supply-chain/audits.toml

   1
   2 # cargo-vet audits file
   3
   4 [[audits.aa-stroke]]
   5 who = "Lee Salzman <lsalzman@mozilla.com>"
   6 criteria = "safe-to-deploy"
   7 version = "0.1.0"
   8 notes = "Written and maintained by Gfx team at Mozilla."
   9
  10 [[audits.alsa]]
  11 who = "Mike Hommey <mh+mozilla@glandium.org>"
  12 criteria = "safe-to-deploy"
  13 delta = "0.4.3 -> 0.7.0"
  14
  15 [[audits.android_logger]]
  16 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
  17 criteria = "safe-to-deploy"
  18 version = "0.11.0"
  19 notes = "Small crate, wrapping Android log functionality, reviewed by janerik"
  20
  21 [[audits.android_logger]]
  22 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
  23 criteria = "safe-to-deploy"
  24 delta = "0.11.0 -> 0.11.1"
  25 notes = "Small crate, wrapping Android log functionality, now switched to properly using MaybeUninit"
  26
  27 [[audits.android_system_properties]]
  28 who = "Nicolas Silva <nical@fastmail.com>"
  29 criteria = "safe-to-deploy"
  30 version = "0.1.2"
  31 notes = "I wrote this crate, reviewed by jimb. It is mostly a Rust port of some C++ code we already ship."
  32
  33 [[audits.android_system_properties]]
  34 who = "Mike Hommey <mh+mozilla@glandium.org>"
  35 criteria = "safe-to-deploy"
  36 delta = "0.1.2 -> 0.1.4"
  37
  38 [[audits.anyhow]]
  39 who = "Mike Hommey <mh+mozilla@glandium.org>"
  40 criteria = "safe-to-deploy"
  41 delta = "1.0.57 -> 1.0.61"
  42
  43 [[audits.anyhow]]
  44 who = "Bobby Holley <bobbyholley@gmail.com>"
  45 criteria = "safe-to-deploy"
  46 delta = "1.0.58 -> 1.0.57"
  47 notes = "No functional differences, just CI config and docs."
  48
  49 [[audits.anyhow]]
  50 who = "Mike Hommey <mh+mozilla@glandium.org>"
  51 criteria = "safe-to-deploy"
  52 delta = "1.0.61 -> 1.0.62"
  53
  54 [[audits.app_units]]
  55 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
  56 criteria = "safe-to-deploy"
  57 version = "0.7.1"
  58 notes = """
  59 I'm pretty familiar with this crate. It provides a fixed-point numeric type.
  60 The code is pretty straight-forward, there's no unsafe code at all.
  61 """
  62
  63 [[audits.arbitrary]]
  64 who = "Mike Hommey <mh+mozilla@glandium.org>"
  65 criteria = "safe-to-run"
  66 delta = "1.1.0 -> 1.1.1"
  67
  68 [[audits.arbitrary]]
  69 who = "Mike Hommey <mh+mozilla@glandium.org>"
  70 criteria = "safe-to-run"
  71 delta = "1.1.1 -> 1.1.3"
  72
  73 [[audits.ash]]
  74 who = "Jim Blandy <jimb@red-bean.com>"
  75 criteria = "safe-to-deploy"
  76 delta = "0.37.0+1.3.209 -> 0.37.1+1.3.235"
  77 notes = """
  78 Nicolas Silva, Jim Blandy, and Teodor Tanasoaia audited ash master
  79 branch commits from e43e9c0c to 6bd82768 inclusive.
  80 """
  81
  82 [[audits.ashmem]]
  83 who = "Matthew Gregan <kinetik@flim.org>"
  84 criteria = "safe-to-deploy"
  85 version = "0.1.2"
  86 notes = """
  87 Small unsafe wrapper around Android 8.0's ASharedMemory native API that falls
  88 back to older private ioctl-based API at runtime on earlier OS releases.  The
  89 shim code is small and doesn't inspect the API arguments, so is unlikely to
  90 expose any safety issues beyond those presented by the native OS API.
  91 """
  92
  93 [[audits.askama]]
  94 who = "Bobby Holley <bobbyholley@gmail.com>"
  95 criteria = "safe-to-deploy"
  96 version = "0.11.1"
  97 notes = """
  98 Just contains some traits and re-exports for use by a broader package of related
  99 crates. No unsafe code or ambient capability usage.
