supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "1.1.0"
   6 when = "2023-09-18"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.anstyle]]
  12 version = "1.0.3"
  13 when = "2023-09-11"
  14 user-id = 6743
  15 user-login = "epage"
  16 user-name = "Ed Page"
  17
  18 [[publisher.arbitrary]]
  19 version = "1.3.0"
  20 when = "2023-03-13"
  21 user-id = 696
  22 user-login = "fitzgen"
  23 user-name = "Nick Fitzgerald"
  24
  25 [[publisher.async-trait]]
  26 version = "0.1.68"
  27 when = "2023-03-24"
  28 user-id = 3618
  29 user-login = "dtolnay"
  30 user-name = "David Tolnay"
  31
  32 [[publisher.atomic]]
  33 version = "0.4.6"
  34 when = "2020-07-05"
  35 user-id = 2915
  36 user-login = "Amanieu"
  37 user-name = "Amanieu d'Antras"
  38
  39 [[publisher.audio_thread_priority]]
  40 version = "0.32.0"
  41 when = "2024-03-14"
  42 user-id = 1258
  43 user-login = "padenot"
  44 user-name = "Paul Adenot"
  45
  46 [[publisher.authenticator]]
  47 version = "0.4.0-alpha.24"
  48 when = "2023-11-29"
  49 user-id = 175410
  50 user-login = "jschanck"
  51 user-name = "John Schanck"
  52
  53 [[publisher.bhttp]]
  54 version = "0.3.1"
  55 when = "2023-02-23"
  56 user-id = 128763
  57 user-login = "martinthomson"
  58 user-name = "Martin Thomson"
  59
  60 [[publisher.bumpalo]]
  61 version = "3.15.4"
  62 when = "2024-03-07"
  63 user-id = 696
  64 user-login = "fitzgen"
  65 user-name = "Nick Fitzgerald"
  66
  67 [[publisher.byteorder]]
  68 version = "1.4.3"
  69 when = "2021-03-10"
  70 user-id = 189
  71 user-login = "BurntSushi"
  72 user-name = "Andrew Gallant"
  73
  74 [[publisher.bytes]]
  75 version = "1.4.0"
  76 when = "2023-01-31"
  77 user-id = 6741
  78 user-login = "Darksonn"
  79 user-name = "Alice Ryhl"
  80
  81 [[publisher.cc]]
  82 version = "1.0.89"
  83 when = "2024-03-04"
  84 user-id = 2915
  85 user-login = "Amanieu"
  86 user-name = "Amanieu d'Antras"
  87
  88 [[publisher.cexpr]]
  89 version = "0.6.0"
  90 when = "2021-10-11"
  91 user-id = 3788
  92 user-login = "emilio"
  93 user-name = "Emilio Cobos Álvarez"
  94
  95 [[publisher.clap]]
  96 version = "4.4.5"
  97 when = "2023-09-25"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.clap_builder]]
 103 version = "4.4.5"
 104 when = "2023-09-25"
 105 user-id = 6743
 106 user-login = "epage"
 107 user-name = "Ed Page"
 108
 109 [[publisher.clap_derive]]
 110 version = "4.4.2"
 111 when = "2023-08-31"
 112 user-id = 6743
 113 user-login = "epage"
 114 user-name = "Ed Page"
 115
 116 [[publisher.clap_lex]]
 117 version = "0.5.1"
 118 when = "2023-08-24"
 119 user-id = 6743
 120 user-login = "epage"
 121 user-name = "Ed Page"
 122
 123 [[publisher.core-foundation]]
 124 version = "0.9.3"
 125 when = "2022-02-07"
 126 user-id = 5946
 127 user-login = "jrmuizel"
 128 user-name = "Jeff Muizelaar"
 129
 130 [[publisher.core-foundation-sys]]
 131 version = "0.8.3"
 132 when = "2021-10-12"
 133 user-id = 2396
 134 user-login = "jdm"
 135 user-name = "Josh Matthews"
 136
 137 [[publisher.core-graphics]]
 138 version = "0.22.3"
 139 when = "2021-11-02"
 140 user-id = 5946
 141 user-login = "jrmuizel"
 142 user-name = "Jeff Muizelaar"
 143
 144 [[publisher.core-graphics-types]]
 145 version = "0.1.1"
 146 when = "2020-09-15"
 147 user-id = 2396
 148 user-login = "jdm"
 149 user-name = "Josh Matthews"
 150
 151 [[publisher.core-text]]
 152 version = "19.2.0"
 153 when = "2021-02-14"
 154 user-id = 5946
 155 user-login = "jrmuizel"
 156 user-name = "Jeff Muizelaar"
 157
 158 [[publisher.derive_arbitrary]]
 159 version = "1.3.0"
 160 when = "2023-03-13"
 161 user-id = 696
 162 user-login = "fitzgen"
 163 user-name = "Nick Fitzgerald"
 164
 165 [[publisher.dogear]]
 166 version = "0.4.0"
 167 when = "2019-09-16"
 168 user-id = 27901
 169 user-login = "linabutler"
 170 user-name = "Lina Butler"
 171
 172 [[publisher.dtoa]]
 173 version = "0.4.8"
 174 when = "2021-03-29"
 175 user-id = 3618
 176 user-login = "dtolnay"
 177 user-name = "David Tolnay"
 178
 179 [[publisher.encoding_rs]]
 180 version = "0.8.33"
 181 when = "2023-08-23"
 182 user-id = 4484
 183 user-login = "hsivonen"
 184 user-name = "Henri Sivonen"
 185
 186 [[publisher.errno]]
 187 version = "0.3.8"
 188 when = "2023-11-28"
 189 user-id = 6825
 190 user-login = "sunfishcode"
 191 user-name = "Dan Gohman"
 192
 193 [[publisher.etagere]]
 194 version = "0.2.7"
 195 when = "2022-05-04"
 196 user-id = 1281
 197 user-login = "nical"
 198 user-name = "Nicolas Silva"
 199
 200 [[publisher.euclid]]
 201 version = "0.22.7"
 202 when = "2022-04-04"
 203 user-id = 1281
 204 user-login = "nical"
 205 user-name = "Nicolas Silva"
 206
 207 [[publisher.flate2]]
 208 version = "1.0.26"
 209 when = "2023-04-28"
 210 user-id = 4333
 211 user-login = "joshtriplett"
 212 user-name = "Josh Triplett"
 213
 214 [[publisher.freetype]]
 215 version = "0.7.0"
 216 when = "2020-07-14"
 217 user-id = 2396
 218 user-login = "jdm"
 219 user-name = "Josh Matthews"
 220
 221 [[publisher.gleam]]
 222 version = "0.15.0"
 223 when = "2023-04-21"
 224 user-id = 5946
 225 user-login = "jrmuizel"
 226 user-name = "Jeff Muizelaar"
 227
 228 [[publisher.glean]]
 229 version = "58.1.0"
 230 when = "2024-03-12"
