supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "0.7.20"
   6 when = "2022-11-22"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.arbitrary]]
  12 version = "1.3.0"
  13 when = "2023-03-13"
  14 user-id = 696
  15 user-login = "fitzgen"
  16 user-name = "Nick Fitzgerald"
  17
  18 [[publisher.async-trait]]
  19 version = "0.1.68"
  20 when = "2023-03-24"
  21 user-id = 3618
  22 user-login = "dtolnay"
  23 user-name = "David Tolnay"
  24
  25 [[publisher.atomic]]
  26 version = "0.4.6"
  27 when = "2020-07-05"
  28 user-id = 2915
  29 user-login = "Amanieu"
  30 user-name = "Amanieu d'Antras"
  31
  32 [[publisher.audio_thread_priority]]
  33 version = "0.26.1"
  34 when = "2022-03-22"
  35 user-id = 1258
  36 user-login = "padenot"
  37 user-name = "Paul Adenot"
  38
  39 [[publisher.authenticator]]
  40 version = "0.4.0-alpha.15"
  41 when = "2023-05-15"
  42 user-id = 175410
  43 user-login = "jschanck"
  44 user-name = "John Schanck"
  45
  46 [[publisher.bhttp]]
  47 version = "0.3.1"
  48 when = "2023-02-23"
  49 user-id = 128763
  50 user-login = "martinthomson"
  51 user-name = "Martin Thomson"
  52
  53 [[publisher.byteorder]]
  54 version = "1.4.3"
  55 when = "2021-03-10"
  56 user-id = 189
  57 user-login = "BurntSushi"
  58 user-name = "Andrew Gallant"
  59
  60 [[publisher.bytes]]
  61 version = "1.4.0"
  62 when = "2023-01-31"
  63 user-id = 6741
  64 user-login = "Darksonn"
  65 user-name = "Alice Ryhl"
  66
  67 [[publisher.cexpr]]
  68 version = "0.6.0"
  69 when = "2021-10-11"
  70 user-id = 3788
  71 user-login = "emilio"
  72 user-name = "Emilio Cobos Álvarez"
  73
  74 [[publisher.core-foundation]]
  75 version = "0.9.3"
  76 when = "2022-02-07"
  77 user-id = 5946
  78 user-login = "jrmuizel"
  79 user-name = "Jeff Muizelaar"
  80
  81 [[publisher.core-foundation-sys]]
  82 version = "0.8.3"
  83 when = "2021-10-12"
  84 user-id = 2396
  85 user-login = "jdm"
  86 user-name = "Josh Matthews"
  87
  88 [[publisher.core-graphics]]
  89 version = "0.22.3"
  90 when = "2021-11-02"
  91 user-id = 5946
  92 user-login = "jrmuizel"
  93 user-name = "Jeff Muizelaar"
  94
  95 [[publisher.core-graphics-types]]
  96 version = "0.1.1"
  97 when = "2020-09-15"
  98 user-id = 2396
  99 user-login = "jdm"
 100 user-name = "Josh Matthews"
 101
 102 [[publisher.core-text]]
 103 version = "19.2.0"
 104 when = "2021-02-14"
 105 user-id = 5946
 106 user-login = "jrmuizel"
 107 user-name = "Jeff Muizelaar"
 108
 109 [[publisher.derive_arbitrary]]
 110 version = "1.3.0"
 111 when = "2023-03-13"
 112 user-id = 696
 113 user-login = "fitzgen"
 114 user-name = "Nick Fitzgerald"
 115
 116 [[publisher.dogear]]
 117 version = "0.4.0"
 118 when = "2019-09-16"
 119 user-id = 27901
 120 user-login = "linabutler"
 121 user-name = "Lina Butler"
 122
 123 [[publisher.dtoa]]
 124 version = "0.4.8"
 125 when = "2021-03-29"
 126 user-id = 3618
 127 user-login = "dtolnay"
 128 user-name = "David Tolnay"
 129
 130 [[publisher.etagere]]
 131 version = "0.2.7"
 132 when = "2022-05-04"
 133 user-id = 1281
 134 user-login = "nical"
 135 user-name = "Nicolas Silva"
 136
 137 [[publisher.euclid]]
 138 version = "0.22.7"
 139 when = "2022-04-04"
 140 user-id = 1281
 141 user-login = "nical"
 142 user-name = "Nicolas Silva"
 143
 144 [[publisher.flate2]]
 145 version = "1.0.24"
 146 when = "2022-05-28"
