supply-chain/config.toml

   1
   2 # cargo-vet config file
   3
   4 [cargo-vet]
   5 version = "0.9"
   6
   7 [imports.bytecode-alliance]
   8 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
   9
  10 [imports.embark-studios]
  11 url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
  12
  13 [imports.google]
  14 url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
  15
  16 [imports.isrg]
  17 url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"
  18
  19 [imports.mozilla]
  20 url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
  21
  22 [policy.autocfg]
  23 audit-as-crates-io = true
  24 notes = "This is the upstream code plus a few local fixes, see bug 1685697."
  25
  26 [policy.chardetng]
  27 audit-as-crates-io = true
  28 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  29
  30 [policy.chardetng_c]
  31 audit-as-crates-io = true
  32 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  33
  34 [policy.coremidi]
  35 audit-as-crates-io = true
  36 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  37
  38 [policy.cose]
  39 audit-as-crates-io = true
  40 notes = "This is upstream plus a warning fix from bug 1823866."
  41
  42 [policy.cssparser]
  43 audit-as-crates-io = true
  44 notes = "Upstream release plus a couple unpublished changes"
  45
  46 [policy.cssparser-macros]
  47 audit-as-crates-io = true
  48 notes = "Upstream release plus a couple unpublished changes"
  49
  50 [policy.d3d12]
  51 audit-as-crates-io = true
  52 notes = "Part of the wgpu repository, pinned as the rest of wgpu crates."
  53
  54 [policy.firefox-on-glean]
  55 audit-as-crates-io = false
  56 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on firefox-on-glean."
  57
  58 [policy.geckodriver]
  59 audit-as-crates-io = false
  60 criteria = "safe-to-run"
  61 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
  62
  63 [policy.gkrust-gtest]
  64 criteria = "safe-to-run"
  65 notes = "Used for testing."
  66
  67 [policy.gkrust-shared]
  68 dependency-criteria = { tokio-reactor = [], tokio-threadpool = [] }
  69 notes = "The dependencies on tokio-reactor and tokio-threadpools are just a hack to pin the version used by audioipc-{client,server}. Suppress vetting on those for the same reasons behind the policy entries."
  70
  71 [policy.gluesmith]
  72 criteria = "safe-to-run"
  73 notes = "Used for fuzzing."
  74
  75 [policy.http3server]
  76 criteria = "safe-to-run"
  77 notes = "Used for testing."
  78
  79 [policy.icu_capi]
  80 audit-as-crates-io = true
  81 notes = "Patched version of upstream"
  82
  83 [policy.icu_segmenter_data]
  84 audit-as-crates-io = true
  85 notes = "Patched version of upstream"
  86
  87 [policy.l10nregistry]
  88 dependency-criteria = { fluent-testing = "safe-to-run", tokio = "safe-to-run" }
  89 notes = "This crate has two testing-only dependencies which are specified as regular-but-optional rather than a dev-dependencies, because they need to be available to both benchmarks and integration tests."
  90
  91 [policy.libudev-sys]
  92 audit-as-crates-io = false
  93 notes = "This override is an api-compatible fork with an orthogonal implementation."
  94
  95 [policy.malloc_size_of_derive]
  96 audit-as-crates-io = false
  97 notes = "This was originally servo code which Bobby Holley put on crates.io some years ago and that was moved in-tree as first-party code later on."
  98
  99 [policy.marionette]
 100 audit-as-crates-io = false
 101 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 102
 103 [policy.midir]
 104 audit-as-crates-io = true
 105 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
 106
 107 [policy."mio:0.6.23"]
 108 audit-as-crates-io = true
 109 notes = "Version 0.6.23 is a local fork of upstream which just twiddles some dependencies."
 110
 111 [policy."mio:0.8.8@git:9a2ef335c366044ffe73b1c4acabe50a1daefe05"]
 112 audit-as-crates-io = true
 113 notes = "This is 0.8.8 + https://github.com/tokio-rs/mio/commit/eea9e3e0c469480e5c59c01e6c3c7e5fd88f0848."
 114
 115 [policy.mozbuild]
 116 audit-as-crates-io = false
 117 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on mozbuild."