 231 user-id = 48
 232 user-login = "badboy"
 233 user-name = "Jan-Erik Rediger"
 234
 235 [[publisher.glean-core]]
 236 version = "58.1.0"
 237 when = "2024-03-12"
 238 user-id = 48
 239 user-login = "badboy"
 240 user-name = "Jan-Erik Rediger"
 241
 242 [[publisher.glslopt]]
 243 version = "0.1.10"
 244 when = "2024-02-13"
 245 user-id = 84794
 246 user-login = "jamienicol"
 247 user-name = "Jamie Nicol"
 248
 249 [[publisher.h2]]
 250 version = "0.3.22"
 251 when = "2023-11-15"
 252 user-id = 359
 253 user-login = "seanmonstar"
 254 user-name = "Sean McArthur"
 255
 256 [[publisher.headers]]
 257 version = "0.3.9"
 258 when = "2023-08-31"
 259 user-id = 359
 260 user-login = "seanmonstar"
 261 user-name = "Sean McArthur"
 262
 263 [[publisher.httparse]]
 264 version = "1.8.0"
 265 when = "2022-08-30"
 266 user-id = 359
 267 user-login = "seanmonstar"
 268 user-name = "Sean McArthur"
 269
 270 [[publisher.indexmap]]
 271 version = "1.9.3"
 272 when = "2023-03-24"
 273 user-id = 539
 274 user-login = "cuviper"
 275 user-name = "Josh Stone"
 276
 277 [[publisher.inherent]]
 278 version = "1.0.7"
 279 when = "2023-03-25"
 280 user-id = 3618
 281 user-login = "dtolnay"
 282 user-name = "David Tolnay"
 283
 284 [[publisher.iovec]]
 285 version = "0.1.4"
 286 when = "2019-10-09"
 287 user-id = 10
 288 user-login = "carllerche"
 289 user-name = "Carl Lerche"
 290
 291 [[publisher.itoa]]
 292 version = "1.0.5"
 293 when = "2022-12-17"
 294 user-id = 3618
 295 user-login = "dtolnay"
 296 user-name = "David Tolnay"
 297
 298 [[publisher.jobserver]]
 299 version = "0.1.25"
 300 when = "2022-09-23"
 301 user-id = 1
 302 user-login = "alexcrichton"
 303 user-name = "Alex Crichton"
 304
 305 [[publisher.libc]]
 306 version = "0.2.152"
 307 when = "2024-01-07"
 308 user-id = 51017
 309 user-login = "JohnTitor"
 310 user-name = "Yuki Okushi"
 311
 312 [[publisher.linux-raw-sys]]
 313 version = "0.4.12"
 314 when = "2023-11-30"
 315 user-id = 6825
 316 user-login = "sunfishcode"
 317 user-name = "Dan Gohman"
 318
 319 [[publisher.lock_api]]
 320 version = "0.4.9"
 321 when = "2022-09-20"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.memchr]]
 327 version = "2.5.0"
 328 when = "2022-04-30"
 329 user-id = 189
 330 user-login = "BurntSushi"
 331 user-name = "Andrew Gallant"
 332
 333 [[publisher.mime]]
 334 version = "0.3.16"
 335 when = "2020-01-07"
 336 user-id = 359
 337 user-login = "seanmonstar"
 338 user-name = "Sean McArthur"
 339
 340 [[publisher.mio]]
 341 version = "0.6.21"
 342 when = "2019-11-27"
 343 user-id = 10
 344 user-login = "carllerche"
 345 user-name = "Carl Lerche"
 346
 347 [[publisher.nss-gk-api]]
 348 version = "0.3.0"
 349 when = "2023-06-14"
 350 user-id = 175410
 351 user-login = "jschanck"
 352 user-name = "John Schanck"
 353
 354 [[publisher.num_cpus]]
 355 version = "1.15.0"
 356 when = "2022-12-20"
 357 user-id = 359
 358 user-login = "seanmonstar"
 359 user-name = "Sean McArthur"
 360
 361 [[publisher.ohttp]]
 362 version = "0.3.1"
 363 when = "2023-02-23"
 364 user-id = 128763
 365 user-login = "martinthomson"
 366 user-name = "Martin Thomson"
 367
 368 [[publisher.ordered-float]]
 369 version = "3.4.0"
 370 when = "2022-11-06"
 371 user-id = 2017
 372 user-login = "mbrubeck"
 373 user-name = "Matt Brubeck"
 374
 375 [[publisher.parking_lot]]
 376 version = "0.12.1"
 377 when = "2022-05-31"
 378 user-id = 2915
 379 user-login = "Amanieu"
 380 user-name = "Amanieu d'Antras"
 381
 382 [[publisher.parking_lot_core]]
 383 version = "0.9.9"
 384 when = "2023-10-17"
 385 user-id = 2915
 386 user-login = "Amanieu"
 387 user-name = "Amanieu d'Antras"
 388
 389 [[publisher.paste]]
 390 version = "1.0.11"
 391 when = "2022-12-17"
 392 user-id = 3618
 393 user-login = "dtolnay"
 394 user-name = "David Tolnay"
 395
 396 [[publisher.presser]]
 397 version = "0.3.1"
 398 when = "2022-10-16"
 399 user-id = 52553
 400 user-login = "embark-studios"
 401
 402 [[publisher.prio]]
 403 version = "0.15.3"
 404 when = "2023-10-03"
 405 user-id = 213776
 406 user-login = "divviup-github-automation"
 407
 408 [[publisher.proc-macro2]]
 409 version = "1.0.74"
 410 when = "2024-01-02"
 411 user-id = 3618
 412 user-login = "dtolnay"
 413 user-name = "David Tolnay"
 414
 415 [[publisher.qcms]]
 416 version = "0.3.0"
 417 when = "2024-01-09"
 418 user-id = 5946
 419 user-login = "jrmuizel"
 420 user-name = "Jeff Muizelaar"
 421
 422 [[publisher.quote]]
 423 version = "1.0.35"
 424 when = "2024-01-02"
 425 user-id = 3618
 426 user-login = "dtolnay"
 427 user-name = "David Tolnay"
 428
 429 [[publisher.regex]]
 430 version = "1.9.4"
 431 when = "2023-08-26"
 432 user-id = 189
 433 user-login = "BurntSushi"
 434 user-name = "Andrew Gallant"
 435
 436 [[publisher.regex-automata]]
 437 version = "0.3.7"
 438 when = "2023-08-26"
 439 user-id = 189
 440 user-login = "BurntSushi"
 441 user-name = "Andrew Gallant"
 442
 443 [[publisher.regex-syntax]]
 444 version = "0.7.5"
 445 when = "2023-08-26"
 446 user-id = 189
 447 user-login = "BurntSushi"
 448 user-name = "Andrew Gallant"
 449
 450 [[publisher.rust_cascade]]
 451 version = "1.5.0"
 452 when = "2023-04-05"
 453 user-id = 57462
 454 user-login = "mozkeeler"
 455 user-name = "Dana Keeler"