 147 user-id = 4333
 148 user-login = "joshtriplett"
 149 user-name = "Josh Triplett"
 150
 151 [[publisher.freetype]]
 152 version = "0.7.0"
 153 when = "2020-07-14"
 154 user-id = 2396
 155 user-login = "jdm"
 156 user-name = "Josh Matthews"
 157
 158 [[publisher.gleam]]
 159 version = "0.15.0"
 160 when = "2023-04-21"
 161 user-id = 5946
 162 user-login = "jrmuizel"
 163 user-name = "Jeff Muizelaar"
 164
 165 [[publisher.glean]]
 166 version = "52.7.0"
 167 when = "2023-05-10"
 168 user-id = 48
 169 user-login = "badboy"
 170 user-name = "Jan-Erik Rediger"
 171
 172 [[publisher.glean-core]]
 173 version = "52.7.0"
 174 when = "2023-05-10"
 175 user-id = 48
 176 user-login = "badboy"
 177 user-name = "Jan-Erik Rediger"
 178
 179 [[publisher.glslopt]]
 180 version = "0.1.9"
 181 when = "2021-03-17"
 182 user-id = 84794
 183 user-login = "jamienicol"
 184 user-name = "Jamie Nicol"
 185
 186 [[publisher.headers]]
 187 version = "0.3.8"
 188 when = "2022-09-02"
 189 user-id = 359
 190 user-login = "seanmonstar"
 191 user-name = "Sean McArthur"
 192
 193 [[publisher.httparse]]
 194 version = "1.8.0"
 195 when = "2022-08-30"
 196 user-id = 359
 197 user-login = "seanmonstar"
 198 user-name = "Sean McArthur"
 199
 200 [[publisher.indexmap]]
 201 version = "1.9.2"
 202 when = "2022-11-17"
 203 user-id = 539
 204 user-login = "cuviper"
 205 user-name = "Josh Stone"
 206
 207 [[publisher.inherent]]
 208 version = "1.0.4"
 209 when = "2023-02-15"
 210 user-id = 3618
 211 user-login = "dtolnay"
 212 user-name = "David Tolnay"
 213
 214 [[publisher.inherent]]
 215 version = "1.0.7"
 216 when = "2023-03-25"
 217 user-id = 3618
 218 user-login = "dtolnay"
 219 user-name = "David Tolnay"
 220
 221 [[publisher.iovec]]
 222 version = "0.1.4"
 223 when = "2019-10-09"
 224 user-id = 10
 225 user-login = "carllerche"
 226 user-name = "Carl Lerche"
 227
 228 [[publisher.itoa]]
 229 version = "1.0.5"
 230 when = "2022-12-17"
 231 user-id = 3618
 232 user-login = "dtolnay"
 233 user-name = "David Tolnay"
 234
 235 [[publisher.jobserver]]
 236 version = "0.1.25"
 237 when = "2022-09-23"
 238 user-id = 1
 239 user-login = "alexcrichton"
 240 user-name = "Alex Crichton"
 241
 242 [[publisher.libc]]
 243 version = "0.2.132"
 244 when = "2022-08-16"
 245 user-id = 2915
 246 user-login = "Amanieu"
 247 user-name = "Amanieu d'Antras"
 248
 249 [[publisher.lock_api]]
 250 version = "0.4.9"
 251 when = "2022-09-20"
 252 user-id = 2915
 253 user-login = "Amanieu"
 254 user-name = "Amanieu d'Antras"
 255
 256 [[publisher.memchr]]
 257 version = "2.5.0"
 258 when = "2022-04-30"
 259 user-id = 189
 260 user-login = "BurntSushi"
 261 user-name = "Andrew Gallant"
 262
 263 [[publisher.mime]]
 264 version = "0.3.16"
 265 when = "2020-01-07"
 266 user-id = 359
 267 user-login = "seanmonstar"
 268 user-name = "Sean McArthur"
 269
 270 [[publisher.mio]]
 271 version = "0.6.21"
 272 when = "2019-11-27"
 273 user-id = 10
 274 user-login = "carllerche"
 275 user-name = "Carl Lerche"
 276
 277 [[publisher.num_cpus]]
 278 version = "1.15.0"
 279 when = "2022-12-20"
 280 user-id = 359
 281 user-login = "seanmonstar"
 282 user-name = "Sean McArthur"
 283
 284 [[publisher.ohttp]]
 285 version = "0.3.1"
 286 when = "2023-02-23"
 287 user-id = 128763
 288 user-login = "martinthomson"
 289 user-name = "Martin Thomson"
 290
 291 [[publisher.ordered-float]]