 100 """
 101
 102 [[audits.async-trait]]
 103 who = "Mike Hommey <mh+mozilla@glandium.org>"
 104 criteria = "safe-to-deploy"
 105 delta = "0.1.56 -> 0.1.57"
 106
 107 [[audits.atomic_refcell]]
 108 who = "Bobby Holley <bholley@mozilla.com>"
 109 criteria = "safe-to-deploy"
 110 version = "0.1.8"
 111 notes = "I maintain this crate and have reviewed every line."
 112
 113 [[audits.authenticator]]
 114 who = "John M. Schanck <jschanck@mozilla.com>"
 115 criteria = "safe-to-deploy"
 116 version = "0.4.0-alpha.6"
 117 notes = "Maintained by the CryptoEng team at Mozilla."
 118
 119 [[audits.autocfg]]
 120 who = "Josh Stone <jistone@redhat.com>"
 121 criteria = "safe-to-deploy"
 122 version = "1.1.0"
 123 notes = "All code written or reviewed by Josh Stone."
 124
 125 [[audits.bhttp]]
 126 who = "Dana Keeler <dkeeler@mozilla.com>"
 127 criteria = "safe-to-deploy"
 128 version = "0.2.3"
 129 notes = "Mozilla-developed package, no unsafe code or powerful imports."
 130
 131 [[audits.bindgen]]
 132 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 133 criteria = "safe-to-deploy"
 134 version = "0.59.2"
 135 notes = "I'm the primary author and maintainer of the crate."
 136
 137 [[audits.bindgen]]
 138 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 139 criteria = "safe-to-deploy"
 140 delta = "0.59.2 -> 0.63.0"
 141
 142 [[audits.bit-set]]
 143 who = "Aria Beingessner <a.beingessner@gmail.com>"
 144 criteria = "safe-to-deploy"
 145 version = "0.5.2"
 146 notes = "Another crate I own via contain-rs that is ancient and maintenance mode, no known issues."
 147
 148 [[audits.bit-set]]
 149 who = "Mike Hommey <mh+mozilla@glandium.org>"
 150 criteria = "safe-to-deploy"
 151 delta = "0.5.2 -> 0.5.3"
 152
 153 [[audits.bit-vec]]
 154 who = "Aria Beingessner <a.beingessner@gmail.com>"
 155 criteria = "safe-to-deploy"
 156 version = "0.6.3"
 157 notes = "Another crate I own via contain-rs that is ancient and in maintenance mode but otherwise perfectly fine."
 158
 159 [[audits.build-parallel]]
 160 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
 161 criteria = "safe-to-deploy"
 162 version = "0.1.2"
 163
 164 [[audits.bumpalo]]
 165 who = "Bobby Holley <bobbyholley@gmail.com>"
 166 criteria = "safe-to-run"
 167 delta = "3.9.1 -> 3.10.0"
 168 notes = """
 169 Some nontrivial functional changes but certainly meets the no-malware bar of
 170 safe-to-run. If we needed safe-to-deploy for this in m-c I'd ask Nick to re-
 171 certify this version, but we don't, so this is fine for now.
 172 """
 173
 174 [[audits.bytes]]
 175 who = "Mike Hommey <mh+mozilla@glandium.org>"
 176 criteria = "safe-to-deploy"
 177 delta = "1.1.0 -> 1.2.1"
 178
 179 [[audits.camino]]
 180 who = "Mike Hommey <mh+mozilla@glandium.org>"
 181 criteria = "safe-to-deploy"
 182 delta = "1.0.9 -> 1.1.1"
 183
 184 [[audits.chardetng]]
 185 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 186 criteria = "safe-to-deploy"
 187 version = "0.1.9"
 188 notes = "I, Henri Sivonen, wrote this (safe-code-only) crate for Gecko even though the crate is published via crates.io."
 189
 190 [[audits.chardetng_c]]
 191 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 192 criteria = "safe-to-deploy"
 193 version = "0.1.2"
 194 notes = "I, Henri Sivonen, wrote this crate for Gecko even though it is published via crates.io. The buffer input assumes Rust slice constraints for the start pointer. In Gecko, this is taken care of by mozilla::Span, but the C API doesn't conform to idiomatic C constraints on this point."