 118
 119 [policy.mozdevice]
 120 audit-as-crates-io = false
 121 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 122
 123 [policy.mozglue-static]
 124 dependency-criteria = { rustc_version = "safe-to-run" }
 125 notes = "The rustc_version dependency is only used in the build script, and does not generate any runtime code"
 126
 127 [policy.mozilla-central-workspace-hack]
 128 audit-as-crates-io = false
 129 criteria = "safe-to-run"
 130 notes = "This is a first-party crate which is also published to crates.io as a convenience for other in-tree crates that depend on it and are published as well. The dependencies from this crate are dependencies of other crates that will get the right criteria through them, but using safe-to-deploy for this one would be too broad."
 131
 132 [policy.mozprofile]
 133 audit-as-crates-io = false
 134 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 135
 136 [policy.mozrunner]
 137 audit-as-crates-io = false
 138 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 139
 140 [policy.mozversion]
 141 audit-as-crates-io = false
 142 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here."
 143
 144 [policy.mp4parse]
 145 audit-as-crates-io = false
 146
 147 [policy.mp4parse_capi]
 148 audit-as-crates-io = false
 149
 150 [policy.naga]
 151 audit-as-crates-io = true
 152 notes = "Part of the wgpu repository, pinned as the rest of wgpu crates."
 153
 154 [policy.peek-poke]
 155 audit-as-crates-io = false
 156
 157 [policy.peek-poke-derive]
 158 audit-as-crates-io = false
 159
 160 [policy.pulse]
 161 audit-as-crates-io = false
 162 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 163
 164 [policy.qcms]
 165 audit-as-crates-io = true
 166 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 167
 168 [policy.rure]
 169 audit-as-crates-io = true
 170 notes = "Identical to upstream, but with cdylib and staticlib targets disabled to avoid unnecessary build artifacts and linker errors."
 171
 172 [policy.selectors]
 173 audit-as-crates-io = true
 174 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 175
 176 [policy.servo_arc]
 177 audit-as-crates-io = true
 178 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 179
 180 [policy.smoosh]
 181 criteria = "safe-to-run"
 182 notes = "We're not shipping this and have no plans to ship it."
 183
 184 [policy.storage]
 185 audit-as-crates-io = false
 186 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 187
 188 [policy.tabs]
 189 audit-as-crates-io = false
 190 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 191
 192 [policy.unicode-bidi]
 193 audit-as-crates-io = true
 194
 195 [policy.viaduct]
 196 audit-as-crates-io = false
 197 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 198
 199 [policy.warp]
 200 audit-as-crates-io = true
 201 notes = "This is a third-party crate, with an extra patch."
 202
 203 [policy.webdriver]
 204 audit-as-crates-io = false
 205 criteria = "safe-to-run"
 206 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
 207
 208 [policy.webrender]
 209 audit-as-crates-io = false
 210
 211 [policy.webrender_api]
 212 audit-as-crates-io = false
 213
 214 [policy.webrender_build]
 215 audit-as-crates-io = false
 216
 217 [policy.wgpu-core]
 218 audit-as-crates-io = true
 219 notes = "Upstream project which we pin."
 220
 221 [policy.wgpu-hal]
 222 audit-as-crates-io = true
 223 notes = "Upstream project which we pin."
 224
 225 [policy.wgpu-types]
 226 audit-as-crates-io = true
 227 notes = "Upstream project which we pin."
 228
 229 [policy.windows]
 230 audit-as-crates-io = true
