.3"
 404 when = "2023-10-03"
 405 user-id = 213776
 406 user-login = "divviup-github-automation"
 407
 408 [[publisher.proc-macro2]]
 409 version = "1.0.74"
 410 when = "2024-01-02"
 411 user-id = 3618
 412 user-login = "dtolnay"
 413 user-name = "David Tolnay"
 414
 415 [[publisher.qcms]]
 416 version = "0.3.0"
 417 when = "2024-01-09"
 418 user-id = 5946
 419 user-login = "jrmuizel"
 420 user-name = "Jeff Muizelaar"
 421
 422 [[publisher.quote]]
 423 version = "1.0.35"
 424 when = "2024-01-02"
 425 user-id = 3618
 426 user-login = "dtolnay"
 427 user-name = "David Tolnay"
 428
 429 [[publisher.regex]]
 430 version = "1.9.4"
 431 when = "2023-08-26"
 432 user-id = 189
 433 user-login = "BurntSushi"
 434 user-name = "Andrew Gallant"
 435
 436 [[publisher.regex-automata]]
 437 version = "0.3.7"
 438 when = "2023-08-26"
 439 user-id = 189
 440 user-login = "BurntSushi"
 441 user-name = "Andrew Gallant"
 442
 443 [[publisher.regex-syntax]]
 444 version = "0.7.5"
 445 when = "2023-08-26"
 446 user-id = 189
 447 user-login = "BurntSushi"
 448 user-name = "Andrew Gallant"
 449
 450 [[publisher.rust_cascade]]
 451 version = "1.5.0"
 452 when = "2023-04-05"
 453 user-id = 57462
 454 user-login = "mozkeeler"
 455 user-name = "Dana Keeler"
 456
 457 [[publisher.rustix]]
 458 version = "0.38.28"
 459 when = "2023-12-09"
 460 user-id = 6825
 461 user-login = "sunfishcode"
 462 user-name = "Dan Gohman"
 463
 464 [[publisher.ryu]]
 465 version = "1.0.12"
 466 when = "2022-12-17"
 467 user-id = 3618
 468 user-login = "dtolnay"
 469 user-name = "David Tolnay"
 470
 471 [[publisher.same-file]]
 472 version = "1.0.6"
 473 when = "2020-01-11"
 474 user-id = 189
 475 user-login = "BurntSushi"
 476 user-name = "Andrew Gallant"
 477
 478 [[publisher.scopeguard]]
 479 version = "1.1.0"
 480 when = "2020-02-16"
 481 user-id = 2915
 482 user-login = "Amanieu"
 483 user-name = "Amanieu d'Antras"
 484
 485 [[publisher.serde]]
 486 version = "1.0.195"
 487 when = "2024-01-06"
 488 user-id = 3618
 489 user-login = "dtolnay"
 490 user-name = "David Tolnay"
 491
 492 [[publisher.serde]]
 493 version = "1.0.197"
 494 when = "2024-02-20"
 495 user-id = 3618
 496 user-login = "dtolnay"
 497 user-name = "David Tolnay"
 498
 499 [[publisher.serde_bytes]]
 500 version = "0.11.9"
 501 when = "2023-02-05"
 502 user-id = 3618
 503 user-login = "dtolnay"
 504 user-name = "David Tolnay"
 505
 506 [[publisher.serde_derive]]
 507 version = "1.0.195"
 508 when = "2024-01-06"
 509 user-id = 3618
 510 user-login = "dtolnay"
 511 user-name = "David Tolnay"
 512
 513 [[publisher.serde_derive]]
 514 version = "1.0.197"
 515 when = "2024-02-20"
 516 user-id = 3618
 517 user-login = "dtolnay"
 518 user-name = "David Tolnay"
 519
 520 [[publisher.serde_json]]
 521 version = "1.0.93"
 522 when = "2023-02-08"
 523 user-id = 3618
 524 user-login = "dtolnay"
 525 user-name = "David Tolnay"
 526
 527 [[publisher.serde_repr]]
 528 version = "0.1.12"
 529 when = "2023-03-18"
 530 user-id = 3618
 531 user-login = "dtolnay"
 532 user-name = "David Tolnay"
 533
 534 [[publisher.serde_yaml]]
 535 version = "0.8.26"
 536 when = "2022-07-16"
 537 user-id = 3618
 538 user-login = "dtolnay"
 539 user-name = "David Tolnay"
 540
 541 [[publisher.smallvec]]
 542 version = "1.11.1"
 543 when = "2023-09-20"
 544 user-id = 2017
 545 user-login = "mbrubeck"
 546 user-name = "Matt Brubeck"
 547
 548 [[publisher.smallvec]]
 549 version = "1.13.1"
 550 when = "2024-01-19"
 551 user-id = 2017
 552 user-login = "mbrubeck"
 553 user-name = "Matt Brubeck"
 554
 555 [[publisher.syn]]
 556 version = "2.0.46"
 557 when = "2024-01-02"
 558 user-id = 3618
 559 user-login = "dtolnay"
 560 user-name = "David Tolnay"
 561
 562 [[publisher.termcolor]]
 563 version = "1.4.1"
 564 when = "2024-01-10"
 565 user-id = 189
 566 user-login = "BurntSushi"
 567 user-name = "Andrew Gallant"
 568
 569 [[publisher.thiserror]]
 570 version = "1.0.56"
 571 when = "2024-01-02"
 572 user-id = 3618
 573 user-login = "dtolnay"
 574 user-name = "David Tolnay"
 575
 576 [[publisher.thiserror]]
 577 version = "1.0.57"
 578 when = "2024-02-11"
 579 user-id = 3618
 580 user-login = "dtolnay"
