supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "0.7.20"
   6 when = "2022-11-22"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.arbitrary]]
  12 version = "1.3.0"
  13 when = "2023-03-13"
  14 user-id = 696
  15 user-login = "fitzgen"
  16 user-name = "Nick Fitzgerald"
  17
  18 [[publisher.async-trait]]
  19 version = "0.1.68"
  20 when = "2023-03-24"
  21 user-id = 3618
  22 user-login = "dtolnay"
  23 user-name = "David Tolnay"
  24
  25 [[publisher.atomic]]
  26 version = "0.4.6"
  27 when = "2020-07-05"
  28 user-id = 2915
  29 user-login = "Amanieu"
  30 user-name = "Amanieu d'Antras"
  31
  32 [[publisher.audio_thread_priority]]
  33 version = "0.26.1"
  34 when = "2022-03-22"
  35 user-id = 1258
  36 user-login = "padenot"
  37 user-name = "Paul Adenot"
  38
  39 [[publisher.authenticator]]
  40 version = "0.4.0-alpha.15"
  41 when = "2023-05-15"
  42 user-id = 175410
  43 user-login = "jschanck"
  44 user-name = "John Schanck"
  45
  46 [[publisher.bhttp]]
  47 version = "0.3.1"
  48 when = "2023-02-23"
  49 user-id = 128763
  50 user-login = "martinthomson"
  51 user-name = "Martin Thomson"
  52
  53 [[publisher.byteorder]]
  54 version = "1.4.3"
  55 when = "2021-03-10"
  56 user-id = 189
  57 user-login = "BurntSushi"
  58 user-name = "Andrew Gallant"
  59
  60 [[publisher.bytes]]
  61 version = "1.4.0"
  62 when = "2023-01-31"
  63 user-id = 6741
  64 user-login = "Darksonn"
  65 user-name = "Alice Ryhl"
  66
  67 [[publisher.cexpr]]
  68 version = "0.6.0"
  69 when = "2021-10-11"
  70 user-id = 3788
  71 user-login = "emilio"
  72 user-name = "Emilio Cobos Álvarez"
  73
  74 [[publisher.clap]]
  75 version = "4.1.14"
  76 when = "2023-03-28"
  77 user-id = 6743
  78 user-login = "epage"
  79 user-name = "Ed Page"
  80
  81 [[publisher.clap_builder]]
  82 version = "4.1.14"
  83 when = "2023-03-28"
  84 user-id = 6743
  85 user-login = "epage"
  86 user-name = "Ed Page"
  87
  88 [[publisher.clap_derive]]
  89 version = "4.1.14"
  90 when = "2023-03-28"
  91 user-id = 6743
  92 user-login = "epage"
  93 user-name = "Ed Page"
  94
  95 [[publisher.clap_lex]]
  96 version = "0.4.1"
  97 when = "2023-03-28"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.core-foundation]]
 103 version = "0.9.3"
 104 when = "2022-02-07"
 105 user-id = 5946
 106 user-login = "jrmuizel"
 107 user-name = "Jeff Muizelaar"
 108
 109 [[publisher.core-foundation-sys]]
 110 version = "0.8.3"
 111 when = "2021-10-12"
 112 user-id = 2396
 113 user-login = "jdm"
 114 user-name = "Josh Matthews"
 115
 116 [[publisher.core-graphics]]
 117 version = "0.22.3"
 118 when = "2021-11-02"
 119 user-id = 5946
 120 user-login = "jrmuizel"
 121 user-name = "Jeff Muizelaar"
 122
 123 [[publisher.core-graphics-types]]
 124 version = "0.1.1"
 125 when = "2020-09-15"
 126 user-id = 2396
 127 user-login = "jdm"
 128 user-name = "Josh Matthews"
 129
 130 [[publisher.core-text]]
 131 version = "19.2.0"
 132 when = "2021-02-14"
 133 user-id = 5946
 134 user-login = "jrmuizel"
 135 user-name = "Jeff Muizelaar"
 136
 137 [[publisher.derive_arbitrary]]
 138 version = "1.3.0"
 139 when = "2023-03-13"
 140 user-id = 696
 141 user-login = "fitzgen"
 142 user-name = "Nick Fitzgerald"
 143
 144 [[publisher.dogear]]
 145 version = "0.4.0"
 146 when = "2019-09-16"
 147 user-id = 27901
 148 user-login = "linabutler"
 149 user-name = "Lina Butler"
 150
 151 [[publisher.dtoa]]
 152 version = "0.4.8"
 153 when = "2021-03-29"
 154 user-id = 3618
 155 user-login = "dtolnay"
 156 user-name = "David Tolnay"
 157
 158 [[publisher.etagere]]
 159 version = "0.2.7"
 160 when = "2022-05-04"
 161 user-id = 1281
 162 user-login = "nical"
 163 user-name = "Nicolas Silva"
 164
 165 [[publisher.euclid]]
 166 version = "0.22.7"
 167 when = "2022-04-04"
 168 user-id = 1281
 169 user-login = "nical"
 170 user-name = "Nicolas Silva"
 171
 172 [[publisher.flate2]]
 173 version = "1.0.24"
 174 when = "2022-05-28"
 175 user-id = 4333
 176 user-login = "joshtriplett"