 231 notes = "Local override of the crates.io crate that uses a non-vendored local copy of the downloaded crate"
 232
 233 [policy.wr_malloc_size_of]
 234 audit-as-crates-io = false
 235
 236 [[exemptions.ahash]]
 237 version = "0.7.6"
 238 criteria = "safe-to-deploy"
 239
 240 [[exemptions.alsa]]
 241 version = "0.4.3"
 242 criteria = "safe-to-deploy"
 243
 244 [[exemptions.alsa-sys]]
 245 version = "0.3.1"
 246 criteria = "safe-to-deploy"
 247
 248 [[exemptions.android_log-sys]]
 249 version = "0.2.0"
 250 criteria = "safe-to-deploy"
 251
 252 [[exemptions.askama_derive]]
 253 version = "0.11.2"
 254 criteria = "safe-to-deploy"
 255
 256 [[exemptions.askama_escape]]
 257 version = "0.10.3"
 258 criteria = "safe-to-deploy"
 259
 260 [[exemptions.async-task]]
 261 version = "4.0.3"
 262 criteria = "safe-to-deploy"
 263
 264 [[exemptions.bincode]]
 265 version = "1.3.3"
 266 criteria = "safe-to-deploy"
 267
 268 [[exemptions.bitflags]]
 269 version = "1.3.2"
 270 criteria = "safe-to-deploy"
 271
 272 [[exemptions.bitreader]]
 273 version = "0.3.6"
 274 criteria = "safe-to-deploy"
 275
 276 [[exemptions.block]]
 277 version = "0.1.6"
 278 criteria = "safe-to-deploy"
 279
 280 [[exemptions.cache-padded]]
 281 version = "1.2.0"
 282 criteria = "safe-to-deploy"
 283
 284 [[exemptions.camino]]
 285 version = "1.0.9"
 286 criteria = "safe-to-deploy"
 287
 288 [[exemptions.chrono]]
 289 version = "0.4.19"
 290 criteria = "safe-to-deploy"
 291
 292 [[exemptions.chunky-vec]]
 293 version = "0.1.0"
 294 criteria = "safe-to-deploy"
 295
 296 [[exemptions.clang-sys]]
 297 version = "1.3.3"
 298 criteria = "safe-to-deploy"
 299
 300 [[exemptions.cookie]]
 301 version = "0.16.0"
 302 criteria = "safe-to-run"
 303
 304 [[exemptions.coreaudio-sys]]
 305 version = "0.2.10"
 306 criteria = "safe-to-deploy"
 307
 308 [[exemptions.coremidi]]
 309 version = "0.6.0@git:fc68464b5445caf111e41f643a2e69ccce0b4f83"
 310 criteria = "safe-to-deploy"
 311
 312 [[exemptions.coremidi-sys]]
 313 version = "3.1.0"
 314 criteria = "safe-to-deploy"
 315
 316 [[exemptions.cose]]
 317 version = "0.1.4"
 318 criteria = "safe-to-deploy"
 319
 320 [[exemptions.cose-c]]
 321 version = "0.1.5"
 322 criteria = "safe-to-deploy"
 323
 324 [[exemptions.cpufeatures]]
 325 version = "0.2.2"
 326 criteria = "safe-to-deploy"
 327
 328 [[exemptions.crc32fast]]
 329 version = "1.3.2"
 330 criteria = "safe-to-deploy"
 331
 332 [[exemptions.crossbeam-channel]]
 333 version = "0.5.4"
 334 criteria = "safe-to-deploy"
 335
 336 [[exemptions.crossbeam-deque]]
 337 version = "0.8.1"
 338 criteria = "safe-to-deploy"
 339
 340 [[exemptions.crossbeam-epoch]]
 341 version = "0.9.8"
 342 criteria = "safe-to-deploy"
 343
 344 [[exemptions.crossbeam-utils]]
 345 version = "0.8.8"
 346 criteria = "safe-to-deploy"
 347
 348 [[exemptions.d3d12]]
 349 version = "0.4.1"
 350 criteria = "safe-to-deploy"
 351
 352 [[exemptions.darling]]
 353 version = "0.13.4"
 354 criteria = "safe-to-deploy"
 355
 356 [[exemptions.darling_core]]
 357 version = "0.13.4"
 358 criteria = "safe-to-deploy"
 359
 360 [[exemptions.darling_macro]]
 361 version = "0.13.4"
 362 criteria = "safe-to-deploy"
 363
 364 [[exemptions.data-encoding]]
 365 version = "2.3.2"
 366 criteria = "safe-to-deploy"
 367
 368 [[exemptions.dbus]]
 369 version = "0.6.5"
 370 criteria = "safe-to-deploy"
 371
 372 [[exemptions.derive_more-impl]]
 373 version = "1.0.0-beta.2"
 374 criteria = "safe-to-deploy"
 375 notes = "The crate is new to version 1.0.x, and derived from older versions of derive_more. The differences against 0.99.17 have been audited, but cargo-vet cannot record this information."