 456
 457 [[publisher.rustix]]
 458 version = "0.38.28"
 459 when = "2023-12-09"
 460 user-id = 6825
 461 user-login = "sunfishcode"
 462 user-name = "Dan Gohman"
 463
 464 [[publisher.ryu]]
 465 version = "1.0.12"
 466 when = "2022-12-17"
 467 user-id = 3618
 468 user-login = "dtolnay"
 469 user-name = "David Tolnay"
 470
 471 [[publisher.same-file]]
 472 version = "1.0.6"
 473 when = "2020-01-11"
 474 user-id = 189
 475 user-login = "BurntSushi"
 476 user-name = "Andrew Gallant"
 477
 478 [[publisher.scopeguard]]
 479 version = "1.1.0"
 480 when = "2020-02-16"
 481 user-id = 2915
 482 user-login = "Amanieu"
 483 user-name = "Amanieu d'Antras"
 484
 485 [[publisher.serde]]
 486 version = "1.0.197"
 487 when = "2024-02-20"
 488 user-id = 3618
 489 user-login = "dtolnay"
 490 user-name = "David Tolnay"
 491
 492 [[publisher.serde_bytes]]
 493 version = "0.11.9"
 494 when = "2023-02-05"
 495 user-id = 3618
 496 user-login = "dtolnay"
 497 user-name = "David Tolnay"
 498
 499 [[publisher.serde_derive]]
 500 version = "1.0.197"
 501 when = "2024-02-20"
 502 user-id = 3618
 503 user-login = "dtolnay"
 504 user-name = "David Tolnay"
 505
 506 [[publisher.serde_json]]
 507 version = "1.0.93"
 508 when = "2023-02-08"
 509 user-id = 3618
 510 user-login = "dtolnay"
 511 user-name = "David Tolnay"
 512
 513 [[publisher.serde_repr]]
 514 version = "0.1.12"
 515 when = "2023-03-18"
 516 user-id = 3618
 517 user-login = "dtolnay"
 518 user-name = "David Tolnay"
 519
 520 [[publisher.serde_yaml]]
 521 version = "0.8.26"
 522 when = "2022-07-16"
 523 user-id = 3618
 524 user-login = "dtolnay"
 525 user-name = "David Tolnay"
 526
 527 [[publisher.smallvec]]
 528 version = "1.13.1"
 529 when = "2024-01-19"
 530 user-id = 2017
 531 user-login = "mbrubeck"
 532 user-name = "Matt Brubeck"
 533
 534 [[publisher.syn]]
 535 version = "2.0.46"
 536 when = "2024-01-02"
 537 user-id = 3618
 538 user-login = "dtolnay"
 539 user-name = "David Tolnay"
 540
 541 [[publisher.termcolor]]
 542 version = "1.4.1"
 543 when = "2024-01-10"
 544 user-id = 189
 545 user-login = "BurntSushi"
 546 user-name = "Andrew Gallant"
 547
 548 [[publisher.thiserror]]
 549 version = "1.0.57"
 550 when = "2024-02-11"
 551 user-id = 3618
 552 user-login = "dtolnay"
 553 user-name = "David Tolnay"
 554
 555 [[publisher.thiserror-impl]]
 556 version = "1.0.57"
 557 when = "2024-02-11"
 558 user-id = 3618
 559 user-login = "dtolnay"
 560 user-name = "David Tolnay"
 561
 562 [[publisher.threadbound]]
 563 version = "0.1.5"
 564 when = "2022-12-17"
 565 user-id = 3618
 566 user-login = "dtolnay"
 567 user-name = "David Tolnay"
 568
 569 [[publisher.tokio-util]]
 570 version = "0.7.2"
 571 when = "2022-05-15"
 572 user-id = 6741
 573 user-login = "Darksonn"
 574 user-name = "Alice Ryhl"
 575
 576 [[publisher.toml]]
 577 version = "0.5.7"
 578 when = "2020-10-11"
 579 user-id = 1
 580 user-login = "alexcrichton"
 581 user-name = "Alex Crichton"
 582
 583 [[publisher.unicode-ident]]
 584 version = "1.0.6"
 585 when = "2022-12-17"
 586 user-id = 3618
 587 user-login = "dtolnay"
 588 user-name = "David Tolnay"
 589
 590 [[publisher.unicode-width]]
 591 version = "0.1.10"
 592 when = "2022-09-13"
 593 user-id = 1139
 594 user-login = "Manishearth"
 595 user-name = "Manish Goregaokar"
 596
 597 [[publisher.unicode-xid]]
 598 version = "0.2.4"
 599 when = "2022-09-15"
 600 user-id = 1139
 601 user-login = "Manishearth"
 602 user-name = "Manish Goregaokar"
 603
 604 [[publisher.uniffi]]
 605 version = "0.25.3"
 606 when = "2023-12-07"
 607 user-id = 127697
 608 user-login = "bendk"
 609
 610 [[publisher.uniffi_bindgen]]
 611 version = "0.25.3"
 612 when = "2023-12-07"
 613 user-id = 127697
 614 user-login = "bendk"
 615
 616 [[publisher.uniffi_build]]
 617 version = "0.25.3"
 618 when = "2023-12-07"
 619 user-id = 127697
 620 user-login = "bendk"
 621
 622 [[publisher.uniffi_checksum_derive]]
 623 version = "0.25.3"
 624 when = "2023-12-07"
 625 user-id = 127697
 626 user-login = "bendk"
 627
 628 [[publisher.uniffi_core]]
 629 version = "0.25.3"
 630 when = "2023-12-07"
 631 user-id = 127697
 632 user-login = "bendk"
 633
 634 [[publisher.uniffi_macros]]
 635 version = "0.25.3"
 636 when = "2023-12-07"
 637 user-id = 127697
 638 user-login = "bendk"
 639
 640 [[publisher.uniffi_meta]]
 641 version = "0.25.3"
 642 when = "2023-12-07"
 643 user-id = 127697
 644 user-login = "bendk"
 645
 646 [[publisher.uniffi_testing]]
 647 version = "0.25.3"
 648 when = "2023-12-07"
 649 user-id = 127697
 650 user-login = "bendk"
 651
 652 [[publisher.uniffi_udl]]
 653 version = "0.25.3"
 654 when = "2023-12-07"
 655 user-id = 127697
 656 user-login = "bendk"
 657
 658 [[publisher.utf8_iter]]
 659 version = "1.0.3"
 660 when = "2022-09-09"
 661 user-id = 4484
 662 user-login = "hsivonen"
 663 user-name = "Henri Sivonen"
 664
 665 [[publisher.walkdir]]
 666 version = "2.3.2"
 667 when = "2021-03-22"
 668 user-id = 189
 669 user-login = "BurntSushi"
 670 user-name = "Andrew Gallant"
 671
 672 [[publisher.warp]]
 673 version = "0.3.6"
 674 when = "2023-09-27"
 675 user-id = 359
 676 user-login = "seanmonstar"
 677 user-name = "Sean McArthur"
 678
 679 [[publisher.wasi]]
 680 version = "0.11.0+wasi-snapshot-preview1"