 292 version = "3.4.0"
 293 when = "2022-11-06"
 294 user-id = 2017
 295 user-login = "mbrubeck"
 296 user-name = "Matt Brubeck"
 297
 298 [[publisher.parking_lot]]
 299 version = "0.11.2"
 300 when = "2021-08-27"
 301 user-id = 2915
 302 user-login = "Amanieu"
 303 user-name = "Amanieu d'Antras"
 304
 305 [[publisher.parking_lot_core]]
 306 version = "0.8.6"
 307 when = "2022-12-12"
 308 user-id = 2915
 309 user-login = "Amanieu"
 310 user-name = "Amanieu d'Antras"
 311
 312 [[publisher.paste]]
 313 version = "1.0.11"
 314 when = "2022-12-17"
 315 user-id = 3618
 316 user-login = "dtolnay"
 317 user-name = "David Tolnay"
 318
 319 [[publisher.proc-macro-hack]]
 320 version = "0.5.20+deprecated"
 321 when = "2022-12-19"
 322 user-id = 3618
 323 user-login = "dtolnay"
 324 user-name = "David Tolnay"
 325
 326 [[publisher.proc-macro2]]
 327 version = "1.0.59"
 328 when = "2023-05-25"
 329 user-id = 3618
 330 user-login = "dtolnay"
 331 user-name = "David Tolnay"
 332
 333 [[publisher.quote]]
 334 version = "1.0.28"
 335 when = "2023-05-25"
 336 user-id = 3618
 337 user-login = "dtolnay"
 338 user-name = "David Tolnay"
 339
 340 [[publisher.regex]]
 341 version = "1.7.1"
 342 when = "2023-01-09"
 343 user-id = 189
 344 user-login = "BurntSushi"
 345 user-name = "Andrew Gallant"
 346
 347 [[publisher.regex-syntax]]
 348 version = "0.6.28"
 349 when = "2022-11-05"
 350 user-id = 189
 351 user-login = "BurntSushi"
 352 user-name = "Andrew Gallant"
 353
 354 [[publisher.rust_cascade]]
 355 version = "1.5.0"
 356 when = "2023-04-05"
 357 user-id = 57462
 358 user-login = "mozkeeler"
 359 user-name = "Dana Keeler"
 360
 361 [[publisher.ryu]]
 362 version = "1.0.12"
 363 when = "2022-12-17"
 364 user-id = 3618
 365 user-login = "dtolnay"
 366 user-name = "David Tolnay"
 367
 368 [[publisher.same-file]]
 369 version = "1.0.6"
 370 when = "2020-01-11"
 371 user-id = 189
 372 user-login = "BurntSushi"
 373 user-name = "Andrew Gallant"
 374
 375 [[publisher.scopeguard]]
 376 version = "1.1.0"
 377 when = "2020-02-16"
 378 user-id = 2915
 379 user-login = "Amanieu"
 380 user-name = "Amanieu d'Antras"
 381
 382 [[publisher.serde]]
 383 version = "1.0.163"
 384 when = "2023-05-11"
 385 user-id = 3618
 386 user-login = "dtolnay"
 387 user-name = "David Tolnay"
 388
 389 [[publisher.serde_bytes]]
 390 version = "0.11.9"
 391 when = "2023-02-05"
 392 user-id = 3618
 393 user-login = "dtolnay"
 394 user-name = "David Tolnay"
 395
 396 [[publisher.serde_derive]]
 397 version = "1.0.163"
 398 when = "2023-05-10"
 399 user-id = 3618
 400 user-login = "dtolnay"
 401 user-name = "David Tolnay"
 402
 403 [[publisher.serde_json]]
 404 version = "1.0.93"
 405 when = "2023-02-08"
 406 user-id = 3618
 407 user-login = "dtolnay"
 408 user-name = "David Tolnay"
 409
 410 [[publisher.serde_repr]]
 411 version = "0.1.10"
 412 when = "2022-12-17"
 413 user-id = 3618
 414 user-login = "dtolnay"
 415 user-name = "David Tolnay"
 416
 417 [[publisher.serde_repr]]
 418 version = "0.1.12"
 419 when = "2023-03-18"
 420 user-id = 3618
 421 user-login = "dtolnay"
 422 user-name = "David Tolnay"
 423
 424 [[publisher.serde_yaml]]
 425 version = "0.8.26"
 426 when = "2022-07-16"
 427 user-id = 3618
 428 user-login = "dtolnay"
 429 user-name = "David Tolnay"
 430
 431 [[publisher.smallvec]]
 432 version = "1.10.0"
 433 when = "2022-10-02"
 434 user-id = 2017