 376
 377 [[exemptions.devd-rs]]
 378 version = "0.3.4"
 379 criteria = "safe-to-deploy"
 380
 381 [[exemptions.digest]]
 382 version = "0.10.3"
 383 criteria = "safe-to-deploy"
 384
 385 [[exemptions.dirs]]
 386 version = "4.0.0"
 387 criteria = "safe-to-deploy"
 388
 389 [[exemptions.dirs-sys]]
 390 version = "0.3.7"
 391 criteria = "safe-to-deploy"
 392
 393 [[exemptions.dns-parser]]
 394 version = "0.8.0"
 395 criteria = "safe-to-deploy"
 396
 397 [[exemptions.enumset]]
 398 version = "1.0.11"
 399 criteria = "safe-to-deploy"
 400
 401 [[exemptions.enumset_derive]]
 402 version = "0.6.0"
 403 criteria = "safe-to-deploy"
 404
 405 [[exemptions.env_logger]]
 406 version = "0.9.0"
 407 criteria = "safe-to-deploy"
 408
 409 [[exemptions.error-chain]]
 410 version = "0.12.4"
 411 criteria = "safe-to-deploy"
 412
 413 [[exemptions.fallible-iterator]]
 414 version = "0.2.0"
 415 criteria = "safe-to-deploy"
 416
 417 [[exemptions.fallible-streaming-iterator]]
 418 version = "0.1.9"
 419 criteria = "safe-to-deploy"
 420
 421 [[exemptions.fallible_collections]]
 422 version = "0.4.4"
 423 criteria = "safe-to-deploy"
 424
 425 [[exemptions.ffi-support]]
 426 version = "0.4.4"
 427 criteria = "safe-to-deploy"
 428
 429 [[exemptions.float-cmp]]
 430 version = "0.6.0"
 431 criteria = "safe-to-deploy"
 432
 433 [[exemptions.fs-err]]
 434 version = "2.7.0"
 435 criteria = "safe-to-deploy"
 436
 437 [[exemptions.fuchsia-zircon]]
 438 version = "0.3.3"
 439 criteria = "safe-to-run"
 440
 441 [[exemptions.fuchsia-zircon-sys]]
 442 version = "0.3.3"
 443 criteria = "safe-to-run"
 444
 445 [[exemptions.futures-macro]]
 446 version = "0.3.21"
 447 criteria = "safe-to-deploy"
 448
 449 [[exemptions.futures-task]]
 450 version = "0.3.21"
 451 criteria = "safe-to-deploy"
 452
 453 [[exemptions.futures-util]]
 454 version = "0.3.21"
 455 criteria = "safe-to-deploy"
 456
 457 [[exemptions.generic-array]]
 458 version = "0.14.5"
 459 criteria = "safe-to-deploy"
 460
 461 [[exemptions.getrandom]]
 462 version = "0.2.6"
 463 criteria = "safe-to-deploy"
 464
 465 [[exemptions.gl_generator]]
 466 version = "0.14.0"
 467 criteria = "safe-to-deploy"
 468
 469 [[exemptions.glsl]]
 470 version = "6.0.1"
 471 criteria = "safe-to-deploy"
 472
 473 [[exemptions.goblin]]
 474 version = "0.1.3"
 475 criteria = "safe-to-deploy"
 476
 477 [[exemptions.gpu-alloc]]
 478 version = "0.5.3"
 479 criteria = "safe-to-deploy"
 480
 481 [[exemptions.gpu-alloc-types]]
 482 version = "0.2.0"
 483 criteria = "safe-to-deploy"
 484
 485 [[exemptions.gpu-descriptor]]
 486 version = "0.2.2"
 487 criteria = "safe-to-deploy"
 488
 489 [[exemptions.gpu-descriptor-types]]
 490 version = "0.1.1"
 491 criteria = "safe-to-deploy"
 492
 493 [[exemptions.hashlink]]
 494 version = "0.7.0"
 495 criteria = "safe-to-deploy"
 496
 497 [[exemptions.hermit-abi]]
 498 version = "0.1.19"
 499 criteria = "safe-to-deploy"
 500
 501 [[exemptions.hexf-parse]]
 502 version = "0.2.1"
 503 criteria = "safe-to-deploy"
 504
 505 [[exemptions.ioctl-sys]]
 506 version = "0.7.1"
 507 criteria = "safe-to-deploy"
 508
 509 [[exemptions.itertools]]
 510 version = "0.10.3"
 511 criteria = "safe-to-deploy"
 512
 513 [[exemptions.khronos-egl]]
 514 version = "4.1.0"
 515 criteria = "safe-to-deploy"
 516
 517 [[exemptions.khronos_api]]
 518 version = "3.1.0"
 519 criteria = "safe-to-deploy"
 520
 521 [[exemptions.lazycell]]
 522 version = "1.3.0"