 177 user-name = "Josh Triplett"
 178
 179 [[publisher.freetype]]
 180 version = "0.7.0"
 181 when = "2020-07-14"
 182 user-id = 2396
 183 user-login = "jdm"
 184 user-name = "Josh Matthews"
 185
 186 [[publisher.gleam]]
 187 version = "0.15.0"
 188 when = "2023-04-21"
 189 user-id = 5946
 190 user-login = "jrmuizel"
 191 user-name = "Jeff Muizelaar"
 192
 193 [[publisher.glean]]
 194 version = "53.1.0"
 195 when = "2023-06-28"
 196 user-id = 48
 197 user-login = "badboy"
 198 user-name = "Jan-Erik Rediger"
 199
 200 [[publisher.glean-core]]
 201 version = "53.1.0"
 202 when = "2023-06-28"
 203 user-id = 48
 204 user-login = "badboy"
 205 user-name = "Jan-Erik Rediger"
 206
 207 [[publisher.glslopt]]
 208 version = "0.1.9"
 209 when = "2021-03-17"
 210 user-id = 84794
 211 user-login = "jamienicol"
 212 user-name = "Jamie Nicol"
 213
 214 [[publisher.headers]]
 215 version = "0.3.8"
 216 when = "2022-09-02"
 217 user-id = 359
 218 user-login = "seanmonstar"
 219 user-name = "Sean McArthur"
 220
 221 [[publisher.httparse]]
 222 version = "1.8.0"
 223 when = "2022-08-30"
 224 user-id = 359
 225 user-login = "seanmonstar"
 226 user-name = "Sean McArthur"
 227
 228 [[publisher.indexmap]]
 229 version = "1.9.3"
 230 when = "2023-03-24"
 231 user-id = 539
 232 user-login = "cuviper"
 233 user-name = "Josh Stone"
 234
 235 [[publisher.inherent]]
 236 version = "1.0.7"
 237 when = "2023-03-25"
 238 user-id = 3618
 239 user-login = "dtolnay"
 240 user-name = "David Tolnay"
 241
 242 [[publisher.iovec]]
 243 version = "0.1.4"
 244 when = "2019-10-09"
 245 user-id = 10
 246 user-login = "carllerche"
 247 user-name = "Carl Lerche"
 248
 249 [[publisher.itoa]]
 250 version = "1.0.5"
 251 when = "2022-12-17"
 252 user-id = 3618
 253 user-login = "dtolnay"
 254 user-name = "David Tolnay"
 255
 256 [[publisher.jobserver]]
 257 version = "0.1.25"
 258 when = "2022-09-23"
 259 user-id = 1
 260 user-login = "alexcrichton"
 261 user-name = "Alex Crichton"
 262
 263 [[publisher.libc]]
 264 version = "0.2.132"
 265 when = "2022-08-16"
 266 user-id = 2915
 267 user-login = "Amanieu"
 268 user-name = "Amanieu d'Antras"
 269
 270 [[publisher.lock_api]]
 271 version = "0.4.9"
 272 when = "2022-09-20"
 273 user-id = 2915
 274 user-login = "Amanieu"
 275 user-name = "Amanieu d'Antras"
 276
 277 [[publisher.memchr]]
 278 version = "2.5.0"
 279 when = "2022-04-30"
 280 user-id = 189
 281 user-login = "BurntSushi"
 282 user-name = "Andrew Gallant"
 283
 284 [[publisher.mime]]
 285 version = "0.3.16"
 286 when = "2020-01-07"
 287 user-id = 359
 288 user-login = "seanmonstar"
 289 user-name = "Sean McArthur"
 290
 291 [[publisher.mio]]
 292 version = "0.6.21"
 293 when = "2019-11-27"
 294 user-id = 10
 295 user-login = "carllerche"
 296 user-name = "Carl Lerche"
 297
 298 [[publisher.num_cpus]]
 299 version = "1.15.0"
 300 when = "2022-12-20"
 301 user-id = 359
 302 user-login = "seanmonstar"
 303 user-name = "Sean McArthur"
 304
 305 [[publisher.ohttp]]
 306 version = "0.3.1"
 307 when = "2023-02-23"
 308 user-id = 128763
 309 user-login = "martinthomson"
 310 user-name = "Martin Thomson"
 311
 312 [[publisher.ordered-float]]
 313 version = "3.4.0"
 314 when = "2022-11-06"
 315 user-id = 2017
 316 user-login = "mbrubeck"
 317 user-name = "Matt Brubeck"
 318
 319 [[publisher.parking_lot]]
 320 version = "0.12.1"
 321 when = "2022-05-31"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.parking_lot_core]]
 327 version = "0.9.8"
 328 when = "2023-06-05"
 329 user-id = 2915
 330 user-login = "Amanieu"
 331 user-name = "Amanieu d'Antras"
 332
 333 [[publisher.paste]]
 334 version = "1.0.11"
 335 when = "2022-12-17"
 336 user-id = 3618
 337 user-login = "dtolnay"
 338 user-name = "David Tolnay"
 339
 340 [[publisher.prio]]
 341 version = "0.12.1"
 342 when = "2023-04-13"
 343 user-id = 101233
 344 user-login = "le-automaton"
 345
 346 [[publisher.proc-macro2]]
 347 version = "1.0.59"
 348 when = "2023-05-25"
 349 user-id = 3618
 350 user-login = "dtolnay"