 435 user-login = "mbrubeck"
 436 user-name = "Matt Brubeck"
 437
 438 [[publisher.syn]]
 439 version = "1.0.107"
 440 when = "2022-12-18"
 441 user-id = 3618
 442 user-login = "dtolnay"
 443 user-name = "David Tolnay"
 444
 445 [[publisher.syn]]
 446 version = "2.0.18"
 447 when = "2023-05-26"
 448 user-id = 3618
 449 user-login = "dtolnay"
 450 user-name = "David Tolnay"
 451
 452 [[publisher.termcolor]]
 453 version = "1.2.0"
 454 when = "2023-01-15"
 455 user-id = 189
 456 user-login = "BurntSushi"
 457 user-name = "Andrew Gallant"
 458
 459 [[publisher.thiserror]]
 460 version = "1.0.38"
 461 when = "2022-12-17"
 462 user-id = 3618
 463 user-login = "dtolnay"
 464 user-name = "David Tolnay"
 465
 466 [[publisher.thiserror-impl]]
 467 version = "1.0.38"
 468 when = "2022-12-17"
 469 user-id = 3618
 470 user-login = "dtolnay"
 471 user-name = "David Tolnay"
 472
 473 [[publisher.threadbound]]
 474 version = "0.1.5"
 475 when = "2022-12-17"
 476 user-id = 3618
 477 user-login = "dtolnay"
 478 user-name = "David Tolnay"
 479
 480 [[publisher.tokio-macros]]
 481 version = "1.8.0"
 482 when = "2022-06-04"
 483 user-id = 6741
 484 user-login = "Darksonn"
 485 user-name = "Alice Ryhl"
 486
 487 [[publisher.tokio-util]]
 488 version = "0.7.2"
 489 when = "2022-05-15"
 490 user-id = 6741
 491 user-login = "Darksonn"
 492 user-name = "Alice Ryhl"
 493
 494 [[publisher.toml]]
 495 version = "0.5.7"
 496 when = "2020-10-11"
 497 user-id = 1
 498 user-login = "alexcrichton"
 499 user-name = "Alex Crichton"
 500
 501 [[publisher.unicode-ident]]
 502 version = "1.0.6"
 503 when = "2022-12-17"
 504 user-id = 3618
 505 user-login = "dtolnay"
 506 user-name = "David Tolnay"
 507
 508 [[publisher.unicode-segmentation]]
 509 version = "1.10.0"
 510 when = "2022-09-13"
 511 user-id = 1139
 512 user-login = "Manishearth"
 513 user-name = "Manish Goregaokar"
 514
 515 [[publisher.unicode-width]]
 516 version = "0.1.10"
 517 when = "2022-09-13"
 518 user-id = 1139
 519 user-login = "Manishearth"
 520 user-name = "Manish Goregaokar"
 521
 522 [[publisher.unicode-xid]]
 523 version = "0.2.4"
 524 when = "2022-09-15"
 525 user-id = 1139
 526 user-login = "Manishearth"
 527 user-name = "Manish Goregaokar"
 528
 529 [[publisher.walkdir]]
 530 version = "2.3.2"
 531 when = "2021-03-22"
 532 user-id = 189
 533 user-login = "BurntSushi"
 534 user-name = "Andrew Gallant"
 535
 536 [[publisher.warp]]
 537 version = "0.3.3"
 538 when = "2022-09-27"
 539 user-id = 359
 540 user-login = "seanmonstar"
 541 user-name = "Sean McArthur"
 542
 543 [[publisher.wasi]]
 544 version = "0.11.0+wasi-snapshot-preview1"
 545 when = "2022-01-19"
 546 user-id = 1
 547 user-login = "alexcrichton"
 548 user-name = "Alex Crichton"
 549
 550 [[publisher.winapi-util]]
 551 version = "0.1.5"
 552 when = "2020-04-20"
 553 user-id = 189
 554 user-login = "BurntSushi"
 555 user-name = "Andrew Gallant"
 556
 557 [[publisher.zeitstempel]]
 558 version = "0.1.1"
 559 when = "2021-03-18"
 560 user-id = 48
 561 user-login = "badboy"
 562 user-name = "Jan-Erik Rediger"
 563
 564 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 565 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 566 criteria = "safe-to-deploy"
 567 user-id = 696 # Nick Fitzgerald (fitzgen)
 568 start = "2020-01-14"
 569 end = "2024-04-21"
 570 notes = "I am an author of this crate."