 581 user-name = "David Tolnay"
 582
 583 [[publisher.thiserror-impl]]
 584 version = "1.0.56"
 585 when = "2024-01-02"
 586 user-id = 3618
 587 user-login = "dtolnay"
 588 user-name = "David Tolnay"
 589
 590 [[publisher.thiserror-impl]]
 591 version = "1.0.57"
 592 when = "2024-02-11"
 593 user-id = 3618
 594 user-login = "dtolnay"
 595 user-name = "David Tolnay"
 596
 597 [[publisher.threadbound]]
 598 version = "0.1.5"
 599 when = "2022-12-17"
 600 user-id = 3618
 601 user-login = "dtolnay"
 602 user-name = "David Tolnay"
 603
 604 [[publisher.tokio-util]]
 605 version = "0.7.2"
 606 when = "2022-05-15"
 607 user-id = 6741
 608 user-login = "Darksonn"
 609 user-name = "Alice Ryhl"
 610
 611 [[publisher.toml]]
 612 version = "0.5.7"
 613 when = "2020-10-11"
 614 user-id = 1
 615 user-login = "alexcrichton"
 616 user-name = "Alex Crichton"
 617
 618 [[publisher.unicode-ident]]
 619 version = "1.0.6"
 620 when = "2022-12-17"
 621 user-id = 3618
 622 user-login = "dtolnay"
 623 user-name = "David Tolnay"
 624
 625 [[publisher.unicode-width]]
 626 version = "0.1.10"
 627 when = "2022-09-13"
 628 user-id = 1139
 629 user-login = "Manishearth"
 630 user-name = "Manish Goregaokar"
 631
 632 [[publisher.unicode-xid]]
 633 version = "0.2.4"
 634 when = "2022-09-15"
 635 user-id = 1139
 636 user-login = "Manishearth"
 637 user-name = "Manish Goregaokar"
 638
 639 [[publisher.uniffi]]
 640 version = "0.25.3"
 641 when = "2023-12-07"
 642 user-id = 127697
 643 user-login = "bendk"
 644
 645 [[publisher.uniffi_bindgen]]
 646 version = "0.25.3"
 647 when = "2023-12-07"
 648 user-id = 127697
 649 user-login = "bendk"
 650
 651 [[publisher.uniffi_build]]
 652 version = "0.25.3"
 653 when = "2023-12-07"
 654 user-id = 127697
 655 user-login = "bendk"
 656
 657 [[publisher.uniffi_checksum_derive]]
 658 version = "0.25.3"
 659 when = "2023-12-07"
 660 user-id = 127697
 661 user-login = "bendk"
 662
 663 [[publisher.uniffi_core]]
 664 version = "0.25.3"
 665 when = "2023-12-07"
 666 user-id = 127697
 667 user-login = "bendk"
 668
 669 [[publisher.uniffi_macros]]
 670 version = "0.25.3"
 671 when = "2023-12-07"
 672 user-id = 127697
 673 user-login = "bendk"
 674
 675 [[publisher.uniffi_meta]]
 676 version = "0.25.3"
 677 when = "2023-12-07"
 678 user-id = 127697
 679 user-login = "bendk"
 680
 681 [[publisher.uniffi_testing]]
 682 version = "0.25.3"
 683 when = "2023-12-07"
 684 user-id = 127697
 685 user-login = "bendk"
 686
 687 [[publisher.uniffi_udl]]
 688 version = "0.25.3"
 689 when = "2023-12-07"
 690 user-id = 127697
 691 user-login = "bendk"
 692
 693 [[publisher.utf8_iter]]
 694 version = "1.0.3"
 695 when = "2022-09-09"
 696 user-id = 4484
 697 user-login = "hsivonen"
 698 user-name = "Henri Sivonen"
 699
 700 [[publisher.walkdir]]
 701 version = "2.3.2"
 702 when = "2021-03-22"
 703 user-id = 189
 704 user-login = "BurntSushi"
 705 user-name = "Andrew Gallant"
 706
 707 [[publisher.warp]]
 708 version = "0.3.6"
 709 when = "2023-09-27"
 710 user-id = 359
 711 user-login = "seanmonstar"
 712 user-name = "Sean McArthur"
 713
 714 [[publisher.wasi]]
 715 version = "0.11.0+wasi-snapshot-preview1"
 716 when = "2022-01-19"
 717 user-id = 1
 718 user-login = "alexcrichton"
 719 user-name = "Alex Crichton"
 720
 721 [[publisher.wasm-encoder]]
 722 version = "0.40.0"
 723 when = "2024-01-24"
 724 user-id = 1
 725 user-login = "alexcrichton"
 726 user-name = "Alex Crichton"
 727
 728 [[publisher.wasm-smith]]
 729 version = "0.15.0"
 730 when = "2024-01-24"
 731 user-id = 1
 732 user-login = "alexcrichton"
 733 user-name = "Alex Crichton"
 734
 735 [[publisher.wast]]
 736 version = "70.0.1"
 737 when = "2024-01-24"
 738 user-id = 1
 739 user-login = "alexcrichton"
 740 user-name = "Alex Crichton"
 741
 742 [[publisher.winapi-util]]
 743 version = "0.1.5"
 744 when = "2020-04-20"
 745 user-id = 189
 746 user-login = "BurntSushi"
 747 user-name = "Andrew Gallant"
 748
 749 [[publisher.windows]]
 750 version = "0.52.0"
 751 when = "2023-11-15"
 752 user-id = 64539
 753 user-login = "kennykerr"
 754 user-name = "Kenny Kerr"
 755
 756 [[publisher.windows-core]]
 757 version = "0.52.0"