 195
 196 [[audits.clap_lex]]
 197 who = "Mike Hommey <mh+mozilla@glandium.org>"
 198 criteria = "safe-to-deploy"
 199 delta = "0.2.0 -> 0.2.2"
 200
 201 [[audits.clap_lex]]
 202 who = "Mike Hommey <mh+mozilla@glandium.org>"
 203 criteria = "safe-to-deploy"
 204 delta = "0.2.2 -> 0.2.4"
 205
 206 [[audits.comedy]]
 207 who = "Nick Alexander <nalexander@mozilla.com>"
 208 criteria = "safe-to-deploy"
 209 version = "0.2.0"
 210 notes = """
 211 The comedy crate was written by Adam Gashlin for Mozilla's use.  The entire
 212 comedy 0.2.0 crate is full of `unsafe` code and makes many assumptions about
 213 memory and layout, but there is no particular processing of untrusted input
 214 here.
 215 """
 216
 217 [[audits.cpufeatures]]
 218 who = "Mike Hommey <mh+mozilla@glandium.org>"
 219 criteria = "safe-to-deploy"
 220 delta = "0.2.2 -> 0.2.4"
 221
 222 [[audits.crossbeam-channel]]
 223 who = "Mike Hommey <mh+mozilla@glandium.org>"
 224 criteria = "safe-to-deploy"
 225 delta = "0.5.4 -> 0.5.6"
 226
 227 [[audits.crossbeam-deque]]
 228 who = "Mike Hommey <mh+mozilla@glandium.org>"
 229 criteria = "safe-to-deploy"
 230 delta = "0.8.1 -> 0.8.2"
 231
 232 [[audits.crossbeam-epoch]]
 233 who = "Mike Hommey <mh+mozilla@glandium.org>"
 234 criteria = "safe-to-deploy"
 235 delta = "0.9.8 -> 0.9.10"
 236
 237 [[audits.crossbeam-utils]]
 238 who = "Mike Hommey <mh+mozilla@glandium.org>"
 239 criteria = "safe-to-deploy"
 240 delta = "0.8.8 -> 0.8.11"
 241
 242 [[audits.crypto-common]]
 243 who = "Mike Hommey <mh+mozilla@glandium.org>"
 244 criteria = "safe-to-deploy"
 245 delta = "0.1.3 -> 0.1.6"
 246
 247 [[audits.cssparser]]
 248 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 249 criteria = "safe-to-deploy"
 250 version = "0.29.6"
 251 notes = """
 252 I've reviewed or authored most of the recent changes to this library, and it
 253 was developed by other mozilla folks. Unsafe code there is reasonable (utf-8
 254 casts for serialization and parsing).
 255 """
 256
 257 [[audits.cssparser-macros]]
 258 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 259 criteria = "safe-to-deploy"
 260 version = "0.6.0"
 261 notes = """
 262 Trivial crate with a single proc macro to compute the max length of the inputs
 263 to a match expression.
 264 """
 265
 266 [[audits.cstr]]
 267 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 268 criteria = "safe-to-deploy"
 269 version = "0.2.10"
 270 notes = """
 271 I've reviewed the code of the crate thoroughly. It generates an unsafe block
 272 which is statically guaranteed to be safe. Inputs to the macro have to be
 273 static so there's no uncontrolled input whatsoever.
 274 """
 275
 276 [[audits.cubeb]]
 277 who = "Matthew Gregan <kinetik@flim.org>"
 278 criteria = "safe-to-deploy"
 279 version = "0.10.1"
 280 notes = """
 281 Mozilla-developed package.
 282 """
 283
 284 [[audits.cubeb]]
 285 who = "Matthew Gregan <kinetik@flim.org>"
 286 criteria = "safe-to-deploy"
 287 delta = "0.10.1 -> 0.10.2"
 288
 289 [[audits.cubeb-backend]]
 290 who = "Matthew Gregan <kinetik@flim.org>"
 291 criteria = "safe-to-deploy"
 292 version = "0.10.1"
 293 notes = """
 294 Mozilla-developed package.
 295 """
 296
 297 [[audits.cubeb-backend]]
 298 who = "Matthew Gregan <kinetik@flim.org>"
 299 criteria = "safe-to-deploy"
 300 delta = "0.10.1 -> 0.10.2"
 301
 302 [[audits.cubeb-backend]]
 303 who = "Paul Adenot <paul@paul.cx>"
 304 criteria = "safe-to-deploy"
 305 delta = "0.10.2 -> 0.10.3"
 306 notes = """