 351 user-name = "David Tolnay"
 352
 353 [[publisher.quote]]
 354 version = "1.0.28"
 355 when = "2023-05-25"
 356 user-id = 3618
 357 user-login = "dtolnay"
 358 user-name = "David Tolnay"
 359
 360 [[publisher.regex]]
 361 version = "1.7.1"
 362 when = "2023-01-09"
 363 user-id = 189
 364 user-login = "BurntSushi"
 365 user-name = "Andrew Gallant"
 366
 367 [[publisher.regex-syntax]]
 368 version = "0.6.28"
 369 when = "2022-11-05"
 370 user-id = 189
 371 user-login = "BurntSushi"
 372 user-name = "Andrew Gallant"
 373
 374 [[publisher.rust_cascade]]
 375 version = "1.5.0"
 376 when = "2023-04-05"
 377 user-id = 57462
 378 user-login = "mozkeeler"
 379 user-name = "Dana Keeler"
 380
 381 [[publisher.ryu]]
 382 version = "1.0.12"
 383 when = "2022-12-17"
 384 user-id = 3618
 385 user-login = "dtolnay"
 386 user-name = "David Tolnay"
 387
 388 [[publisher.same-file]]
 389 version = "1.0.6"
 390 when = "2020-01-11"
 391 user-id = 189
 392 user-login = "BurntSushi"
 393 user-name = "Andrew Gallant"
 394
 395 [[publisher.scopeguard]]
 396 version = "1.1.0"
 397 when = "2020-02-16"
 398 user-id = 2915
 399 user-login = "Amanieu"
 400 user-name = "Amanieu d'Antras"
 401
 402 [[publisher.serde]]
 403 version = "1.0.163"
 404 when = "2023-05-11"
 405 user-id = 3618
 406 user-login = "dtolnay"
 407 user-name = "David Tolnay"
 408
 409 [[publisher.serde_bytes]]
 410 version = "0.11.9"
 411 when = "2023-02-05"
 412 user-id = 3618
 413 user-login = "dtolnay"
 414 user-name = "David Tolnay"
 415
 416 [[publisher.serde_derive]]
 417 version = "1.0.163"
 418 when = "2023-05-10"
 419 user-id = 3618
 420 user-login = "dtolnay"
 421 user-name = "David Tolnay"
 422
 423 [[publisher.serde_json]]
 424 version = "1.0.93"
 425 when = "2023-02-08"
 426 user-id = 3618
 427 user-login = "dtolnay"
 428 user-name = "David Tolnay"
 429
 430 [[publisher.serde_repr]]
 431 version = "0.1.12"
 432 when = "2023-03-18"
 433 user-id = 3618
 434 user-login = "dtolnay"
 435 user-name = "David Tolnay"
 436
 437 [[publisher.serde_yaml]]
 438 version = "0.8.26"
 439 when = "2022-07-16"
 440 user-id = 3618
 441 user-login = "dtolnay"
 442 user-name = "David Tolnay"
 443
 444 [[publisher.smallvec]]
 445 version = "1.10.0"
 446 when = "2022-10-02"
 447 user-id = 2017
 448 user-login = "mbrubeck"
 449 user-name = "Matt Brubeck"
 450
 451 [[publisher.syn]]
 452 version = "1.0.107"
 453 when = "2022-12-18"
 454 user-id = 3618
 455 user-login = "dtolnay"
 456 user-name = "David Tolnay"
 457
 458 [[publisher.syn]]
 459 version = "2.0.18"
 460 when = "2023-05-26"
 461 user-id = 3618
 462 user-login = "dtolnay"
 463 user-name = "David Tolnay"
 464
 465 [[publisher.termcolor]]
 466 version = "1.2.0"
 467 when = "2023-01-15"
 468 user-id = 189
 469 user-login = "BurntSushi"
 470 user-name = "Andrew Gallant"
 471
 472 [[publisher.threadbound]]
 473 version = "0.1.5"
 474 when = "2022-12-17"
 475 user-id = 3618
 476 user-login = "dtolnay"
 477 user-name = "David Tolnay"
 478
 479 [[publisher.tokio-util]]
 480 version = "0.7.2"
 481 when = "2022-05-15"
 482 user-id = 6741
 483 user-login = "Darksonn"
 484 user-name = "Alice Ryhl"
 485
 486 [[publisher.toml]]
 487 version = "0.5.7"
 488 when = "2020-10-11"
 489 user-id = 1
 490 user-login = "alexcrichton"
 491 user-name = "Alex Crichton"
 492
 493 [[publisher.unicode-ident]]
 494 version = "1.0.6"
 495 when = "2022-12-17"
 496 user-id = 3618
 497 user-login = "dtolnay"
 498 user-name = "David Tolnay"
 499
 500 [[publisher.unicode-segmentation]]
 501 version = "1.10.0"
 502 when = "2022-09-13"
 503 user-id = 1139
 504 user-login = "Manishearth"
 505 user-name = "Manish Goregaokar"
 506
 507 [[publisher.unicode-width]]
 508 version = "0.1.10"
 509 when = "2022-09-13"
 510 user-id = 1139
 511 user-login = "Manishearth"
 512 user-name = "Manish Goregaokar"
 513
 514 [[publisher.unicode-xid]]
 515 version = "0.2.4"
 516 when = "2022-09-15"
 517 user-id = 1139
 518 user-login = "Manishearth"
 519 user-name = "Manish Goregaokar"