 571
 572 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 573 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 574 criteria = "safe-to-deploy"
 575 user-id = 696 # Nick Fitzgerald (fitzgen)
 576 start = "2020-01-14"
 577 end = "2024-04-27"
 578 notes = "I am an author of this crate"
 579
 580 [[audits.bytecode-alliance.audits.arrayref]]
 581 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 582 criteria = "safe-to-deploy"
 583 version = "0.3.6"
 584 notes = """
 585 Unsafe code, but its logic looks good to me. Necessary given what it is
 586 doing. Well tested, has quickchecks.
 587 """
 588
 589 [[audits.bytecode-alliance.audits.arrayvec]]
 590 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 591 criteria = "safe-to-deploy"
 592 version = "0.7.2"
 593 notes = """
 594 Well documented invariants, good assertions for those invariants in unsafe code,
 595 and tested with MIRI to boot. LGTM.
 596 """
 597
 598 [[audits.bytecode-alliance.audits.base64]]
 599 who = "Pat Hickey <phickey@fastly.com>"
 600 criteria = "safe-to-deploy"
 601 version = "0.21.0"
 602 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 603
 604 [[audits.bytecode-alliance.audits.block-buffer]]
 605 who = "Benjamin Bouvier <public@benj.me>"
 606 criteria = "safe-to-deploy"
 607 delta = "0.9.0 -> 0.10.2"
 608
 609 [[audits.bytecode-alliance.audits.bumpalo]]
 610 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 611 criteria = "safe-to-deploy"
 612 version = "3.11.1"
 613 notes = "I am the author of this crate."
 614
 615 [[audits.bytecode-alliance.audits.cargo-platform]]
 616 who = "Pat Hickey <phickey@fastly.com>"
 617 criteria = "safe-to-deploy"
 618 version = "0.1.2"
 619 notes = "no build, no ambient capabilities, no unsafe"
 620
 621 [[audits.bytecode-alliance.audits.cc]]
 622 who = "Alex Crichton <alex@alexcrichton.com>"
 623 criteria = "safe-to-deploy"
 624 version = "1.0.73"
 625 notes = "I am the author of this crate."
 626
 627 [[audits.bytecode-alliance.audits.cfg-if]]
 628 who = "Alex Crichton <alex@alexcrichton.com>"
 629 criteria = "safe-to-deploy"
 630 version = "1.0.0"
 631 notes = "I am the author of this crate."
 632
 633 [[audits.bytecode-alliance.audits.codespan-reporting]]
 634 who = "Jamey Sharp <jsharp@fastly.com>"
 635 criteria = "safe-to-deploy"
 636 version = "0.11.1"
 637 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 638
 639 [[audits.bytecode-alliance.audits.crypto-common]]
 640 who = "Benjamin Bouvier <public@benj.me>"
 641 criteria = "safe-to-deploy"
 642 version = "0.1.3"
 643
 644 [[audits.bytecode-alliance.audits.foreign-types]]
 645 who = "Pat Hickey <phickey@fastly.com>"
 646 criteria = "safe-to-deploy"
 647 version = "0.3.2"
 648 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 649
 650 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 651 who = "Pat Hickey <phickey@fastly.com>"
 652 criteria = "safe-to-deploy"
 653 version = "0.1.1"
 654
 655 [[audits.bytecode-alliance.audits.form_urlencoded]]
 656 who = "Alex Crichton <alex@alexcrichton.com>"
 657 criteria = "safe-to-deploy"
 658 version = "1.1.0"
 659 notes = """
 660 This is a small crate for working with url-encoded forms which doesn't have any
 661 more than what it says on the tin. Contains one `unsafe` block related to
 662 performance around utf-8 validation which is fairly easy to verify as correct.