 307 Mozilla-developed package.
 308 """
 309
 310 [[audits.cubeb-core]]
 311 who = "Matthew Gregan <kinetik@flim.org>"
 312 criteria = "safe-to-deploy"
 313 version = "0.10.1"
 314 notes = """
 315 Mozilla-developed package.
 316 """
 317
 318 [[audits.cubeb-core]]
 319 who = "Matthew Gregan <kinetik@flim.org>"
 320 criteria = "safe-to-deploy"
 321 delta = "0.10.1 -> 0.10.2"
 322
 323 [[audits.cubeb-core]]
 324 who = "Paul Adenot <paul@paul.cx>"
 325 criteria = "safe-to-deploy"
 326 delta = "0.10.2 -> 0.10.3"
 327 notes = """
 328 Mozilla-developed package.
 329 """
 330
 331 [[audits.cubeb-sys]]
 332 who = "Matthew Gregan <kinetik@flim.org>"
 333 criteria = "safe-to-deploy"
 334 version = "0.10.1"
 335 notes = """
 336 Mozilla-developed package.
 337 """
 338
 339 [[audits.cubeb-sys]]
 340 who = "Matthew Gregan <kinetik@flim.org>"
 341 criteria = "safe-to-deploy"
 342 delta = "0.10.1 -> 0.10.2"
 343
 344 [[audits.cubeb-sys]]
 345 who = "Paul Adenot <paul@paul.cx>"
 346 criteria = "safe-to-deploy"
 347 delta = "0.10.2 -> 0.10.3"
 348 notes = """
 349 Mozilla-developed package.
 350 """
 351
 352 [[audits.d3d12]]
 353 who = "Jim Blandy <jimb@red-bean.com>"
 354 criteria = "safe-to-deploy"
 355 delta = "0.4.1 -> 0.5.0"
 356 notes = "The commits between 0.4.1 and 0.5.0 were all audited by Dzmitry Malyshau or myself."
 357
 358 [[audits.derive_arbitrary]]
 359 who = "Mike Hommey <mh+mozilla@glandium.org>"
 360 criteria = "safe-to-run"
 361 delta = "1.1.0 -> 1.1.1"
 362
 363 [[audits.derive_arbitrary]]
 364 who = "Mike Hommey <mh+mozilla@glandium.org>"
 365 criteria = "safe-to-run"
 366 delta = "1.1.1 -> 1.1.3"
 367
 368 [[audits.devd-rs]]
 369 who = "Mike Hommey <mh+mozilla@glandium.org>"
 370 criteria = "safe-to-deploy"
 371 delta = "0.3.4 -> 0.3.5"
 372
 373 [[audits.displaydoc]]
 374 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 375 criteria = "safe-to-deploy"
 376 version = "0.2.3"
 377 notes = """
 378 This crate is convenient macros to implement core::fmt::Display trait.
 379 Although `unsafe` is used for test code to call `libc::abort()`, it has no `unsafe` code in this crate. And there is no file access.
 380 It meets the criteria for safe-to-deploy.
 381 """
 382
 383 [[audits.dogear]]
 384 who = "Sammy Khamis <skhamis@mozilla.com>"
 385 criteria = "safe-to-deploy"
 386 delta = "0.4.0 -> 0.5.0"
 387 notes = "The repository for this crate belongs in the Mozilla org."