 758 when = "2023-11-15"
 759 user-id = 64539
 760 user-login = "kennykerr"
 761 user-name = "Kenny Kerr"
 762
 763 [[publisher.windows-sys]]
 764 version = "0.52.0"
 765 when = "2023-11-15"
 766 user-id = 64539
 767 user-login = "kennykerr"
 768 user-name = "Kenny Kerr"
 769
 770 [[publisher.zeitstempel]]
 771 version = "0.1.1"
 772 when = "2021-03-18"
 773 user-id = 48
 774 user-login = "badboy"
 775 user-name = "Jan-Erik Rediger"
 776
 777 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 778 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 779 criteria = "safe-to-deploy"
 780 user-id = 696 # Nick Fitzgerald (fitzgen)
 781 start = "2020-01-14"
 782 end = "2024-04-21"
 783 notes = "I am an author of this crate."
 784
 785 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 786 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 787 criteria = "safe-to-deploy"
 788 user-id = 696 # Nick Fitzgerald (fitzgen)
 789 start = "2020-01-14"
 790 end = "2024-04-27"
 791 notes = "I am an author of this crate"
 792
 793 [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
 794 who = "Alex Crichton <alex@alexcrichton.com>"
 795 criteria = "safe-to-deploy"
 796 user-id = 1 # Alex Crichton (alexcrichton)
 797 start = "2020-12-11"
 798 end = "2024-04-14"
 799 notes = """
 800 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 801 repository of which I'm one of the primary maintainers and publishers for.
 802 I am employed by a member of the Bytecode Alliance and plan to continue doing
 803 so and will actively maintain this crate over time.
 804 """
 805
 806 [[audits.bytecode-alliance.wildcard-audits.wasm-smith]]
 807 who = "Alex Crichton <alex@alexcrichton.com>"
 808 criteria = "safe-to-deploy"
 809 user-id = 1 # Alex Crichton (alexcrichton)
 810 start = "2020-09-03"
 811 end = "2024-04-14"
 812 notes = """
 813 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 814 repository of which I'm one of the primary maintainers and publishers for.
 815 I am employed by a member of the Bytecode Alliance and plan to continue doing
 816 so and will actively maintain this crate over time.
 817 """
 818
 819 [[audits.bytecode-alliance.wildcard-audits.wast]]
 820 who = "Alex Crichton <alex@alexcrichton.com>"
 821 criteria = "safe-to-deploy"
 822 user-id = 1 # Alex Crichton (alexcrichton)
 823 start = "2019-10-16"
 824 end = "2024-04-14"
 825 notes = """
 826 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 827 repository of which I'm one of the primary maintainers and publishers for.
 828 I am employed by a member of the Bytecode Alliance and plan to continue doing
 829 so and will actively maintain this crate over time.
 830 """
 831
 832 [[audits.bytecode-alliance.audits.adler]]
 833 who = "Alex Crichton <alex@alexcrichton.com>"
 834 criteria = "safe-to-deploy"
 835 version = "1.0.2"
 836 notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
 837
 838 [[audits.bytecode-alliance.audits.arrayref]]
 839 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 840 criteria = "safe-to-deploy"
 841 version = "0.3.6"
 842 notes = """
 843 Unsafe code, but its logic looks good to me. Necessary given what it is
 844 doing. Well tested, has quickchecks.
 845 """
 846
 847 [[audits.bytecode-alliance.audits.arrayvec]]
 848 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 849 criteria = "safe-to-deploy"
 850 version = "0.7.2"
 851 notes = """
 852 Well documented invariants, good assertions for those invariants in unsafe code,
 853 and tested with MIRI to boot. LGTM.
 854 """
 855
 856 [[audits.bytecode-alliance.audits.base64]]
 857 who = "Pat Hickey <phickey@fastly.com>"
 858 criteria = "safe-to-deploy"
 859 version = "0.21.0"
 860 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 861
 862 [[audits.bytecode-alliance.audits.bitflags]]
 863 who = "Jamey Sharp <jsharp@fastly.com>"
 864 criteria = "safe-to-deploy"
 865 delta = "2.1.0 -> 2.2.1"
 866 notes = """
 867 This version adds unsafe impls of traits from the bytemuck crate when built
 868 with that library enabled, but I believe the impls satisfy the documented
 869 safety requirements for bytemuck. The other changes are minor.