 520
 521 [[publisher.uniffi]]
 522 version = "0.24.2"
 523 when = "2023-07-25"
 524 user-id = 48
 525 user-login = "badboy"
 526 user-name = "Jan-Erik Rediger"
 527
 528 [[publisher.uniffi_bindgen]]
 529 version = "0.24.2"
 530 when = "2023-07-25"
 531 user-id = 48
 532 user-login = "badboy"
 533 user-name = "Jan-Erik Rediger"
 534
 535 [[publisher.uniffi_build]]
 536 version = "0.24.2"
 537 when = "2023-07-25"
 538 user-id = 48
 539 user-login = "badboy"
 540 user-name = "Jan-Erik Rediger"
 541
 542 [[publisher.uniffi_checksum_derive]]
 543 version = "0.24.2"
 544 when = "2023-07-25"
 545 user-id = 48
 546 user-login = "badboy"
 547 user-name = "Jan-Erik Rediger"
 548
 549 [[publisher.uniffi_core]]
 550 version = "0.24.2"
 551 when = "2023-07-25"
 552 user-id = 48
 553 user-login = "badboy"
 554 user-name = "Jan-Erik Rediger"
 555
 556 [[publisher.uniffi_macros]]
 557 version = "0.24.2"
 558 when = "2023-07-25"
 559 user-id = 48
 560 user-login = "badboy"
 561 user-name = "Jan-Erik Rediger"
 562
 563 [[publisher.uniffi_meta]]
 564 version = "0.24.2"
 565 when = "2023-07-25"
 566 user-id = 48
 567 user-login = "badboy"
 568 user-name = "Jan-Erik Rediger"
 569
 570 [[publisher.uniffi_testing]]
 571 version = "0.24.2"
 572 when = "2023-07-25"
 573 user-id = 48
 574 user-login = "badboy"
 575 user-name = "Jan-Erik Rediger"
 576
 577 [[publisher.walkdir]]
 578 version = "2.3.2"
 579 when = "2021-03-22"
 580 user-id = 189
 581 user-login = "BurntSushi"
 582 user-name = "Andrew Gallant"
 583
 584 [[publisher.warp]]
 585 version = "0.3.3"
 586 when = "2022-09-27"
 587 user-id = 359
 588 user-login = "seanmonstar"
 589 user-name = "Sean McArthur"
 590
 591 [[publisher.wasi]]
 592 version = "0.11.0+wasi-snapshot-preview1"
 593 when = "2022-01-19"
 594 user-id = 1
 595 user-login = "alexcrichton"
 596 user-name = "Alex Crichton"
 597
 598 [[publisher.wasm-encoder]]
 599 version = "0.31.0"
 600 when = "2023-07-17"
 601 user-id = 1
 602 user-login = "alexcrichton"
 603 user-name = "Alex Crichton"
 604
 605 [[publisher.wasm-smith]]
 606 version = "0.12.12"
 607 when = "2023-07-17"
 608 user-id = 1
 609 user-login = "alexcrichton"
 610 user-name = "Alex Crichton"
 611
 612 [[publisher.wasmparser]]
 613 version = "0.109.0"
 614 when = "2023-07-17"
 615 user-id = 1
 616 user-login = "alexcrichton"
 617 user-name = "Alex Crichton"
 618
 619 [[publisher.wast]]
 620 version = "62.0.0"
 621 when = "2023-07-17"
 622 user-id = 1
 623 user-login = "alexcrichton"
 624 user-name = "Alex Crichton"
 625
 626 [[publisher.winapi-util]]
 627 version = "0.1.5"
 628 when = "2020-04-20"
 629 user-id = 189
 630 user-login = "BurntSushi"
 631 user-name = "Andrew Gallant"
 632
 633 [[publisher.zeitstempel]]
 634 version = "0.1.1"
 635 when = "2021-03-18"
 636 user-id = 48
 637 user-login = "badboy"
 638 user-name = "Jan-Erik Rediger"
 639
 640 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 641 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 642 criteria = "safe-to-deploy"
 643 user-id = 696 # Nick Fitzgerald (fitzgen)
 644 start = "2020-01-14"
 645 end = "2024-04-21"
 646 notes = "I am an author of this crate."
 647
 648 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 649 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 650 criteria = "safe-to-deploy"
 651 user-id = 696 # Nick Fitzgerald (fitzgen)
 652 start = "2020-01-14"
 653 end = "2024-04-27"
 654 notes = "I am an author of this crate"
 655
 656 [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
 657 who = "Alex Crichton <alex@alexcrichton.com>"
 658 criteria = "safe-to-deploy"
 659 user-id = 1 # Alex Crichton (alexcrichton)
 660 start = "2020-12-11"
 661 end = "2024-04-14"
 662 notes = """
 663 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 664 repository of which I'm one of the primary maintainers and publishers for.
 665 I am employed by a member of the Bytecode Alliance and plan to continue doing
 666 so and will actively maintain this crate over time.