 388
 389 [[audits.either]]
 390 who = "Mike Hommey <mh+mozilla@glandium.org>"
 391 criteria = "safe-to-deploy"
 392 delta = "1.6.1 -> 1.7.0"
 393
 394 [[audits.either]]
 395 who = "Mike Hommey <mh+mozilla@glandium.org>"
 396 criteria = "safe-to-deploy"
 397 delta = "1.7.0 -> 1.8.0"
 398
 399 [[audits.encoding_c]]
 400 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 401 criteria = "safe-to-deploy"
 402 version = "0.9.8"
 403 notes = "I, Henri Sivonen, wrote encoding_c for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/issues/79#issuecomment-1211870361"
 404
 405 [[audits.encoding_c_mem]]
 406 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 407 criteria = "safe-to-deploy"
 408 version = "0.2.6"
 409 notes = """
 410 I, Henri Sivonen, wrote encoding_c_mem for Gecko even though it is published via crates.io. There are two caveats: 1) the C API is designed to be used together with mozilla::Span and is unidiomatic for zero-length inputs otherwise. 2) It is idiomatic in C and C
 411 ++ to pass uninitialized buffers as output buffers. This is generally documented to be UB in Rust, but idiomatic C and C++ usage here relies on this not actually being UB for buffers of integers (which these buffers are). See https://github.com/hsivonen/encoding_rs/i
 412 ssues/79#issuecomment-1211870361
 413 """
 414
 415 [[audits.encoding_rs]]
 416 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
 417 criteria = "safe-to-deploy"
 418 version = "0.8.31"
 419 notes = "I, Henri Sivonen, wrote encoding_rs for Gecko and have reviewed contributions by others. There are two caveats to the certification: 1) The crate does things that are documented to be UB but that do not appear to actually be UB due to integer types differing from the general rule; https://github.com/hsivonen/encoding_rs/issues/79 . 2) It would be prudent to re-review the code that reinterprets buffers of integers as SIMD vectors; see https://github.com/hsivonen/encoding_rs/issues/87 ."
 420
 421 [[audits.extend]]
 422 who = "Ben Dean-Kawamura <bdk@mozilla.com>"
 423 criteria = "safe-to-deploy"
 424 version = "1.1.2"
 425 notes = "Inspected the crate and noted that the impl block comes directly from the proc-macro input.  If no new code can be added by this crate, I don't think there can be any issues."
 426
 427 [[audits.fallible_collections]]
 428 who = "Mike Hommey <mh+mozilla@glandium.org>"
 429 criteria = "safe-to-deploy"
 430 delta = "0.4.4 -> 0.4.5"
 431
 432 [[audits.fastrand]]
 433 who = "Mike Hommey <mh+mozilla@glandium.org>"
 434 criteria = "safe-to-deploy"
 435 delta = "1.7.0 -> 1.8.0"
 436
 437 [[audits.filetime_win]]
 438 who = "Nick Alexander <nalexander@mozilla.com>"
 439 criteria = "safe-to-deploy"
 440 version = "0.2.0"
 441 notes = """
 442 filetime_win was written by Adam Gashlin for Mozilla's use.  The `unsafe` code
 443 blocks in filetime_win 0.2.0 are straight-forward invocations of `mem::zeroed`
 444 and expected invocations of Win32 APIs (with error handling as appropriate).
 445 """
 446
 447 [[audits.flagset]]
 448 who = "Ryan Hunt <rhunt@eqrion.net>"
 449 criteria = "safe-to-deploy"
 450 version = "0.4.3"
 451 notes = "Uses no ambient capabilities, vetted the one instance of unsafe."
 452
 453 [[audits.fluent]]
 454 who = "Zibi Braniecki <zibi@unicode.org>"
 455 criteria = "safe-to-deploy"
 456 version = "0.16.0"
 457
 458 [[audits.fluent-bundle]]
 459 who = "Zibi Braniecki <zibi@unicode.org>"
 460 criteria = "safe-to-deploy"
 461 version = "0.15.2"
 462
 463 [[audits.fluent-fallback]]
 464 who = "Zibi Braniecki <zibi@unicode.org>"
 465 criteria = "safe-to-deploy"
 466 version = "0.6.0"
 467
 468 [[audits.fluent-fallback]]
 469 who = "Greg Tatum <tatum.creative@gmail.com>"
 470 criteria = "safe-to-deploy"
 471 delta = "0.6.0 -> 0.7.0"
 472
 473 [[audits.fluent-langneg]]
 474 who = "Zibi Braniecki <zibi@unicode.org>"
 475 criteria = "safe-to-deploy"
 476 version = "0.13.0"
 477
 478 [[audits.fluent-pseudo]]
 479 who = "Zibi Braniecki <zibi@unicode.org>"
 480 criteria = "safe-to-deploy"
 481 version = "0.3.1"
 482
 483 [[audits.fluent-syntax]]
 484 who = "Zibi Braniecki <zibi@unicode.org>"
 485 criteria = "safe-to-deploy"
 486 version = "0.11.0"
 487
 488 [[audits.fluent-testing]]
 489 who = "Zibi Braniecki <zibi@unicode.org>"
 490 criteria = "safe-to-run"
 491 version = "0.0.2"
 492
 493 [[audits.fluent-testing]]
 494 who = "Greg Tatum <tatum.creative@gmail.com>"
 495 criteria = "safe-to-run"
 496 delta = "0.0.2 -> 0.0.3"
 497
 498 [[audits.fnv]]
 499 who = "Bobby Holley <bobbyholley@gmail.com>"
 500 criteria = "safe-to-deploy"
 501 version = "1.0.7"
 502 notes = "Simple hasher implementation with no unsafe code."