 870 """
 871
 872 [[audits.bytecode-alliance.audits.bitflags]]
 873 who = "Alex Crichton <alex@alexcrichton.com>"
 874 criteria = "safe-to-deploy"
 875 delta = "2.3.2 -> 2.3.3"
 876 notes = """
 877 Nothing outside the realm of what one would expect from a bitflags generator,
 878 all as expected.
 879 """
 880
 881 [[audits.bytecode-alliance.audits.block-buffer]]
 882 who = "Benjamin Bouvier <public@benj.me>"
 883 criteria = "safe-to-deploy"
 884 delta = "0.9.0 -> 0.10.2"
 885
 886 [[audits.bytecode-alliance.audits.bumpalo]]
 887 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 888 criteria = "safe-to-deploy"
 889 version = "3.11.1"
 890 notes = "I am the author of this crate."
 891
 892 [[audits.bytecode-alliance.audits.cargo-platform]]
 893 who = "Pat Hickey <phickey@fastly.com>"
 894 criteria = "safe-to-deploy"
 895 version = "0.1.2"
 896 notes = "no build, no ambient capabilities, no unsafe"
 897
 898 [[audits.bytecode-alliance.audits.cc]]
 899 who = "Alex Crichton <alex@alexcrichton.com>"
 900 criteria = "safe-to-deploy"
 901 version = "1.0.73"
 902 notes = "I am the author of this crate."
 903
 904 [[audits.bytecode-alliance.audits.cfg-if]]
 905 who = "Alex Crichton <alex@alexcrichton.com>"
 906 criteria = "safe-to-deploy"
 907 version = "1.0.0"
 908 notes = "I am the author of this crate."
 909
 910 [[audits.bytecode-alliance.audits.codespan-reporting]]
 911 who = "Jamey Sharp <jsharp@fastly.com>"
 912 criteria = "safe-to-deploy"
 913 version = "0.11.1"
 914 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 915
 916 [[audits.bytecode-alliance.audits.cpufeatures]]
 917 who = "Alex Crichton <alex@alexcrichton.com>"
 918 criteria = "safe-to-deploy"
 919 delta = "0.2.2 -> 0.2.7"
 920 notes = """
 921 This is a minor update that looks to add some more detected CPU features and
 922 various other minor portability fixes such as MIRI support.
 923 """
 924
 925 [[audits.bytecode-alliance.audits.crypto-common]]
 926 who = "Benjamin Bouvier <public@benj.me>"
 927 criteria = "safe-to-deploy"
 928 version = "0.1.3"
 929
 930 [[audits.bytecode-alliance.audits.fallible-iterator]]
 931 who = "Alex Crichton <alex@alexcrichton.com>"
 932 criteria = "safe-to-deploy"
 933 delta = "0.2.0 -> 0.3.0"
 934 notes = """
 935 This major version update has a few minor breaking changes but everything
 936 this crate has to do with iterators and `Result` and such. No `unsafe` or
 937 anything like that, all looks good.
 938 """
 939
 940 [[audits.bytecode-alliance.audits.foreign-types]]
 941 who = "Pat Hickey <phickey@fastly.com>"
 942 criteria = "safe-to-deploy"
 943 version = "0.3.2"
 944 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 945
 946 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 947 who = "Pat Hickey <phickey@fastly.com>"
 948 criteria = "safe-to-deploy"
 949 version = "0.1.1"
 950
 951 [[audits.bytecode-alliance.audits.futures-channel]]
 952 who = "Pat Hickey <phickey@fastly.com>"
 953 criteria = "safe-to-deploy"
 954 version = "0.3.27"
 955 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 956
 957 [[audits.bytecode-alliance.audits.futures-core]]
 958 who = "Pat Hickey <phickey@fastly.com>"
 959 criteria = "safe-to-deploy"
 960 version = "0.3.27"
 961 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 962
 963 [[audits.bytecode-alliance.audits.futures-executor]]
 964 who = "Pat Hickey <phickey@fastly.com>"
 965 criteria = "safe-to-deploy"
 966 version = "0.3.27"
 967 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 968
 969 [[audits.bytecode-alliance.audits.futures-io]]
 970 who = "Pat Hickey <phickey@fastly.com>"
 971 criteria = "safe-to-deploy"
 972 version = "0.3.27"
 973
 974 [[audits.bytecode-alliance.audits.futures-sink]]
 975 who = "Pat Hickey <phickey@fastly.com>"
 976 criteria = "safe-to-deploy"
 977 version = "0.3.27"
 978
 979 [[audits.bytecode-alliance.audits.heck]]
 980 who = "Alex Crichton <alex@alexcrichton.com>"
 981 criteria = "safe-to-deploy"
 982 version = "0.4.0"
 983 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 984
 985 [[audits.bytecode-alliance.audits.id-arena]]
 986 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 987 criteria = "safe-to-deploy"
 988 version = "2.2.1"
 989 notes = "I am the author of this crate."