 667 """
 668
 669 [[audits.bytecode-alliance.wildcard-audits.wasm-smith]]
 670 who = "Alex Crichton <alex@alexcrichton.com>"
 671 criteria = "safe-to-deploy"
 672 user-id = 1 # Alex Crichton (alexcrichton)
 673 start = "2020-09-03"
 674 end = "2024-04-14"
 675 notes = """
 676 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 677 repository of which I'm one of the primary maintainers and publishers for.
 678 I am employed by a member of the Bytecode Alliance and plan to continue doing
 679 so and will actively maintain this crate over time.
 680 """
 681
 682 [[audits.bytecode-alliance.wildcard-audits.wasmparser]]
 683 who = "Alex Crichton <alex@alexcrichton.com>"
 684 criteria = "safe-to-deploy"
 685 user-id = 1 # Alex Crichton (alexcrichton)
 686 start = "2020-07-13"
 687 end = "2024-04-14"
 688 notes = """
 689 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 690 repository of which I'm one of the primary maintainers and publishers for.
 691 I am employed by a member of the Bytecode Alliance and plan to continue doing
 692 so and will actively maintain this crate over time.
 693 """
 694
 695 [[audits.bytecode-alliance.wildcard-audits.wast]]
 696 who = "Alex Crichton <alex@alexcrichton.com>"
 697 criteria = "safe-to-deploy"
 698 user-id = 1 # Alex Crichton (alexcrichton)
 699 start = "2019-10-16"
 700 end = "2024-04-14"
 701 notes = """
 702 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 703 repository of which I'm one of the primary maintainers and publishers for.
 704 I am employed by a member of the Bytecode Alliance and plan to continue doing
 705 so and will actively maintain this crate over time.
 706 """
 707
 708 [[audits.bytecode-alliance.audits.adler]]
 709 who = "Alex Crichton <alex@alexcrichton.com>"
 710 criteria = "safe-to-deploy"
 711 version = "1.0.2"
 712 notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
 713
 714 [[audits.bytecode-alliance.audits.arrayref]]
 715 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 716 criteria = "safe-to-deploy"
 717 version = "0.3.6"
 718 notes = """
 719 Unsafe code, but its logic looks good to me. Necessary given what it is
 720 doing. Well tested, has quickchecks.
 721 """
 722
 723 [[audits.bytecode-alliance.audits.arrayvec]]
 724 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 725 criteria = "safe-to-deploy"
 726 version = "0.7.2"
 727 notes = """
 728 Well documented invariants, good assertions for those invariants in unsafe code,
 729 and tested with MIRI to boot. LGTM.
 730 """
 731
 732 [[audits.bytecode-alliance.audits.base64]]
 733 who = "Pat Hickey <phickey@fastly.com>"
 734 criteria = "safe-to-deploy"
 735 version = "0.21.0"
 736 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 737
 738 [[audits.bytecode-alliance.audits.block-buffer]]
 739 who = "Benjamin Bouvier <public@benj.me>"
 740 criteria = "safe-to-deploy"
 741 delta = "0.9.0 -> 0.10.2"
 742
 743 [[audits.bytecode-alliance.audits.bumpalo]]
 744 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 745 criteria = "safe-to-deploy"
 746 version = "3.11.1"
 747 notes = "I am the author of this crate."
 748
 749 [[audits.bytecode-alliance.audits.cargo-platform]]
 750 who = "Pat Hickey <phickey@fastly.com>"
 751 criteria = "safe-to-deploy"
 752 version = "0.1.2"
 753 notes = "no build, no ambient capabilities, no unsafe"
 754
 755 [[audits.bytecode-alliance.audits.cc]]
 756 who = "Alex Crichton <alex@alexcrichton.com>"
 757 criteria = "safe-to-deploy"
 758 version = "1.0.73"
 759 notes = "I am the author of this crate."
 760
 761 [[audits.bytecode-alliance.audits.cfg-if]]
 762 who = "Alex Crichton <alex@alexcrichton.com>"
 763 criteria = "safe-to-deploy"
 764 version = "1.0.0"
 765 notes = "I am the author of this crate."
 766
 767 [[audits.bytecode-alliance.audits.codespan-reporting]]
 768 who = "Jamey Sharp <jsharp@fastly.com>"
 769 criteria = "safe-to-deploy"
 770 version = "0.11.1"
 771 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 772
 773 [[audits.bytecode-alliance.audits.cpufeatures]]
 774 who = "Alex Crichton <alex@alexcrichton.com>"
 775 criteria = "safe-to-deploy"
 776 delta = "0.2.2 -> 0.2.7"
 777 notes = """
 778 This is a minor update that looks to add some more detected CPU features and
 779 various other minor portability fixes such as MIRI support.
 780 """
 781
 782 [[audits.bytecode-alliance.audits.crypto-common]]
 783 who = "Benjamin Bouvier <public@benj.me>"
 784 criteria = "safe-to-deploy"
 785 version = "0.1.3"
 786
 787 [[audits.bytecode-alliance.audits.foreign-types]]
 788 who = "Pat Hickey <phickey@fastly.com>"
 789 criteria = "safe-to-deploy"
 790 version = "0.3.2"
 791 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 792
 793 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 794 who = "Pat Hickey <phickey@fastly.com>"
 795 criteria = "safe-to-deploy"
 796 version = "0.1.1"
 797
 798 [[audits.bytecode-alliance.audits.form_urlencoded]]
 799 who = "Alex Crichton <alex@alexcrichton.com>"
 800 criteria = "safe-to-deploy"
 801 version = "1.1.0"
 802 notes = """
 803 This is a small crate for working with url-encoded forms which doesn't have any
 804 more than what it says on the tin. Contains one `unsafe` block related to
 805 performance around utf-8 validation which is fairly easy to verify as correct.