 681 when = "2022-01-19"
 682 user-id = 1
 683 user-login = "alexcrichton"
 684 user-name = "Alex Crichton"
 685
 686 [[publisher.wasm-encoder]]
 687 version = "0.40.0"
 688 when = "2024-01-24"
 689 user-id = 1
 690 user-login = "alexcrichton"
 691 user-name = "Alex Crichton"
 692
 693 [[publisher.wasm-encoder]]
 694 version = "0.201.0"
 695 when = "2024-02-27"
 696 user-id = 73222
 697 user-login = "wasmtime-publish"
 698
 699 [[publisher.wasm-smith]]
 700 version = "0.15.0"
 701 when = "2024-01-24"
 702 user-id = 1
 703 user-login = "alexcrichton"
 704 user-name = "Alex Crichton"
 705
 706 [[publisher.wasm-smith]]
 707 version = "0.201.0"
 708 when = "2024-02-27"
 709 user-id = 73222
 710 user-login = "wasmtime-publish"
 711
 712 [[publisher.wast]]
 713 version = "70.0.1"
 714 when = "2024-01-24"
 715 user-id = 1
 716 user-login = "alexcrichton"
 717 user-name = "Alex Crichton"
 718
 719 [[publisher.wast]]
 720 version = "201.0.0"
 721 when = "2024-02-27"
 722 user-id = 73222
 723 user-login = "wasmtime-publish"
 724
 725 [[publisher.winapi-util]]
 726 version = "0.1.5"
 727 when = "2020-04-20"
 728 user-id = 189
 729 user-login = "BurntSushi"
 730 user-name = "Andrew Gallant"
 731
 732 [[publisher.windows]]
 733 version = "0.52.0"
 734 when = "2023-11-15"
 735 user-id = 64539
 736 user-login = "kennykerr"
 737 user-name = "Kenny Kerr"
 738
 739 [[publisher.windows-core]]
 740 version = "0.52.0"
 741 when = "2023-11-15"
 742 user-id = 64539
 743 user-login = "kennykerr"
 744 user-name = "Kenny Kerr"
 745
 746 [[publisher.windows-sys]]
 747 version = "0.52.0"
 748 when = "2023-11-15"
 749 user-id = 64539
 750 user-login = "kennykerr"
 751 user-name = "Kenny Kerr"
 752
 753 [[publisher.zeitstempel]]
 754 version = "0.1.1"
 755 when = "2021-03-18"
 756 user-id = 48
 757 user-login = "badboy"
 758 user-name = "Jan-Erik Rediger"
 759
 760 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 761 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 762 criteria = "safe-to-deploy"
 763 user-id = 696 # Nick Fitzgerald (fitzgen)
 764 start = "2020-01-14"
 765 end = "2024-04-21"
 766 notes = "I am an author of this crate."
 767
 768 [[audits.bytecode-alliance.wildcard-audits.bumpalo]]
 769 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 770 criteria = "safe-to-deploy"
 771 user-id = 696 # Nick Fitzgerald (fitzgen)
 772 start = "2019-03-16"
 773 end = "2024-03-10"
 774
 775 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 776 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 777 criteria = "safe-to-deploy"
 778 user-id = 696 # Nick Fitzgerald (fitzgen)
 779 start = "2020-01-14"
 780 end = "2024-04-27"
 781 notes = "I am an author of this crate"
 782
 783 [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
 784 who = "Alex Crichton <alex@alexcrichton.com>"
 785 criteria = "safe-to-deploy"
 786 user-id = 1 # Alex Crichton (alexcrichton)
 787 start = "2020-12-11"
 788 end = "2024-04-14"
 789 notes = """
 790 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 791 repository of which I'm one of the primary maintainers and publishers for.
 792 I am employed by a member of the Bytecode Alliance and plan to continue doing
 793 so and will actively maintain this crate over time.
 794 """
 795
 796 [[audits.bytecode-alliance.wildcard-audits.wasm-smith]]
 797 who = "Alex Crichton <alex@alexcrichton.com>"
 798 criteria = "safe-to-deploy"
 799 user-id = 1 # Alex Crichton (alexcrichton)
 800 start = "2020-09-03"
 801 end = "2024-04-14"
 802 notes = """
 803 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 804 repository of which I'm one of the primary maintainers and publishers for.
 805 I am employed by a member of the Bytecode Alliance and plan to continue doing
 806 so and will actively maintain this crate over time.
 807 """
 808
 809 [[audits.bytecode-alliance.wildcard-audits.wast]]
 810 who = "Alex Crichton <alex@alexcrichton.com>"
 811 criteria = "safe-to-deploy"
 812 user-id = 1 # Alex Crichton (alexcrichton)
 813 start = "2019-10-16"
 814 end = "2024-04-14"
 815 notes = """
 816 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 817 repository of which I'm one of the primary maintainers and publishers for.
 818 I am employed by a member of the Bytecode Alliance and plan to continue doing
 819 so and will actively maintain this crate over time.
 820 """
 821
 822 [[audits.bytecode-alliance.audits.adler]]
 823 who = "Alex Crichton <alex@alexcrichton.com>"
 824 criteria = "safe-to-deploy"
 825 version = "1.0.2"
 826 notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
 827
 828 [[audits.bytecode-alliance.audits.arrayref]]
 829 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 830 criteria = "safe-to-deploy"
 831 version = "0.3.6"
 832 notes = """
 833 Unsafe code, but its logic looks good to me. Necessary given what it is
 834 doing. Well tested, has quickchecks.
 835 """
 836
 837 [[audits.bytecode-alliance.audits.arrayvec]]
 838 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 839 criteria = "safe-to-deploy"
 840 version = "0.7.2"
 841 notes = """
 842 Well documented invariants, good assertions for those invariants in unsafe code,
 843 and tested with MIRI to boot. LGTM.