 990
 991 [[audits.bytecode-alliance.audits.idna]]
 992 who = "Alex Crichton <alex@alexcrichton.com>"
 993 criteria = "safe-to-deploy"
 994 version = "0.3.0"
 995 notes = """
 996 This is a crate without unsafe code or usage of the standard library. The large
 997 size of this crate comes from the large generated unicode tables file. This
 998 crate is broadly used throughout the ecosystem and does not contain anything
 999 suspicious.
1000 """
1001
1002 [[audits.bytecode-alliance.audits.leb128]]
1003 who = "Nick Fitzgerald <fitzgen@gmail.com>"
1004 criteria = "safe-to-deploy"
1005 version = "0.2.5"
1006 notes = "I am the author of this crate."
1007
1008 [[audits.bytecode-alliance.audits.memoffset]]
1009 who = "Alex Crichton <alex@alexcrichton.com>"
1010 criteria = "safe-to-deploy"
1011 delta = "0.7.1 -> 0.8.0"
1012 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
1013
1014 [[audits.bytecode-alliance.audits.miniz_oxide]]
1015 who = "Alex Crichton <alex@alexcrichton.com>"
1016 criteria = "safe-to-deploy"
1017 version = "0.7.1"
1018 notes = """
1019 This crate is a Rust implementation of zlib compression/decompression and has
1020 been used by default by the Rust standard library for quite some time. It's also
1021 a default dependency of the popular `backtrace` crate for decompressing debug
1022 information. This crate forbids unsafe code and does not otherwise access system
1023 resources. It's originally a port of the `miniz.c` library as well, and given
1024 its own longevity should be relatively hardened against some of the more common
1025 compression-related issues.
1026 """
1027
1028 [[audits.bytecode-alliance.audits.mio]]
1029 who = "Alex Crichton <alex@alexcrichton.com>"
1030 criteria = "safe-to-deploy"
1031 delta = "0.8.6 -> 0.8.8"
1032 notes = "Mostly OS portability updates along with some minor bugfixes."
1033
1034 [[audits.bytecode-alliance.audits.object]]
1035 who = "Alex Crichton <alex@alexcrichton.com>"
1036 criteria = "safe-to-deploy"
1037 delta = "0.30.3 -> 0.31.1"
1038 notes = "A large-ish update to the crate but nothing out of the ordering. Support for new formats like xcoff, new constants, minor refactorings, etc. Nothing out of the ordinary."
1039
1040 [[audits.bytecode-alliance.audits.object]]
1041 who = "Alex Crichton <alex@alexcrichton.com>"
1042 criteria = "safe-to-deploy"
1043 delta = "0.31.1 -> 0.32.0"
1044 notes = "Various new features and refactorings as one would expect from an object parsing crate, all looks good."
1045
1046 [[audits.bytecode-alliance.audits.percent-encoding]]
1047 who = "Alex Crichton <alex@alexcrichton.com>"
1048 criteria = "safe-to-deploy"
1049 version = "2.2.0"
1050 notes = """
1051 This crate is a single-file crate that does what it says on the tin. There are
1052 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
1053 as correct and otherwise this crate is good to go.
1054 """
1055
1056 [[audits.bytecode-alliance.audits.pin-utils]]
1057 who = "Pat Hickey <phickey@fastly.com>"
1058 criteria = "safe-to-deploy"
1059 version = "0.1.0"
1060
1061 [[audits.bytecode-alliance.audits.pkg-config]]
1062 who = "Pat Hickey <phickey@fastly.com>"
1063 criteria = "safe-to-deploy"
1064 version = "0.3.25"
1065 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
1066
1067 [[audits.bytecode-alliance.audits.rustc-demangle]]
1068 who = "Alex Crichton <alex@alexcrichton.com>"
1069 criteria = "safe-to-deploy"
1070 version = "0.1.21"
1071 notes = "I am the author of this crate."
1072
1073 [[audits.bytecode-alliance.audits.semver]]
1074 who = "Pat Hickey <phickey@fastly.com>"
1075 criteria = "safe-to-deploy"
1076 version = "1.0.17"
1077 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
1078
1079 [[audits.bytecode-alliance.audits.slab]]
1080 who = "Pat Hickey <phickey@fastly.com>"
1081 criteria = "safe-to-deploy"
1082 version = "0.4.6"
1083 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
1084
1085 [[audits.bytecode-alliance.audits.socket2]]
1086 who = "Alex Crichton <alex@alexcrichton.com>"
1087 criteria = "safe-to-deploy"
1088 delta = "0.4.7 -> 0.4.9"
1089 notes = "Minor OS compat updates but otherwise nothing major here."
1090
1091 [[audits.bytecode-alliance.audits.tempfile]]
1092 who = "Pat Hickey <phickey@fastly.com>"
1093 criteria = "safe-to-deploy"
1094 delta = "3.3.0 -> 3.5.0"
1095
1096 [[audits.bytecode-alliance.audits.tempfile]]
1097 who = "Alex Crichton <alex@alexcrichton.com>"
1098 criteria = "safe-to-deploy"
1099 delta = "3.5.0 -> 3.6.0"
1100 notes = "Dependency updates and new optimized trait implementations, but otherwise everything looks normal."