 806 """
 807
 808 [[audits.bytecode-alliance.audits.futures-channel]]
 809 who = "Pat Hickey <phickey@fastly.com>"
 810 criteria = "safe-to-deploy"
 811 version = "0.3.27"
 812 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 813
 814 [[audits.bytecode-alliance.audits.futures-core]]
 815 who = "Pat Hickey <phickey@fastly.com>"
 816 criteria = "safe-to-deploy"
 817 version = "0.3.27"
 818 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 819
 820 [[audits.bytecode-alliance.audits.futures-executor]]
 821 who = "Pat Hickey <phickey@fastly.com>"
 822 criteria = "safe-to-deploy"
 823 version = "0.3.27"
 824 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 825
 826 [[audits.bytecode-alliance.audits.futures-io]]
 827 who = "Pat Hickey <phickey@fastly.com>"
 828 criteria = "safe-to-deploy"
 829 version = "0.3.27"
 830
 831 [[audits.bytecode-alliance.audits.futures-sink]]
 832 who = "Pat Hickey <phickey@fastly.com>"
 833 criteria = "safe-to-deploy"
 834 version = "0.3.27"
 835
 836 [[audits.bytecode-alliance.audits.heck]]
 837 who = "Alex Crichton <alex@alexcrichton.com>"
 838 criteria = "safe-to-deploy"
 839 version = "0.4.0"
 840 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 841
 842 [[audits.bytecode-alliance.audits.id-arena]]
 843 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 844 criteria = "safe-to-deploy"
 845 version = "2.2.1"
 846 notes = "I am the author of this crate."
 847
 848 [[audits.bytecode-alliance.audits.idna]]
 849 who = "Alex Crichton <alex@alexcrichton.com>"
 850 criteria = "safe-to-deploy"
 851 version = "0.3.0"
 852 notes = """
 853 This is a crate without unsafe code or usage of the standard library. The large
 854 size of this crate comes from the large generated unicode tables file. This
 855 crate is broadly used throughout the ecosystem and does not contain anything
 856 suspicious.
 857 """
 858
 859 [[audits.bytecode-alliance.audits.leb128]]
 860 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 861 criteria = "safe-to-deploy"
 862 version = "0.2.5"
 863 notes = "I am the author of this crate."
 864
 865 [[audits.bytecode-alliance.audits.memoffset]]
 866 who = "Alex Crichton <alex@alexcrichton.com>"
 867 criteria = "safe-to-deploy"
 868 delta = "0.7.1 -> 0.8.0"
 869 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 870
 871 [[audits.bytecode-alliance.audits.peeking_take_while]]
 872 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 873 criteria = "safe-to-deploy"
 874 version = "1.0.0"
 875 notes = "I am the author of this crate."
 876
 877 [[audits.bytecode-alliance.audits.percent-encoding]]
 878 who = "Alex Crichton <alex@alexcrichton.com>"
 879 criteria = "safe-to-deploy"
 880 version = "2.2.0"
 881 notes = """
 882 This crate is a single-file crate that does what it says on the tin. There are
 883 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
 884 as correct and otherwise this crate is good to go.
 885 """
 886
 887 [[audits.bytecode-alliance.audits.pin-utils]]
 888 who = "Pat Hickey <phickey@fastly.com>"
 889 criteria = "safe-to-deploy"
 890 version = "0.1.0"
 891
 892 [[audits.bytecode-alliance.audits.pkg-config]]
 893 who = "Pat Hickey <phickey@fastly.com>"
 894 criteria = "safe-to-deploy"
 895 version = "0.3.25"
 896 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
 897
 898 [[audits.bytecode-alliance.audits.rustc-demangle]]
 899 who = "Alex Crichton <alex@alexcrichton.com>"
 900 criteria = "safe-to-deploy"
 901 version = "0.1.21"
 902 notes = "I am the author of this crate."
 903
 904 [[audits.bytecode-alliance.audits.semver]]
 905 who = "Pat Hickey <phickey@fastly.com>"
 906 criteria = "safe-to-deploy"
 907 version = "1.0.17"
 908 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
 909
 910 [[audits.bytecode-alliance.audits.slab]]
 911 who = "Pat Hickey <phickey@fastly.com>"
 912 criteria = "safe-to-deploy"
 913 version = "0.4.6"
 914 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
 915
 916 [[audits.bytecode-alliance.audits.unicase]]
 917 who = "Alex Crichton <alex@alexcrichton.com>"
 918 criteria = "safe-to-deploy"
 919 version = "2.6.0"
 920 notes = """
 921 This crate contains no `unsafe` code and no unnecessary use of the standard
 922 library.
 923 """
 924
 925 [[audits.bytecode-alliance.audits.unicode-bidi]]
 926 who = "Alex Crichton <alex@alexcrichton.com>"
 927 criteria = "safe-to-deploy"
 928 version = "0.3.8"
 929 notes = """
 930 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
 931 does not attempt to out of the bounds of what it's already supposed to be doing.