 663 """
 664
 665 [[audits.bytecode-alliance.audits.futures-channel]]
 666 who = "Pat Hickey <phickey@fastly.com>"
 667 criteria = "safe-to-deploy"
 668 version = "0.3.27"
 669 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 670
 671 [[audits.bytecode-alliance.audits.futures-core]]
 672 who = "Pat Hickey <phickey@fastly.com>"
 673 criteria = "safe-to-deploy"
 674 version = "0.3.27"
 675 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 676
 677 [[audits.bytecode-alliance.audits.futures-executor]]
 678 who = "Pat Hickey <phickey@fastly.com>"
 679 criteria = "safe-to-deploy"
 680 version = "0.3.27"
 681 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 682
 683 [[audits.bytecode-alliance.audits.futures-io]]
 684 who = "Pat Hickey <phickey@fastly.com>"
 685 criteria = "safe-to-deploy"
 686 version = "0.3.27"
 687
 688 [[audits.bytecode-alliance.audits.futures-sink]]
 689 who = "Pat Hickey <phickey@fastly.com>"
 690 criteria = "safe-to-deploy"
 691 version = "0.3.27"
 692
 693 [[audits.bytecode-alliance.audits.heck]]
 694 who = "Alex Crichton <alex@alexcrichton.com>"
 695 criteria = "safe-to-deploy"
 696 version = "0.4.0"
 697 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 698
 699 [[audits.bytecode-alliance.audits.id-arena]]
 700 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 701 criteria = "safe-to-deploy"
 702 version = "2.2.1"
 703 notes = "I am the author of this crate."
 704
 705 [[audits.bytecode-alliance.audits.idna]]
 706 who = "Alex Crichton <alex@alexcrichton.com>"
 707 criteria = "safe-to-deploy"
 708 version = "0.3.0"
 709 notes = """
 710 This is a crate without unsafe code or usage of the standard library. The large
 711 size of this crate comes from the large generated unicode tables file. This
 712 crate is broadly used throughout the ecosystem and does not contain anything
 713 suspicious.
 714 """
 715
 716 [[audits.bytecode-alliance.audits.leb128]]
 717 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 718 criteria = "safe-to-deploy"
 719 version = "0.2.5"
 720 notes = "I am the author of this crate."
 721
 722 [[audits.bytecode-alliance.audits.memoffset]]
 723 who = "Alex Crichton <alex@alexcrichton.com>"
 724 criteria = "safe-to-deploy"
 725 delta = "0.7.1 -> 0.8.0"
 726 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 727
 728 [[audits.bytecode-alliance.audits.peeking_take_while]]
 729 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 730 criteria = "safe-to-deploy"
 731 version = "1.0.0"
 732 notes = "I am the author of this crate."
 733
 734 [[audits.bytecode-alliance.audits.percent-encoding]]
 735 who = "Alex Crichton <alex@alexcrichton.com>"
 736 criteria = "safe-to-deploy"
 737 version = "2.2.0"
 738 notes = """
 739 This crate is a single-file crate that does what it says on the tin. There are
 740 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
 741 as correct and otherwise this crate is good to go.
 742 """
 743
 744 [[audits.bytecode-alliance.audits.pin-utils]]
 745 who = "Pat Hickey <phickey@fastly.com>"
 746 criteria = "safe-to-deploy"
 747 version = "0.1.0"
 748
 749 [[audits.bytecode-alliance.audits.pkg-config]]
 750 who = "Pat Hickey <phickey@fastly.com>"
 751 criteria = "safe-to-deploy"
 752 version = "0.3.25"
 753 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
 754
 755 [[audits.bytecode-alliance.audits.rustc-demangle]]
 756 who = "Alex Crichton <alex@alexcrichton.com>"
 757 criteria = "safe-to-deploy"
 758 version = "0.1.21"
 759 notes = "I am the author of this crate."
 760
 761 [[audits.bytecode-alliance.audits.semver]]
 762 who = "Pat Hickey <phickey@fastly.com>"
 763 criteria = "safe-to-deploy"
 764 version = "1.0.17"
 765 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
 766
 767 [[audits.bytecode-alliance.audits.slab]]
 768 who = "Pat Hickey <phickey@fastly.com>"
 769 criteria = "safe-to-deploy"
 770 version = "0.4.6"
 771 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
 772
 773 [[audits.bytecode-alliance.audits.unicase]]
 774 who = "Alex Crichton <alex@alexcrichton.com>"
 775 criteria = "safe-to-deploy"
 776 version = "2.6.0"
 777 notes = """
 778 This crate contains no `unsafe` code and no unnecessary use of the standard
 779 library.
 780 """
 781
 782 [[audits.bytecode-alliance.audits.unicode-bidi]]
 783 who = "Alex Crichton <alex@alexcrichton.com>"
 784 criteria = "safe-to-deploy"
 785 version = "0.3.8"
 786 notes = """
 787 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
 788 does not attempt to out of the bounds of what it's already supposed to be doing.