1101
1102 [[audits.bytecode-alliance.audits.unicase]]
1103 who = "Alex Crichton <alex@alexcrichton.com>"
1104 criteria = "safe-to-deploy"
1105 version = "2.6.0"
1106 notes = """
1107 This crate contains no `unsafe` code and no unnecessary use of the standard
1108 library.
1109 """
1110
1111 [[audits.bytecode-alliance.audits.unicode-bidi]]
1112 who = "Alex Crichton <alex@alexcrichton.com>"
1113 criteria = "safe-to-deploy"
1114 version = "0.3.8"
1115 notes = """
1116 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
1117 does not attempt to out of the bounds of what it's already supposed to be doing.
1118 """
1119
1120 [[audits.bytecode-alliance.audits.unicode-normalization]]
1121 who = "Alex Crichton <alex@alexcrichton.com>"
1122 criteria = "safe-to-deploy"
1123 version = "0.1.19"
1124 notes = """
1125 This crate contains one usage of `unsafe` which I have manually checked to see
1126 it as correct. This crate's size comes in large part due to the generated
1127 unicode tables that it contains. This crate is additionally widely used
1128 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
1129 and nothing suspicious.
1130 """
1131
1132 [[audits.embark-studios.wildcard-audits.presser]]
1133 who = "Gray Olson <opensource@embark-studios.com>"
1134 criteria = "safe-to-deploy"
1135 user-id = 52553 # embark-studios
1136 start = "2021-01-01"
1137 end = "2024-05-23"
1138 notes = """
1139 Small crate with no dependencies and no ambient capabilities. The safe interface of the crate
1140 is gated behind unsafe implementation of a core trait, and care must be taken to ensure that
1141 the relevant invariants are guaranteed when doing so. Maintained by the Ark team at Embark
1142 and used in production.
1143 """
1144
1145 [[audits.embark-studios.audits.anyhow]]
1146 who = "Johan Andersson <opensource@embark-studios.com>"
1147 criteria = "safe-to-deploy"
1148 version = "1.0.58"
1149
1150 [[audits.embark-studios.audits.cfg_aliases]]
1151 who = "Johan Andersson <opensource@embark-studios.com>"
1152 criteria = "safe-to-deploy"
1153 version = "0.1.1"
1154 notes = "No unsafe usage or ambient capabilities"
1155
1156 [[audits.embark-studios.audits.derive_more]]
1157 who = "Johan Andersson <opensource@embark-studios.com>"
1158 criteria = "safe-to-deploy"
1159 version = "0.99.17"
1160 notes = "No unsafe usage or ambient capabilities"
1161
1162 [[audits.embark-studios.audits.ident_case]]
1163 who = "Johan Andersson <opensource@embark-studios.com>"
1164 criteria = "safe-to-deploy"
1165 version = "1.0.1"
1166 notes = "No unsafe usage or ambient capabilities"
1167
1168 [[audits.embark-studios.audits.idna]]
1169 who = "Johan Andersson <opensource@embark-studios.com>"
1170 criteria = "safe-to-deploy"
1171 delta = "0.3.0 -> 0.4.0"
1172 notes = "No unsafe usage or ambient capabilities"
1173
1174 [[audits.embark-studios.audits.line-wrap]]
1175 who = "Johan Andersson <opensource@embark-studios.com>"
1176 criteria = "safe-to-deploy"
1177 version = "0.1.1"
1178 notes = "No unsafe usage or ambient capabilities"
1179
1180 [[audits.embark-studios.audits.yaml-rust]]
1181 who = "Johan Andersson <opensource@embark-studios.com>"
1182 criteria = "safe-to-deploy"
1183 version = "0.4.5"
1184 notes = "No unsafe usage or ambient capabilities"
1185
1186 [[audits.google.audits.ash]]
1187 who = "David Koloski <dkoloski@google.com>"
1188 criteria = "safe-to-deploy"
1189 version = "0.37.0+1.3.209"
1190 notes = "Reviewed on https://fxrev.dev/694269"
1191 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1192
1193 [[audits.google.audits.fastrand]]
1194 who = "George Burgess IV <gbiv@google.com>"
1195 criteria = "safe-to-deploy"
1196 version = "1.9.0"
1197 notes = """
1198 `does-not-implement-crypto` is certified because this crate explicitly says
1199 that the RNG here is not cryptographically secure.
1200 """
1201 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1202
1203 [[audits.google.audits.futures]]
1204 who = "George Burgess IV <gbiv@google.com>"
1205 criteria = "safe-to-deploy"
1206 version = "0.3.28"
1207 notes = """
1208 `futures` has no logic other than tests - it simply `pub use`s things from
1209 other crates.