 932 """
 933
 934 [[audits.bytecode-alliance.audits.unicode-normalization]]
 935 who = "Alex Crichton <alex@alexcrichton.com>"
 936 criteria = "safe-to-deploy"
 937 version = "0.1.19"
 938 notes = """
 939 This crate contains one usage of `unsafe` which I have manually checked to see
 940 it as correct. This crate's size comes in large part due to the generated
 941 unicode tables that it contains. This crate is additionally widely used
 942 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
 943 and nothing suspicious.
 944 """
 945
 946 [[audits.embark-studios.audits.anyhow]]
 947 who = "Johan Andersson <opensource@embark-studios.com>"
 948 criteria = "safe-to-deploy"
 949 version = "1.0.58"
 950
 951 [[audits.embark-studios.audits.cty]]
 952 who = "Johan Andersson <opensource@embark-studios.com>"
 953 criteria = "safe-to-deploy"
 954 version = "0.2.2"
 955 notes = "Inspected it and is a tiny crate with just type definitions"
 956
 957 [[audits.embark-studios.audits.derive_more]]
 958 who = "Johan Andersson <opensource@embark-studios.com>"
 959 criteria = "safe-to-deploy"
 960 version = "0.99.17"
 961 notes = "No unsafe usage or ambient capabilities"
 962
 963 [[audits.embark-studios.audits.ident_case]]
 964 who = "Johan Andersson <opensource@embark-studios.com>"
 965 criteria = "safe-to-deploy"
 966 version = "1.0.1"
 967 notes = "No unsafe usage or ambient capabilities"
 968
 969 [[audits.embark-studios.audits.line-wrap]]
 970 who = "Johan Andersson <opensource@embark-studios.com>"
 971 criteria = "safe-to-deploy"
 972 version = "0.1.1"
 973 notes = "No unsafe usage or ambient capabilities"
 974
 975 [[audits.embark-studios.audits.thiserror]]
 976 who = "Johan Andersson <opensource@embark-studios.com>"
 977 criteria = "safe-to-deploy"
 978 version = "1.0.40"
 979 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
 980
 981 [[audits.embark-studios.audits.thiserror-impl]]
 982 who = "Johan Andersson <opensource@embark-studios.com>"
 983 criteria = "safe-to-deploy"
 984 version = "1.0.40"
 985 notes = "Found no unsafe or ambient capabilities used"
 986
 987 [[audits.embark-studios.audits.yaml-rust]]
 988 who = "Johan Andersson <opensource@embark-studios.com>"
 989 criteria = "safe-to-deploy"
 990 version = "0.4.5"
 991 notes = "No unsafe usage or ambient capabilities"
 992
 993 [[audits.google.audits.ash]]
 994 who = "David Koloski <dkoloski@google.com>"
 995 criteria = "safe-to-deploy"
 996 version = "0.37.0+1.3.209"
 997 notes = "Reviewed on https://fxrev.dev/694269"
 998 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 999
1000 [[audits.google.audits.fastrand]]
1001 who = "George Burgess IV <gbiv@google.com>"
1002 criteria = "safe-to-deploy"
1003 version = "1.9.0"
1004 notes = """
1005 `does-not-implement-crypto` is certified because this crate explicitly says
1006 that the RNG here is not cryptographically secure.
1007 """
1008 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1009
1010 [[audits.google.audits.futures]]
1011 who = "George Burgess IV <gbiv@google.com>"
1012 criteria = "safe-to-deploy"
1013 version = "0.3.28"
1014 notes = """
1015 `futures` has no logic other than tests - it simply `pub use`s things from
1016 other crates.
1017 """
1018 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1019
1020 [[audits.google.audits.glob]]
1021 who = "George Burgess IV <gbiv@google.com>"
1022 criteria = "safe-to-deploy"
1023 version = "0.3.1"
1024 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1025
1026 [[audits.google.audits.h2]]
1027 who = "ChromeOS"
1028 criteria = "safe-to-run"
1029 version = "0.3.14"
1030 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1031
1032 [[audits.google.audits.http]]
1033 who = "ChromeOS"
1034 criteria = "safe-to-run"
1035 version = "0.2.8"
1036 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1037
1038 [[audits.google.audits.http-body]]
1039 who = "ChromeOS"
1040 criteria = "safe-to-run"
1041 version = "0.4.5"
1042 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1043
1044 [[audits.google.audits.httpdate]]
1045 who = "ChromeOS"
1046 criteria = "safe-to-run"
1047 version = "1.0.2"
1048 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1049
1050 [[audits.google.audits.hyper]]
1051 who = "ChromeOS"
1052 criteria = "safe-to-run"
1053 version = "0.14.20"
1054 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1055
1056 [[audits.google.audits.pin-project]]
1057 who = "ChromeOS"
1058 criteria = "safe-to-run"
1059 version = "1.0.12"
1060 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1061
1062 [[audits.google.audits.pin-project-internal]]
1063 who = "ChromeOS"
1064 criteria = "safe-to-run"
1065 version = "1.0.12"
1066 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1067
1068 [[audits.google.audits.pin-project-lite]]
1069 who = "David Koloski <dkoloski@google.com>"
1070 criteria = "safe-to-deploy"
1071 version = "0.2.9"
1072 notes = "Reviewed on https://fxrev.dev/824504"