 844 """
 845
 846 [[audits.bytecode-alliance.audits.base64]]
 847 who = "Pat Hickey <phickey@fastly.com>"
 848 criteria = "safe-to-deploy"
 849 version = "0.21.0"
 850 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 851
 852 [[audits.bytecode-alliance.audits.bitflags]]
 853 who = "Jamey Sharp <jsharp@fastly.com>"
 854 criteria = "safe-to-deploy"
 855 delta = "2.1.0 -> 2.2.1"
 856 notes = """
 857 This version adds unsafe impls of traits from the bytemuck crate when built
 858 with that library enabled, but I believe the impls satisfy the documented
 859 safety requirements for bytemuck. The other changes are minor.
 860 """
 861
 862 [[audits.bytecode-alliance.audits.bitflags]]
 863 who = "Alex Crichton <alex@alexcrichton.com>"
 864 criteria = "safe-to-deploy"
 865 delta = "2.3.2 -> 2.3.3"
 866 notes = """
 867 Nothing outside the realm of what one would expect from a bitflags generator,
 868 all as expected.
 869 """
 870
 871 [[audits.bytecode-alliance.audits.block-buffer]]
 872 who = "Benjamin Bouvier <public@benj.me>"
 873 criteria = "safe-to-deploy"
 874 delta = "0.9.0 -> 0.10.2"
 875
 876 [[audits.bytecode-alliance.audits.bumpalo]]
 877 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 878 criteria = "safe-to-deploy"
 879 version = "3.11.1"
 880 notes = "I am the author of this crate."
 881
 882 [[audits.bytecode-alliance.audits.cargo-platform]]
 883 who = "Pat Hickey <phickey@fastly.com>"
 884 criteria = "safe-to-deploy"
 885 version = "0.1.2"
 886 notes = "no build, no ambient capabilities, no unsafe"
 887
 888 [[audits.bytecode-alliance.audits.cfg-if]]
 889 who = "Alex Crichton <alex@alexcrichton.com>"
 890 criteria = "safe-to-deploy"
 891 version = "1.0.0"
 892 notes = "I am the author of this crate."
 893
 894 [[audits.bytecode-alliance.audits.codespan-reporting]]
 895 who = "Jamey Sharp <jsharp@fastly.com>"
 896 criteria = "safe-to-deploy"
 897 version = "0.11.1"
 898 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 899
 900 [[audits.bytecode-alliance.audits.cpufeatures]]
 901 who = "Alex Crichton <alex@alexcrichton.com>"
 902 criteria = "safe-to-deploy"
 903 delta = "0.2.2 -> 0.2.7"
 904 notes = """
 905 This is a minor update that looks to add some more detected CPU features and
 906 various other minor portability fixes such as MIRI support.
 907 """
 908
 909 [[audits.bytecode-alliance.audits.crypto-common]]
 910 who = "Benjamin Bouvier <public@benj.me>"
 911 criteria = "safe-to-deploy"
 912 version = "0.1.3"
 913
 914 [[audits.bytecode-alliance.audits.fallible-iterator]]
 915 who = "Alex Crichton <alex@alexcrichton.com>"
 916 criteria = "safe-to-deploy"
 917 delta = "0.2.0 -> 0.3.0"
 918 notes = """
 919 This major version update has a few minor breaking changes but everything
 920 this crate has to do with iterators and `Result` and such. No `unsafe` or
 921 anything like that, all looks good.
 922 """
 923
 924 [[audits.bytecode-alliance.audits.foreign-types]]
 925 who = "Pat Hickey <phickey@fastly.com>"
 926 criteria = "safe-to-deploy"
 927 version = "0.3.2"
 928 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 929
 930 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 931 who = "Pat Hickey <phickey@fastly.com>"
 932 criteria = "safe-to-deploy"
 933 version = "0.1.1"
 934
 935 [[audits.bytecode-alliance.audits.futures-channel]]
 936 who = "Pat Hickey <phickey@fastly.com>"
 937 criteria = "safe-to-deploy"
 938 version = "0.3.27"
 939 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 940
 941 [[audits.bytecode-alliance.audits.futures-core]]
 942 who = "Pat Hickey <phickey@fastly.com>"
 943 criteria = "safe-to-deploy"
 944 version = "0.3.27"
 945 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 946
 947 [[audits.bytecode-alliance.audits.futures-executor]]
 948 who = "Pat Hickey <phickey@fastly.com>"
 949 criteria = "safe-to-deploy"
 950 version = "0.3.27"
 951 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 952
 953 [[audits.bytecode-alliance.audits.futures-io]]
 954 who = "Pat Hickey <phickey@fastly.com>"
 955 criteria = "safe-to-deploy"
 956 version = "0.3.27"
 957
 958 [[audits.bytecode-alliance.audits.futures-sink]]
 959 who = "Pat Hickey <phickey@fastly.com>"
 960 criteria = "safe-to-deploy"
 961 version = "0.3.27"
 962
 963 [[audits.bytecode-alliance.audits.heck]]
 964 who = "Alex Crichton <alex@alexcrichton.com>"
 965 criteria = "safe-to-deploy"
 966 version = "0.4.0"
 967 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 968
 969 [[audits.bytecode-alliance.audits.id-arena]]
 970 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 971 criteria = "safe-to-deploy"
 972 version = "2.2.1"
 973 notes = "I am the author of this crate."
 974
 975 [[audits.bytecode-alliance.audits.idna]]
 976 who = "Alex Crichton <alex@alexcrichton.com>"
 977 criteria = "safe-to-deploy"
 978 version = "0.3.0"
 979 notes = """
 980 This is a crate without unsafe code or usage of the standard library. The large
 981 size of this crate comes from the large generated unicode tables file. This
 982 crate is broadly used throughout the ecosystem and does not contain anything
 983 suspicious.
 984 """
 985
 986 [[audits.bytecode-alliance.audits.leb128]]
 987 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 988 criteria = "safe-to-deploy"
 989 version = "0.2.5"
 990 notes = "I am the author of this crate."
 991
 992 [[audits.bytecode-alliance.audits.memoffset]]
 993 who = "Alex Crichton <alex@alexcrichton.com>"
 994 criteria = "safe-to-deploy"
 995 delta = "0.7.1 -> 0.8.0"
 996 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 997
 998 [[audits.bytecode-alliance.audits.miniz_oxide]]
 999 who = "Alex Crichton <alex@alexcrichton.com>"
1000 criteria = "safe-to-deploy"
1001 version = "0.7.1"
1002 notes = """
1003 This crate is a Rust implementation of zlib compression/decompression and has
1004 been used by default by the Rust standard library for quite some time. It's also
1005 a default dependency of the popular `backtrace` crate for decompressing debug
1006 information. This crate forbids unsafe code and does not otherwise access system
1007 resources. It's originally a port of the `miniz.c` library as well, and given
1008 its own longevity should be relatively hardened against some of the more common
1009 compression-related issues.