1210 """
1211 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1212
1213 [[audits.google.audits.glob]]
1214 who = "George Burgess IV <gbiv@google.com>"
1215 criteria = "safe-to-deploy"
1216 version = "0.3.1"
1217 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1218
1219 [[audits.google.audits.http]]
1220 who = "ChromeOS"
1221 criteria = "safe-to-run"
1222 version = "0.2.8"
1223 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1224
1225 [[audits.google.audits.http-body]]
1226 who = "ChromeOS"
1227 criteria = "safe-to-run"
1228 version = "0.4.5"
1229 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1230
1231 [[audits.google.audits.httpdate]]
1232 who = "ChromeOS"
1233 criteria = "safe-to-run"
1234 version = "1.0.2"
1235 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1236
1237 [[audits.google.audits.hyper]]
1238 who = "ChromeOS"
1239 criteria = "safe-to-run"
1240 version = "0.14.20"
1241 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1242
1243 [[audits.google.audits.pin-project]]
1244 who = "ChromeOS"
1245 criteria = "safe-to-run"
1246 version = "1.0.12"
1247 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1248
1249 [[audits.google.audits.pin-project-internal]]
1250 who = "ChromeOS"
1251 criteria = "safe-to-run"
1252 version = "1.0.12"
1253 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1254
1255 [[audits.google.audits.pin-project-lite]]
1256 who = "David Koloski <dkoloski@google.com>"
1257 criteria = "safe-to-deploy"
1258 version = "0.2.9"
1259 notes = "Reviewed on https://fxrev.dev/824504"
1260 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1261
1262 [[audits.google.audits.scoped-tls]]
1263 who = "George Burgess IV <gbiv@google.com>"
1264 criteria = "safe-to-run"
1265 version = "1.0.0"
1266 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1267
1268 [[audits.google.audits.serde_urlencoded]]
1269 who = "ChromeOS"
1270 criteria = "safe-to-run"
1271 version = "0.7.1"
1272 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1273
1274 [[audits.google.audits.tokio]]
1275 who = "Vovo Yang <vovoy@google.com>"
1276 criteria = "safe-to-run"
1277 version = "1.29.1"
1278 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1279
1280 [[audits.google.audits.tokio-stream]]
1281 who = "David Koloski <dkoloski@google.com>"
1282 criteria = "safe-to-deploy"
1283 version = "0.1.11"
1284 notes = "Reviewed on https://fxrev.dev/804724"
1285 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1286
1287 [[audits.google.audits.tower-service]]
1288 who = "ChromeOS"
1289 criteria = "safe-to-run"
1290 version = "0.3.2"
1291 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1292
1293 [[audits.google.audits.tracing]]
1294 who = "ChromeOS"
1295 criteria = "safe-to-run"
1296 version = "0.1.35"
1297 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1298
1299 [[audits.google.audits.tracing-attributes]]
1300 who = "ChromeOS"
1301 criteria = "safe-to-run"
1302 version = "0.1.22"
1303 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1304
1305 [[audits.google.audits.tracing-core]]
1306 who = "ChromeOS"
1307 criteria = "safe-to-run"
1308 version = "0.1.29"
1309 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1310
1311 [[audits.google.audits.try-lock]]
1312 who = "ChromeOS"
1313 criteria = "safe-to-run"
1314 version = "0.2.3"
1315 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1316
1317 [[audits.google.audits.version_check]]
1318 who = "George Burgess IV <gbiv@google.com>"
1319 criteria = "safe-to-deploy"
1320 version = "0.9.4"
1321 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1322
1323 [[audits.google.audits.want]]
1324 who = "ChromeOS"
1325 criteria = "safe-to-run"
1326 version = "0.3.0"
1327 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1328
1329 [[audits.isrg.wildcard-audits.prio]]
1330 who = "David Cook <dcook@divviup.org>"
1331 criteria = "safe-to-deploy"
1332 user-id = 213776 # divviup-github-automation
1333 start = "2020-09-28"
1334 end = "2025-02-12"
1335
1336 [[audits.isrg.audits.base64]]
1337 who = "Tim Geoghegan <timg@letsencrypt.org>"
1338 criteria = "safe-to-deploy"
1339 delta = "0.21.0 -> 0.21.1"
1340
1341 [[audits.isrg.audits.base64]]
1342 who = "Brandon Pitman <bran@bran.land>"
1343 criteria = "safe-to-deploy"
1344 delta = "0.21.1 -> 0.21.2"
1345
1346 [[audits.isrg.audits.base64]]
1347 who = "David Cook <dcook@divviup.org>"
1348 criteria = "safe-to-deploy"
1349 delta = "0.21.2 -> 0.21.3"
1350
1351 [[audits.isrg.audits.block-buffer]]
1352 who = "David Cook <dcook@divviup.org>"
1353 criteria = "safe-to-deploy"
1354 version = "0.9.0"
1355
1356 [[audits.isrg.audits.getrandom]]
1357 who = "Tim Geoghegan <timg@letsencrypt.org>"
1358 criteria = "safe-to-deploy"
1359 delta = "0.2.9 -> 0.2.10"
1360 notes = "These changes include some new `unsafe` code for the `emscripten` and `psvita` targets, but all it does is call `libc::getentropy`."