1073 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1074
1075 [[audits.google.audits.scoped-tls]]
1076 who = "George Burgess IV <gbiv@google.com>"
1077 criteria = "safe-to-run"
1078 version = "1.0.0"
1079 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1080
1081 [[audits.google.audits.serde_urlencoded]]
1082 who = "ChromeOS"
1083 criteria = "safe-to-run"
1084 version = "0.7.1"
1085 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1086
1087 [[audits.google.audits.tokio-stream]]
1088 who = "David Koloski <dkoloski@google.com>"
1089 criteria = "safe-to-deploy"
1090 version = "0.1.11"
1091 notes = "Reviewed on https://fxrev.dev/804724"
1092 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1093
1094 [[audits.google.audits.tower-service]]
1095 who = "ChromeOS"
1096 criteria = "safe-to-run"
1097 version = "0.3.2"
1098 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1099
1100 [[audits.google.audits.tracing]]
1101 who = "ChromeOS"
1102 criteria = "safe-to-run"
1103 version = "0.1.35"
1104 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1105
1106 [[audits.google.audits.tracing-attributes]]
1107 who = "ChromeOS"
1108 criteria = "safe-to-run"
1109 version = "0.1.22"
1110 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1111
1112 [[audits.google.audits.tracing-core]]
1113 who = "ChromeOS"
1114 criteria = "safe-to-run"
1115 version = "0.1.29"
1116 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1117
1118 [[audits.google.audits.try-lock]]
1119 who = "ChromeOS"
1120 criteria = "safe-to-run"
1121 version = "0.2.3"
1122 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1123
1124 [[audits.google.audits.version_check]]
1125 who = "George Burgess IV <gbiv@google.com>"
1126 criteria = "safe-to-deploy"
1127 version = "0.9.4"
1128 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1129
1130 [[audits.google.audits.want]]
1131 who = "ChromeOS"
1132 criteria = "safe-to-run"
1133 version = "0.3.0"
1134 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1135
1136 [[audits.isrg.wildcard-audits.prio]]
1137 who = "David Cook <dcook@divviup.org>"
1138 criteria = "safe-to-deploy"
1139 user-id = 101233 # le-automaton
1140 start = "2020-09-28"
1141 end = "2024-03-23"
1142
1143 [[audits.isrg.audits.block-buffer]]
1144 who = "David Cook <dcook@divviup.org>"
1145 criteria = "safe-to-deploy"
1146 version = "0.9.0"
1147
1148 [[audits.isrg.audits.keccak]]
1149 who = "David Cook <dcook@divviup.org>"
1150 criteria = "safe-to-deploy"
1151 version = "0.1.2"
1152
1153 [[audits.isrg.audits.once_cell]]
1154 who = "Brandon Pitman <bran@bran.land>"
1155 criteria = "safe-to-deploy"
1156 delta = "1.17.1 -> 1.17.2"
1157
1158 [[audits.isrg.audits.once_cell]]
1159 who = "David Cook <dcook@divviup.org>"
1160 criteria = "safe-to-deploy"
1161 delta = "1.17.2 -> 1.18.0"
1162
1163 [[audits.isrg.audits.rayon-core]]
1164 who = "Brandon Pitman <bran@bran.land>"
1165 criteria = "safe-to-deploy"
1166 delta = "1.10.2 -> 1.11.0"
1167
1168 [[audits.isrg.audits.sha3]]
1169 who = "David Cook <dcook@divviup.org>"
1170 criteria = "safe-to-deploy"
1171 version = "0.10.6"
1172
1173 [[audits.mozilla.wildcard-audits.zeitstempel]]
1174 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1175 criteria = "safe-to-deploy"
1176 user-id = 48 # Jan-Erik Rediger (badboy)
1177 start = "2021-03-03"
1178 end = "2024-05-10"
1179 notes = "Maintained by me"
1180 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1181
1182 [[audits.mozilla.audits.askama]]
1183 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1184 criteria = "safe-to-deploy"
1185 delta = "0.11.1 -> 0.12.0"
1186 notes = "No new unsafe usage, mostly dependency updates and smaller API changes"
1187 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1188
1189 [[audits.mozilla.audits.askama_derive]]
1190 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1191 criteria = "safe-to-deploy"
1192 delta = "0.11.2 -> 0.12.1"
1193 notes = "Dependency updates, a new toml dependency and some API changes. No unsafe use."
1194 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1195
1196 [[audits.mozilla.audits.basic-toml]]
1197 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1198 criteria = "safe-to-deploy"
1199 version = "0.1.2"
1200 notes = "TOML parser, forked from toml 0.5"
1201 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1202
1203 [[audits.mozilla.audits.either]]
1204 who = "Nika Layzell <nika@thelayzells.com>"
1205 criteria = "safe-to-deploy"
1206 version = "1.6.1"
1207 notes = """
1208 Straightforward crate providing the Either enum and trait implementations with
1209 no unsafe code.
1210 """
1211 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1212
1213 [[audits.mozilla.audits.lazy_static]]
1214 who = "Nika Layzell <nika@thelayzells.com>"
1215 criteria = "safe-to-deploy"
1216 version = "1.4.0"
1217 notes = "I have read over the macros, and audited the unsafe code."
1218 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"