1010 """
1011
1012 [[audits.bytecode-alliance.audits.mio]]
1013 who = "Alex Crichton <alex@alexcrichton.com>"
1014 criteria = "safe-to-deploy"
1015 delta = "0.8.6 -> 0.8.8"
1016 notes = "Mostly OS portability updates along with some minor bugfixes."
1017
1018 [[audits.bytecode-alliance.audits.object]]
1019 who = "Alex Crichton <alex@alexcrichton.com>"
1020 criteria = "safe-to-deploy"
1021 delta = "0.30.3 -> 0.31.1"
1022 notes = "A large-ish update to the crate but nothing out of the ordering. Support for new formats like xcoff, new constants, minor refactorings, etc. Nothing out of the ordinary."
1023
1024 [[audits.bytecode-alliance.audits.object]]
1025 who = "Alex Crichton <alex@alexcrichton.com>"
1026 criteria = "safe-to-deploy"
1027 delta = "0.31.1 -> 0.32.0"
1028 notes = "Various new features and refactorings as one would expect from an object parsing crate, all looks good."
1029
1030 [[audits.bytecode-alliance.audits.percent-encoding]]
1031 who = "Alex Crichton <alex@alexcrichton.com>"
1032 criteria = "safe-to-deploy"
1033 version = "2.2.0"
1034 notes = """
1035 This crate is a single-file crate that does what it says on the tin. There are
1036 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
1037 as correct and otherwise this crate is good to go.
1038 """
1039
1040 [[audits.bytecode-alliance.audits.pin-utils]]
1041 who = "Pat Hickey <phickey@fastly.com>"
1042 criteria = "safe-to-deploy"
1043 version = "0.1.0"
1044
1045 [[audits.bytecode-alliance.audits.pkg-config]]
1046 who = "Pat Hickey <phickey@fastly.com>"
1047 criteria = "safe-to-deploy"
1048 version = "0.3.25"
1049 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
1050
1051 [[audits.bytecode-alliance.audits.rustc-demangle]]
1052 who = "Alex Crichton <alex@alexcrichton.com>"
1053 criteria = "safe-to-deploy"
1054 version = "0.1.21"
1055 notes = "I am the author of this crate."
1056
1057 [[audits.bytecode-alliance.audits.semver]]
1058 who = "Pat Hickey <phickey@fastly.com>"
1059 criteria = "safe-to-deploy"
1060 version = "1.0.17"
1061 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
1062
1063 [[audits.bytecode-alliance.audits.slab]]
1064 who = "Pat Hickey <phickey@fastly.com>"
1065 criteria = "safe-to-deploy"
1066 version = "0.4.6"
1067 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
1068
1069 [[audits.bytecode-alliance.audits.socket2]]
1070 who = "Alex Crichton <alex@alexcrichton.com>"
1071 criteria = "safe-to-deploy"
1072 delta = "0.4.7 -> 0.4.9"
1073 notes = "Minor OS compat updates but otherwise nothing major here."
1074
1075 [[audits.bytecode-alliance.audits.tempfile]]
1076 who = "Pat Hickey <phickey@fastly.com>"
1077 criteria = "safe-to-deploy"
1078 delta = "3.3.0 -> 3.5.0"
1079
1080 [[audits.bytecode-alliance.audits.tempfile]]
1081 who = "Alex Crichton <alex@alexcrichton.com>"
1082 criteria = "safe-to-deploy"
1083 delta = "3.5.0 -> 3.6.0"
1084 notes = "Dependency updates and new optimized trait implementations, but otherwise everything looks normal."
1085
1086 [[audits.bytecode-alliance.audits.unicase]]
1087 who = "Alex Crichton <alex@alexcrichton.com>"
1088 criteria = "safe-to-deploy"
1089 version = "2.6.0"
1090 notes = """
1091 This crate contains no `unsafe` code and no unnecessary use of the standard
1092 library.
1093 """
1094
1095 [[audits.bytecode-alliance.audits.unicode-bidi]]
1096 who = "Alex Crichton <alex@alexcrichton.com>"
1097 criteria = "safe-to-deploy"
1098 version = "0.3.8"
1099 notes = """
1100 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
1101 does not attempt to out of the bounds of what it's already supposed to be doing.
1102 """
1103
1104 [[audits.bytecode-alliance.audits.unicode-normalization]]
1105 who = "Alex Crichton <alex@alexcrichton.com>"
1106 criteria = "safe-to-deploy"
1107 version = "0.1.19"
1108 notes = """
1109 This crate contains one usage of `unsafe` which I have manually checked to see
1110 it as correct. This crate's size comes in large part due to the generated
1111 unicode tables that it contains. This crate is additionally widely used
1112 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
1113 and nothing suspicious.
1114 """
1115
1116 [[audits.embark-studios.wildcard-audits.presser]]
1117 who = "Gray Olson <opensource@embark-studios.com>"
1118 criteria = "safe-to-deploy"
1119 user-id = 52553 # embark-studios
1120 start = "2021-01-01"
1121 end = "2024-05-23"
1122 notes = """
1123 Small crate with no dependencies and no ambient capabilities. The safe interface of the crate
1124 is gated behind unsafe implementation of a core trait, and care must be taken to ensure that
1125 the relevant invariants are guaranteed when doing so. Maintained by the Ark team at Embark
1126 and used in production.
1127 """
1128
1129 [[audits.embark-studios.audits.anyhow]]
1130 who = "Johan Andersson <opensource@embark-studios.com>"
1131 criteria = "safe-to-deploy"
1132 version = "1.0.58"
1133
1134 [[audits.embark-studios.audits.cfg_aliases]]
1135 who = "Johan Andersson <opensource@embark-studios.com>"
1136 criteria = "safe-to-deploy"
1137 version = "0.1.1"
1138 notes = "No unsafe usage or ambient capabilities"
1139
1140 [[audits.embark-studios.audits.derive_more]]
1141 who = "Johan Andersson <opensource@embark-studios.com>"
1142 criteria = "safe-to-deploy"
1143 version = "0.99.17"
1144 notes = "No unsafe usage or ambient capabilities"
1145
1146 [[audits.embark-studios.audits.ident_case]]
1147 who = "Johan Andersson <opensource@embark-studios.com>"
1148 criteria = "safe-to-deploy"
1149 version = "1.0.1"
1150 notes = "No unsafe usage or ambient capabilities"
1151
1152 [[audits.embark-studios.audits.idna]]
1153 who = "Johan Andersson <opensource@embark-studios.com>"
1154 criteria = "safe-to-deploy"
1155 delta = "0.3.0 -> 0.4.0"
1156 notes = "No unsafe usage or ambient capabilities"
1157
1158 [[audits.embark-studios.audits.line-wrap]]
1159 who = "Johan Andersson <opensource@embark-studios.com>"
1160 criteria = "safe-to-deploy"
1161 version = "0.1.1"
1162 notes = "No unsafe usage or ambient capabilities"
1163
1164 [[audits.embark-studios.audits.yaml-rust]]
1165 who = "Johan Andersson <opensource@embark-studios.com>"
1166 criteria = "safe-to-deploy"
1167 version = "0.4.5"
1168 notes = "No unsafe usage or ambient capabilities"
1169
1170 [[audits.google.audits.ash]]
1171 who = "David Koloski <dkoloski@google.com>"
1172 criteria = "safe-to-deploy"
1173 version = "0.37.0+1.3.209"
1174 notes = "Reviewed on https://fxrev.dev/694269"
1175 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1176
1177 [[audits.google.audits.fastrand]]
1178 who = "George Burgess IV <gbiv@google.com>"
1179 criteria = "safe-to-deploy"
1180 version = "1.9.0"
1181 notes = """
1182 `does-not-implement-crypto` is certified because this crate explicitly says
1183 that the RNG here is not cryptographically secure.