1361
1362 [[audits.isrg.audits.keccak]]
1363 who = "David Cook <dcook@divviup.org>"
1364 criteria = "safe-to-deploy"
1365 version = "0.1.2"
1366
1367 [[audits.isrg.audits.keccak]]
1368 who = "Brandon Pitman <bran@bran.land>"
1369 criteria = "safe-to-deploy"
1370 delta = "0.1.3 -> 0.1.4"
1371
1372 [[audits.isrg.audits.once_cell]]
1373 who = "Brandon Pitman <bran@bran.land>"
1374 criteria = "safe-to-deploy"
1375 delta = "1.17.1 -> 1.17.2"
1376
1377 [[audits.isrg.audits.once_cell]]
1378 who = "David Cook <dcook@divviup.org>"
1379 criteria = "safe-to-deploy"
1380 delta = "1.17.2 -> 1.18.0"
1381
1382 [[audits.isrg.audits.once_cell]]
1383 who = "Brandon Pitman <bran@bran.land>"
1384 criteria = "safe-to-deploy"
1385 delta = "1.18.0 -> 1.19.0"
1386
1387 [[audits.isrg.audits.rand_chacha]]
1388 who = "David Cook <dcook@divviup.org>"
1389 criteria = "safe-to-deploy"
1390 version = "0.3.1"
1391
1392 [[audits.isrg.audits.rand_core]]
1393 who = "David Cook <dcook@divviup.org>"
1394 criteria = "safe-to-deploy"
1395 version = "0.6.3"
1396
1397 [[audits.isrg.audits.rayon-core]]
1398 who = "Brandon Pitman <bran@bran.land>"
1399 criteria = "safe-to-deploy"
1400 delta = "1.10.2 -> 1.11.0"
1401
1402 [[audits.isrg.audits.rayon-core]]
1403 who = "David Cook <dcook@divviup.org>"
1404 criteria = "safe-to-deploy"
1405 delta = "1.11.0 -> 1.12.0"
1406
1407 [[audits.isrg.audits.sha2]]
1408 who = "David Cook <dcook@divviup.org>"
1409 criteria = "safe-to-deploy"
1410 version = "0.10.2"
1411
1412 [[audits.isrg.audits.sha3]]
1413 who = "David Cook <dcook@divviup.org>"
1414 criteria = "safe-to-deploy"
1415 version = "0.10.6"
1416
1417 [[audits.isrg.audits.sha3]]
1418 who = "Brandon Pitman <bran@bran.land>"
1419 criteria = "safe-to-deploy"
1420 delta = "0.10.7 -> 0.10.8"
1421
1422 [[audits.mozilla.wildcard-audits.zeitstempel]]
1423 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1424 criteria = "safe-to-deploy"
1425 user-id = 48 # Jan-Erik Rediger (badboy)
1426 start = "2021-03-03"
1427 end = "2024-05-10"
1428 notes = "Maintained by me"
1429 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1430
1431 [[audits.mozilla.audits.askama]]
1432 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1433 criteria = "safe-to-deploy"
1434 delta = "0.11.1 -> 0.12.0"
1435 notes = "No new unsafe usage, mostly dependency updates and smaller API changes"
1436 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1437
1438 [[audits.mozilla.audits.askama_derive]]
1439 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1440 criteria = "safe-to-deploy"
1441 delta = "0.11.2 -> 0.12.1"
1442 notes = "Dependency updates, a new toml dependency and some API changes. No unsafe use."
1443 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1444
1445 [[audits.mozilla.audits.basic-toml]]
1446 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1447 criteria = "safe-to-deploy"
1448 version = "0.1.2"
1449 notes = "TOML parser, forked from toml 0.5"
1450 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1451
1452 [[audits.mozilla.audits.bitflags]]
1453 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1454 criteria = "safe-to-deploy"
1455 delta = "2.4.0 -> 2.4.1"
1456 notes = "Only allowing new clippy lints"
1457 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1458
1459 [[audits.mozilla.audits.either]]
1460 who = "Nika Layzell <nika@thelayzells.com>"
1461 criteria = "safe-to-deploy"
1462 version = "1.6.1"
1463 notes = """
1464 Straightforward crate providing the Either enum and trait implementations with
1465 no unsafe code.
1466 """
1467 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1468
1469 [[audits.mozilla.audits.lazy_static]]
1470 who = "Nika Layzell <nika@thelayzells.com>"
1471 criteria = "safe-to-deploy"
1472 version = "1.4.0"
1473 notes = "I have read over the macros, and audited the unsafe code."
1474 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1475
1476 [[audits.mozilla.audits.log]]
1477 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1478 criteria = "safe-to-deploy"
1479 delta = "0.4.17 -> 0.4.18"
1480 notes = "One dependency removed, others updated (which we don't rely on), some APIs (which we don't use) changed."
1481 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1482
1483 [[audits.mozilla.audits.log]]
1484 who = "Kagami Sascha Rosylight <krosylight@mozilla.com>"
1485 criteria = "safe-to-deploy"
1486 delta = "0.4.18 -> 0.4.20"
1487 notes = "Only cfg attribute and internal macro changes and module refactorings"
1488 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1489
1490 [[audits.mozilla.audits.rkv]]
1491 who = "Kagami Sascha Rosylight <krosylight@mozilla.com>"
1492 criteria = "safe-to-deploy"
1493 delta = "0.18.4 -> 0.19.0"
1494 notes = "Maintained by Mozilla, no addition of unsafe blocks"
1495 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"