 789 """
 790
 791 [[audits.bytecode-alliance.audits.unicode-normalization]]
 792 who = "Alex Crichton <alex@alexcrichton.com>"
 793 criteria = "safe-to-deploy"
 794 version = "0.1.19"
 795 notes = """
 796 This crate contains one usage of `unsafe` which I have manually checked to see
 797 it as correct. This crate's size comes in large part due to the generated
 798 unicode tables that it contains. This crate is additionally widely used
 799 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
 800 and nothing suspicious.
 801 """
 802
 803 [[audits.bytecode-alliance.audits.wasm-encoder]]
 804 who = "Alex Crichton <alex@alexcrichton.com>"
 805 criteria = "safe-to-deploy"
 806 version = "0.25.0"
 807 notes = "The Bytecode Alliance is the author of this crate."
 808
 809 [[audits.bytecode-alliance.audits.wasm-smith]]
 810 who = "Alex Crichton <alex@alexcrichton.com>"
 811 criteria = "safe-to-run"
 812 version = "0.12.5"
 813 notes = "The Bytecode Alliance is the author of this crate."
 814
 815 [[audits.bytecode-alliance.audits.wasmparser]]
 816 who = "Alex Crichton <alex@alexcrichton.com>"
 817 criteria = "safe-to-deploy"
 818 version = "0.102.0"
 819 notes = "The Bytecode Alliance is the author of this crate."
 820
 821 [[audits.bytecode-alliance.audits.wast]]
 822 who = "Alex Crichton <alex@alexcrichton.com>"
 823 criteria = "safe-to-deploy"
 824 version = "55.0.0"
 825 notes = "The Bytecode Alliance is the author of this crate."
 826
 827 [[audits.embark-studios.audits.anyhow]]
 828 who = "Johan Andersson <opensource@embark-studios.com>"
 829 criteria = "safe-to-deploy"
 830 version = "1.0.58"
 831
 832 [[audits.embark-studios.audits.cty]]
 833 who = "Johan Andersson <opensource@embark-studios.com>"
 834 criteria = "safe-to-deploy"
 835 version = "0.2.2"
 836 notes = "Inspected it and is a tiny crate with just type definitions"
 837
 838 [[audits.embark-studios.audits.derive_more]]
 839 who = "Johan Andersson <opensource@embark-studios.com>"
 840 criteria = "safe-to-deploy"
 841 version = "0.99.17"
 842 notes = "No unsafe usage or ambient capabilities"
 843
 844 [[audits.embark-studios.audits.epaint]]
 845 who = "Johan Andersson <opensource@embark-studios.com>"
 846 criteria = "safe-to-deploy"
 847 violation = "<0.20.0"
 848 notes = "Specified crate license does not include licenses of embedded fonts if using default features or the `default_fonts` feature. Tracked in: https://github.com/emilk/egui/issues/2321"
 849
 850 [[audits.embark-studios.audits.ident_case]]
 851 who = "Johan Andersson <opensource@embark-studios.com>"
 852 criteria = "safe-to-deploy"
 853 version = "1.0.1"
 854 notes = "No unsafe usage or ambient capabilities"
 855
 856 [[audits.embark-studios.audits.thiserror]]
 857 who = "Johan Andersson <opensource@embark-studios.com>"
 858 criteria = "safe-to-deploy"
 859 version = "1.0.40"
 860 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
 861
 862 [[audits.embark-studios.audits.thiserror-impl]]
 863 who = "Johan Andersson <opensource@embark-studios.com>"
 864 criteria = "safe-to-deploy"
 865 version = "1.0.40"
 866 notes = "Found no unsafe or ambient capabilities used"
 867
 868 [[audits.google.audits.ash]]
 869 who = "David Koloski <dkoloski@google.com>"
 870 criteria = "safe-to-deploy"
 871 version = "0.37.0+1.3.209"
 872 notes = "Reviewed on https://fxrev.dev/694269"
 873 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 874
 875 [[audits.google.audits.fastrand]]
 876 who = "George Burgess IV <gbiv@google.com>"
 877 criteria = "safe-to-deploy"
 878 version = "1.9.0"
 879 notes = """
 880 `does-not-implement-crypto` is certified because this crate explicitly says
 881 that the RNG here is not cryptographically secure.