 523 criteria = "safe-to-deploy"
 524
 525 [[exemptions.libdbus-sys]]
 526 version = "0.2.2"
 527 criteria = "safe-to-deploy"
 528
 529 [[exemptions.libloading]]
 530 version = "0.7.3"
 531 criteria = "safe-to-deploy"
 532
 533 [[exemptions.libsqlite3-sys]]
 534 version = "0.25.2"
 535 criteria = "safe-to-deploy"
 536 suggest = false
 537 notes = "The in-gecko feature that we enable makes only pre-built bindings used, and none of the embedded C code is built. The build script was audited and is not doing anything besides exposing those bindings"
 538
 539 [[exemptions.libudev]]
 540 version = "0.2.0"
 541 criteria = "safe-to-deploy"
 542
 543 [[exemptions.lmdb-rkv-sys]]
 544 version = "0.11.2"
 545 criteria = "safe-to-deploy"
 546 suggest = false
 547 notes = "This crate is forked from another crate and not developed in-house. Given that LMDB-backed RKV is going away, we will probably never bother auditing this"
 548
 549 [[exemptions.mach]]
 550 version = "0.3.2"
 551 criteria = "safe-to-deploy"
 552
 553 [[exemptions.memalloc]]
 554 version = "0.1.0"
 555 criteria = "safe-to-deploy"
 556
 557 [[exemptions.memmap2]]
 558 version = "0.5.4"
 559 criteria = "safe-to-deploy"
 560
 561 [[exemptions.memoffset]]
 562 version = "0.6.5"
 563 criteria = "safe-to-deploy"
 564
 565 [[exemptions.midir]]
 566 version = "0.7.0"
 567 criteria = "safe-to-deploy"
 568
 569 [[exemptions.mime_guess]]
 570 version = "2.0.4"
 571 criteria = "safe-to-deploy"
 572
 573 [[exemptions.minimal-lexical]]
 574 version = "0.2.1"
 575 criteria = "safe-to-deploy"
 576
 577 [[exemptions.mio]]
 578 version = "0.8.0"
 579 criteria = "safe-to-deploy"
 580
 581 [[exemptions.mio-extras]]
 582 version = "2.0.6"
 583 criteria = "safe-to-run"
 584
 585 [[exemptions.miow]]
 586 version = "0.3.7"
 587 criteria = "safe-to-run"
 588
 589 [[exemptions.murmurhash3]]
 590 version = "0.0.5"
 591 criteria = "safe-to-deploy"
 592
 593 [[exemptions.net2]]
 594 version = "0.2.37"
 595 criteria = "safe-to-run"
 596
 597 [[exemptions.nix]]
 598 version = "0.15.0"
 599 criteria = "safe-to-deploy"
 600
 601 [[exemptions.objc]]
 602 version = "0.2.7"
 603 criteria = "safe-to-deploy"
 604
 605 [[exemptions.objc_exception]]
 606 version = "0.1.2"
 607 criteria = "safe-to-deploy"
 608
 609 [[exemptions.object]]
 610 version = "0.28.4"
 611 criteria = "safe-to-deploy"
 612
 613 [[exemptions.once_cell]]
 614 version = "1.12.0"
 615 criteria = "safe-to-deploy"
 616
 617 [[exemptions.owning_ref]]
 618 version = "0.4.1"
 619 criteria = "safe-to-deploy"
 620
 621 [[exemptions.packed_simd]]
 622 version = "0.3.8"
 623 criteria = "safe-to-deploy"
 624
 625 [[exemptions.phf]]
 626 version = "0.10.1"
 627 criteria = "safe-to-deploy"
 628
 629 [[exemptions.phf_codegen]]
 630 version = "0.10.0"
 631 criteria = "safe-to-deploy"
 632
 633 [[exemptions.phf_generator]]
 634 version = "0.10.0"
 635 criteria = "safe-to-deploy"
 636
 637 [[exemptions.phf_macros]]
 638 version = "0.10.0"
 639 criteria = "safe-to-deploy"
 640
 641 [[exemptions.phf_shared]]
 642 version = "0.10.0"
 643 criteria = "safe-to-deploy"
 644
 645 [[exemptions.plain]]
 646 version = "0.2.3"
 647 criteria = "safe-to-deploy"
 648
 649 [[exemptions.plist]]
 650 version = "1.3.1"
 651 criteria = "safe-to-run"
 652
 653 [[exemptions.ppv-lite86]]
 654 version = "0.2.16"
 655 criteria = "safe-to-deploy"
 656
 657 [[exemptions.profiling]]
 658 version = "1.0.6"