1184 """
1185 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1186
1187 [[audits.google.audits.futures]]
1188 who = "George Burgess IV <gbiv@google.com>"
1189 criteria = "safe-to-deploy"
1190 version = "0.3.28"
1191 notes = """
1192 `futures` has no logic other than tests - it simply `pub use`s things from
1193 other crates.
1194 """
1195 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1196
1197 [[audits.google.audits.glob]]
1198 who = "George Burgess IV <gbiv@google.com>"
1199 criteria = "safe-to-deploy"
1200 version = "0.3.1"
1201 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1202
1203 [[audits.google.audits.http]]
1204 who = "ChromeOS"
1205 criteria = "safe-to-run"
1206 version = "0.2.8"
1207 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1208
1209 [[audits.google.audits.http-body]]
1210 who = "ChromeOS"
1211 criteria = "safe-to-run"
1212 version = "0.4.5"
1213 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1214
1215 [[audits.google.audits.httpdate]]
1216 who = "ChromeOS"
1217 criteria = "safe-to-run"
1218 version = "1.0.2"
1219 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1220
1221 [[audits.google.audits.hyper]]
1222 who = "ChromeOS"
1223 criteria = "safe-to-run"
1224 version = "0.14.20"
1225 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1226
1227 [[audits.google.audits.nom]]
1228 who = "danakj@chromium.org"
1229 criteria = "safe-to-deploy"
1230 version = "7.1.3"
1231 notes = """
1232 Reviewed in https://chromium-review.googlesource.com/c/chromium/src/+/5046153
1233 """
1234 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1235
1236 [[audits.google.audits.pin-project]]
1237 who = "ChromeOS"
1238 criteria = "safe-to-run"
1239 version = "1.0.12"
1240 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1241
1242 [[audits.google.audits.pin-project-internal]]
1243 who = "ChromeOS"
1244 criteria = "safe-to-run"
1245 version = "1.0.12"
1246 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1247
1248 [[audits.google.audits.pin-project-lite]]
1249 who = "David Koloski <dkoloski@google.com>"
1250 criteria = "safe-to-deploy"
1251 version = "0.2.9"
1252 notes = "Reviewed on https://fxrev.dev/824504"
1253 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1254
1255 [[audits.google.audits.scoped-tls]]
1256 who = "George Burgess IV <gbiv@google.com>"
1257 criteria = "safe-to-run"
1258 version = "1.0.0"
1259 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1260
1261 [[audits.google.audits.serde_urlencoded]]
1262 who = "ChromeOS"
1263 criteria = "safe-to-run"
1264 version = "0.7.1"
1265 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1266
1267 [[audits.google.audits.static_assertions]]
1268 who = "Lukasz Anforowicz <lukasza@chromium.org>"
1269 criteria = "safe-to-deploy"
1270 version = "1.1.0"
1271 notes = """
1272 Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'`, `'\bunsafe\b'`
1273 and there were no hits except for one `unsafe`.
1274
1275 The lambda where `unsafe` is used is never invoked (e.g. the `unsafe` code
1276 never runs) and is only introduced for some compile-time checks.  Additional
1277 unsafe review comments can be found in https://crrev.com/c/5353376.
1278
1279 This crate has been added to Chromium in https://crrev.com/c/3736562.  The CL
1280 description contains a link to a document with an additional security review.
1281 """
1282 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1283
1284 [[audits.google.audits.strsim]]
1285 who = "danakj@chromium.org"
1286 criteria = "safe-to-deploy"
1287 version = "0.10.0"
1288 notes = """
1289 Reviewed in https://crrev.com/c/5171063
1290
1291 Previously reviewed during security review and the audit is grandparented in.
1292 """
1293 aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
1294
1295 [[audits.google.audits.tokio]]
1296 who = "Vovo Yang <vovoy@google.com>"
1297 criteria = "safe-to-run"
1298 version = "1.29.1"
1299 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1300
1301 [[audits.google.audits.tokio-stream]]
1302 who = "David Koloski <dkoloski@google.com>"
1303 criteria = "safe-to-deploy"
1304 version = "0.1.11"
1305 notes = "Reviewed on https://fxrev.dev/804724"
1306 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1307
1308 [[audits.google.audits.tower-service]]
1309 who = "ChromeOS"
1310 criteria = "safe-to-run"
1311 version = "0.3.2"
1312 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1313
1314 [[audits.google.audits.tracing]]
1315 who = "ChromeOS"
1316 criteria = "safe-to-run"
1317 version = "0.1.35"
1318 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1319
1320 [[audits.google.audits.tracing-attributes]]
1321 who = "ChromeOS"
1322 criteria = "safe-to-run"
1323 version = "0.1.22"
1324 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1325
1326 [[audits.google.audits.tracing-core]]
1327 who = "ChromeOS"
1328 criteria = "safe-to-run"
1329 version = "0.1.29"
1330 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1331
1332 [[audits.google.audits.try-lock]]
1333 who = "ChromeOS"
1334 criteria = "safe-to-run"
1335 version = "0.2.3"
1336 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1337
1338 [[audits.google.audits.version_check]]
1339 who = "George Burgess IV <gbiv@google.com>"
1340 criteria = "safe-to-deploy"
1341 version = "0.9.4"
1342 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1343
1344 [[audits.google.audits.want]]
1345 who = "ChromeOS"
1346 criteria = "safe-to-run"
1347 version = "0.3.0"
1348 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1349
1350 [[audits.isrg.wildcard-audits.prio]]
1351 who = "David Cook <dcook@divviup.org>"
1352 criteria = "safe-to-deploy"
1353 user-id = 213776 # divviup-github-automation
1354 start = "2020-09-28"
1355 end = "2025-02-12"
1356
1357 [[audits.isrg.audits.base64]]
1358 who = "Tim Geoghegan <timg@letsencrypt.org>"
1359 criteria = "safe-to-deploy"
1360 delta = "0.21.0 -> 0.21.1"
1361
1362 [[audits.isrg.audits.base64]]
1363 who = "Brandon Pitman <bran@bran.land>"
1364 criteria = "safe-to-deploy"
1365 delta = "0.21.1 -> 0.21.2"
1366
1367 [[audits.isrg.audits.base64]]
1368 who = "David Cook <dcook@divviup.org>"
1369 criteria = "safe-to-deploy"
1370 delta = "0.21.2 -> 0.21.3"
1371
1372 [[audits.isrg.audits.block-buffer]]
1373 who = "David Cook <dcook@divviup.org>"
1374 criteria = "safe-to-deploy"
1375 version = "0.9.0"
1376
1377 [[audits.isrg.audits.getrandom]]
1378 who = "Tim Geoghegan <timg@letsencrypt.org>"
1379 criteria = "safe-to-deploy"
1380 delta = "0.2.9 -> 0.2.10"
1381 notes = "These changes include some new `unsafe` code for the `emscripten` and `psvita` targets, but all it does is call `libc::getentropy`."