 882 """
 883 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 884
 885 [[audits.google.audits.glob]]
 886 who = "George Burgess IV <gbiv@google.com>"
 887 criteria = "safe-to-deploy"
 888 version = "0.3.1"
 889 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 890
 891 [[audits.google.audits.h2]]
 892 who = "ChromeOS"
 893 criteria = "safe-to-run"
 894 version = "0.3.14"
 895 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 896
 897 [[audits.google.audits.http]]
 898 who = "ChromeOS"
 899 criteria = "safe-to-run"
 900 version = "0.2.8"
 901 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 902
 903 [[audits.google.audits.http-body]]
 904 who = "ChromeOS"
 905 criteria = "safe-to-run"
 906 version = "0.4.5"
 907 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 908
 909 [[audits.google.audits.httpdate]]
 910 who = "ChromeOS"
 911 criteria = "safe-to-run"
 912 version = "1.0.2"
 913 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 914
 915 [[audits.google.audits.hyper]]
 916 who = "ChromeOS"
 917 criteria = "safe-to-run"
 918 version = "0.14.20"
 919 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 920
 921 [[audits.google.audits.pin-project]]
 922 who = "ChromeOS"
 923 criteria = "safe-to-run"
 924 version = "1.0.12"
 925 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 926
 927 [[audits.google.audits.pin-project-internal]]
 928 who = "ChromeOS"
 929 criteria = "safe-to-run"
 930 version = "1.0.12"
 931 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 932
 933 [[audits.google.audits.proc-macro-error-attr]]
 934 who = "George Burgess IV <gbiv@google.com>"
 935 criteria = "safe-to-deploy"
 936 version = "1.0.4"
 937 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 938
 939 [[audits.google.audits.scoped-tls]]
 940 who = "George Burgess IV <gbiv@google.com>"
 941 criteria = "safe-to-run"
 942 version = "1.0.0"
 943 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 944
 945 [[audits.google.audits.serde_urlencoded]]
 946 who = "ChromeOS"
 947 criteria = "safe-to-run"
 948 version = "0.7.1"
 949 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 950
 951 [[audits.google.audits.tokio-stream]]
 952 who = "David Koloski <dkoloski@google.com>"
 953 criteria = "safe-to-deploy"
 954 version = "0.1.11"
 955 notes = "Reviewed on https://fxrev.dev/804724"
 956 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 957
 958 [[audits.google.audits.tower-service]]
 959 who = "ChromeOS"
 960 criteria = "safe-to-run"
 961 version = "0.3.2"
 962 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 963
 964 [[audits.google.audits.tracing]]
 965 who = "ChromeOS"
 966 criteria = "safe-to-run"
 967 version = "0.1.35"
 968 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 969
 970 [[audits.google.audits.tracing-attributes]]
 971 who = "ChromeOS"
 972 criteria = "safe-to-run"
 973 version = "0.1.22"
 974 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 975
 976 [[audits.google.audits.tracing-core]]
 977 who = "ChromeOS"
 978 criteria = "safe-to-run"
 979 version = "0.1.29"
 980 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 981
 982 [[audits.google.audits.try-lock]]
 983 who = "ChromeOS"
 984 criteria = "safe-to-run"
 985 version = "0.2.3"
 986 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 987
 988 [[audits.google.audits.version_check]]
 989 who = "George Burgess IV <gbiv@google.com>"
 990 criteria = "safe-to-deploy"
 991 version = "0.9.4"
 992 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 993
 994 [[audits.google.audits.want]]
 995 who = "ChromeOS"
 996 criteria = "safe-to-run"
 997 version = "0.3.0"
 998 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 999
1000 [[audits.isrg.audits.block-buffer]]
1001 who = "David Cook <dcook@divviup.org>"
1002 criteria = "safe-to-deploy"
1003 version = "0.9.0"
1004
1005 [[audits.mozilla.wildcard-audits.zeitstempel]]
1006 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1007 criteria = "safe-to-deploy"
1008 user-id = 48 # Jan-Erik Rediger (badboy)
1009 start = "2021-03-03"
1010 end = "2024-05-10"
1011 notes = "Maintained by me"
1012 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1013
1014 [[audits.mozilla.audits.either]]
1015 who = "Nika Layzell <nika@thelayzells.com>"
1016 criteria = "safe-to-deploy"
1017 version = "1.6.1"
1018 notes = """
1019 Straightforward crate providing the Either enum and trait implementations with
1020 no unsafe code.
1021 """
1022 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1023
1024 [[audits.mozilla.audits.lazy_static]]
1025 who = "Nika Layzell <nika@thelayzells.com>"
1026 criteria = "safe-to-deploy"
1027 version = "1.4.0"
1028 notes = "I have read over the macros, and audited the unsafe code."
1029 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"