 659 criteria = "safe-to-deploy"
 660
 661 [[exemptions.prost]]
 662 version = "0.8.0"
 663 criteria = "safe-to-deploy"
 664
 665 [[exemptions.prost-derive]]
 666 version = "0.8.0"
 667 criteria = "safe-to-deploy"
 668
 669 [[exemptions.quick-error]]
 670 version = "1.2.3"
 671 criteria = "safe-to-deploy"
 672
 673 [[exemptions.rand]]
 674 version = "0.8.5"
 675 criteria = "safe-to-deploy"
 676
 677 [[exemptions.remove_dir_all]]
 678 version = "0.5.3"
 679 criteria = "safe-to-deploy"
 680
 681 [[exemptions.replace_with]]
 682 version = "0.1.7"
 683 criteria = "safe-to-deploy"
 684
 685 [[exemptions.ringbuf]]
 686 version = "0.2.8"
 687 criteria = "safe-to-deploy"
 688
 689 [[exemptions.ron]]
 690 version = "0.7.0"
 691 criteria = "safe-to-deploy"
 692
 693 [[exemptions.runloop]]
 694 version = "0.1.0"
 695 criteria = "safe-to-deploy"
 696
 697 [[exemptions.rusqlite]]
 698 version = "0.27.0"
 699 criteria = "safe-to-deploy"
 700
 701 [[exemptions.rust-ini]]
 702 version = "0.10.3"
 703 criteria = "safe-to-deploy"
 704
 705 [[exemptions.rust_decimal]]
 706 version = "1.24.0"
 707 criteria = "safe-to-deploy"
 708
 709 [[exemptions.scroll]]
 710 version = "0.10.2"
 711 criteria = "safe-to-deploy"
 712
 713 [[exemptions.scroll_derive]]
 714 version = "0.10.5"
 715 criteria = "safe-to-deploy"
 716
 717 [[exemptions.self_cell]]
 718 version = "0.10.2"
 719 criteria = "safe-to-deploy"
 720
 721 [[exemptions.serde_with]]
 722 version = "1.14.0"
 723 criteria = "safe-to-deploy"
 724
 725 [[exemptions.serde_with_macros]]
 726 version = "1.5.2"
 727 criteria = "safe-to-deploy"
 728
 729 [[exemptions.sfv]]
 730 version = "0.9.2"
 731 criteria = "safe-to-deploy"
 732
 733 [[exemptions.shlex]]
 734 version = "1.1.0"
 735 criteria = "safe-to-deploy"
 736
 737 [[exemptions.siphasher]]
 738 version = "0.3.10"
 739 criteria = "safe-to-deploy"
 740
 741 [[exemptions.socket2]]
 742 version = "0.4.4"
 743 criteria = "safe-to-deploy"
 744
 745 [[exemptions.spirv]]
 746 version = "0.2.0+1.5.4"
 747 criteria = "safe-to-deploy"
 748
 749 [[exemptions.stable_deref_trait]]
 750 version = "1.2.0"
 751 criteria = "safe-to-deploy"
 752
 753 [[exemptions.tempfile]]
 754 version = "3.3.0"
 755 criteria = "safe-to-deploy"
 756
 757 [[exemptions.time]]
 758 version = "0.1.44"
 759 criteria = "safe-to-deploy"
 760
 761 [[exemptions.triple_buffer]]
 762 version = "5.0.6"
 763 criteria = "safe-to-deploy"
 764
 765 [[exemptions.type-map]]
 766 version = "0.4.0"
 767 criteria = "safe-to-deploy"
 768
 769 [[exemptions.typenum]]
 770 version = "1.15.0"
 771 criteria = "safe-to-deploy"
 772
 773 [[exemptions.unix_path]]
 774 version = "1.0.1"
 775 criteria = "safe-to-run"
 776
 777 [[exemptions.unix_str]]
 778 version = "1.0.0"
 779 criteria = "safe-to-run"
 780
 781 [[exemptions.uuid]]
 782 version = "0.8.2"
 783 criteria = "safe-to-deploy"
 784
 785 [[exemptions.webrtc-sdp]]
 786 version = "0.3.9"
 787 criteria = "safe-to-deploy"
 788
 789 [[exemptions.winapi]]
 790 version = "0.3.9"
 791 criteria = "safe-to-deploy"
 792
 793 [[exemptions.winapi-i686-pc-windows-gnu]]
 794 version = "0.4.0"
 795 criteria = "safe-to-deploy"
 796
 797 [[exemptions.winapi-x86_64-pc-windows-gnu]]
 798 version = "0.4.0"
 799 criteria = "safe-to-deploy"
 800
 801 [[exemptions.wio]]
 802 version = "0.2.2"
 803 criteria = "safe-to-deploy"
 804
 805 [[exemptions.xml-rs]]
 806 version = "0.8.4"
 807 criteria = "safe-to-deploy"