1382
1383 [[audits.isrg.audits.keccak]]
1384 who = "David Cook <dcook@divviup.org>"
1385 criteria = "safe-to-deploy"
1386 version = "0.1.2"
1387
1388 [[audits.isrg.audits.keccak]]
1389 who = "Brandon Pitman <bran@bran.land>"
1390 criteria = "safe-to-deploy"
1391 delta = "0.1.3 -> 0.1.4"
1392
1393 [[audits.isrg.audits.once_cell]]
1394 who = "Brandon Pitman <bran@bran.land>"
1395 criteria = "safe-to-deploy"
1396 delta = "1.17.1 -> 1.17.2"
1397
1398 [[audits.isrg.audits.once_cell]]
1399 who = "David Cook <dcook@divviup.org>"
1400 criteria = "safe-to-deploy"
1401 delta = "1.17.2 -> 1.18.0"
1402
1403 [[audits.isrg.audits.once_cell]]
1404 who = "Brandon Pitman <bran@bran.land>"
1405 criteria = "safe-to-deploy"
1406 delta = "1.18.0 -> 1.19.0"
1407
1408 [[audits.isrg.audits.rand_chacha]]
1409 who = "David Cook <dcook@divviup.org>"
1410 criteria = "safe-to-deploy"
1411 version = "0.3.1"
1412
1413 [[audits.isrg.audits.rand_core]]
1414 who = "David Cook <dcook@divviup.org>"
1415 criteria = "safe-to-deploy"
1416 version = "0.6.3"
1417
1418 [[audits.isrg.audits.rayon-core]]
1419 who = "Brandon Pitman <bran@bran.land>"
1420 criteria = "safe-to-deploy"
1421 delta = "1.10.2 -> 1.11.0"
1422
1423 [[audits.isrg.audits.rayon-core]]
1424 who = "David Cook <dcook@divviup.org>"
1425 criteria = "safe-to-deploy"
1426 delta = "1.11.0 -> 1.12.0"
1427
1428 [[audits.isrg.audits.sha2]]
1429 who = "David Cook <dcook@divviup.org>"
1430 criteria = "safe-to-deploy"
1431 version = "0.10.2"
1432
1433 [[audits.isrg.audits.sha3]]
1434 who = "David Cook <dcook@divviup.org>"
1435 criteria = "safe-to-deploy"
1436 version = "0.10.6"
1437
1438 [[audits.isrg.audits.sha3]]
1439 who = "Brandon Pitman <bran@bran.land>"
1440 criteria = "safe-to-deploy"
1441 delta = "0.10.7 -> 0.10.8"
1442
1443 [[audits.mozilla.wildcard-audits.zeitstempel]]
1444 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1445 criteria = "safe-to-deploy"
1446 user-id = 48 # Jan-Erik Rediger (badboy)
1447 start = "2021-03-03"
1448 end = "2024-05-10"
1449 notes = "Maintained by me"
1450 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1451
1452 [[audits.mozilla.audits.askama]]
1453 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1454 criteria = "safe-to-deploy"
1455 delta = "0.11.1 -> 0.12.0"
1456 notes = "No new unsafe usage, mostly dependency updates and smaller API changes"
1457 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1458
1459 [[audits.mozilla.audits.askama_derive]]
1460 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1461 criteria = "safe-to-deploy"
1462 delta = "0.11.2 -> 0.12.1"
1463 notes = "Dependency updates, a new toml dependency and some API changes. No unsafe use."
1464 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1465
1466 [[audits.mozilla.audits.basic-toml]]
1467 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1468 criteria = "safe-to-deploy"
1469 version = "0.1.2"
1470 notes = "TOML parser, forked from toml 0.5"
1471 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1472
1473 [[audits.mozilla.audits.bitflags]]
1474 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1475 criteria = "safe-to-deploy"
1476 delta = "2.4.0 -> 2.4.1"
1477 notes = "Only allowing new clippy lints"
1478 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1479
1480 [[audits.mozilla.audits.either]]
1481 who = "Nika Layzell <nika@thelayzells.com>"
1482 criteria = "safe-to-deploy"
1483 version = "1.6.1"
1484 notes = """
1485 Straightforward crate providing the Either enum and trait implementations with
1486 no unsafe code.
1487 """
1488 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1489
1490 [[audits.mozilla.audits.lazy_static]]
1491 who = "Nika Layzell <nika@thelayzells.com>"
1492 criteria = "safe-to-deploy"
1493 version = "1.4.0"
1494 notes = "I have read over the macros, and audited the unsafe code."
1495 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1496
1497 [[audits.mozilla.audits.log]]
1498 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1499 criteria = "safe-to-deploy"
1500 delta = "0.4.17 -> 0.4.18"
1501 notes = "One dependency removed, others updated (which we don't rely on), some APIs (which we don't use) changed."
1502 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1503
1504 [[audits.mozilla.audits.log]]
1505 who = "Kagami Sascha Rosylight <krosylight@mozilla.com>"
1506 criteria = "safe-to-deploy"
1507 delta = "0.4.18 -> 0.4.20"
1508 notes = "Only cfg attribute and internal macro changes and module refactorings"
1509 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1510
1511 [[audits.mozilla.audits.rkv]]
1512 who = "Kagami Sascha Rosylight <krosylight@mozilla.com>"
1513 criteria = "safe-to-deploy"
1514 delta = "0.18.4 -> 0.19.0"
1515 notes = "Maintained by Mozilla, no addition of unsafe blocks"
1516 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"