 503
 504 [[audits.fs-err]]
 505 who = "Mike Hommey <mh+mozilla@glandium.org>"
 506 criteria = "safe-to-deploy"
 507 delta = "2.7.0 -> 2.8.1"
 508
 509 [[audits.futures]]
 510 who = "Mike Hommey <mh+mozilla@glandium.org>"
 511 criteria = "safe-to-deploy"
 512 delta = "0.3.21 -> 0.3.23"
 513
 514 [[audits.futures-channel]]
 515 who = "Mike Hommey <mh+mozilla@glandium.org>"
 516 criteria = "safe-to-deploy"
 517 delta = "0.3.21 -> 0.3.23"
 518
 519 [[audits.futures-core]]
 520 who = "Mike Hommey <mh+mozilla@glandium.org>"
 521 criteria = "safe-to-deploy"
 522 delta = "0.3.21 -> 0.3.23"
 523
 524 [[audits.futures-executor]]
 525 who = "Mike Hommey <mh+mozilla@glandium.org>"
 526 criteria = "safe-to-deploy"
 527 delta = "0.3.21 -> 0.3.23"
 528
 529 [[audits.futures-io]]
 530 who = "Mike Hommey <mh+mozilla@glandium.org>"
 531 criteria = "safe-to-deploy"
 532 delta = "0.3.21 -> 0.3.23"
 533
 534 [[audits.futures-macro]]
 535 who = "Mike Hommey <mh+mozilla@glandium.org>"
 536 criteria = "safe-to-deploy"
 537 delta = "0.3.21 -> 0.3.23"
 538
 539 [[audits.futures-sink]]
 540 who = "Mike Hommey <mh+mozilla@glandium.org>"
 541 criteria = "safe-to-deploy"
 542 delta = "0.3.21 -> 0.3.23"
 543
 544 [[audits.futures-task]]
 545 who = "Mike Hommey <mh+mozilla@glandium.org>"
 546 criteria = "safe-to-deploy"
 547 delta = "0.3.21 -> 0.3.23"
 548
 549 [[audits.futures-util]]
 550 who = "Mike Hommey <mh+mozilla@glandium.org>"
 551 criteria = "safe-to-deploy"
 552 delta = "0.3.21 -> 0.3.23"
 553
 554 [[audits.fxhash]]
 555 who = "Bobby Holley <bobbyholley@gmail.com>"
 556 criteria = "safe-to-deploy"
 557 version = "0.2.1"
 558 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
 559
 560 [[audits.generic-array]]
 561 who = "Mike Hommey <mh+mozilla@glandium.org>"
 562 criteria = "safe-to-deploy"
 563 delta = "0.14.5 -> 0.14.6"
 564
 565 [[audits.getrandom]]
 566 who = "Mike Hommey <mh+mozilla@glandium.org>"
 567 criteria = "safe-to-deploy"
 568 delta = "0.2.6 -> 0.2.7"
 569
 570 [[audits.glean]]
 571 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 572 criteria = "safe-to-deploy"
 573 version = "50.1.0"
 574 notes = "Maintained by the Glean team at Mozilla"
 575
 576 [[audits.glean]]
 577 who = "Travis Long <tlong@mozilla.com>"
 578 criteria = "safe-to-deploy"
 579 version = "50.1.2"
 580 notes = "Maintained by the Glean team at Mozilla"
 581
 582 [[audits.glean]]
 583 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 584 criteria = "safe-to-deploy"
 585 version = "51.1.0"
 586 notes = "Maintained by the Glean team at Mozilla"
 587
 588 [[audits.glean]]
 589 who = "Chris H-C <chutten@mozilla.com>"
 590 criteria = "safe-to-deploy"
 591 version = "51.7.0"
 592 notes = "Maintained by the Glean team at Mozilla"
 593
 594 [[audits.glean]]
 595 who = "Chris H-C <chutten@mozilla.com>"
 596 criteria = "safe-to-deploy"
 597 version = "51.8.1"
 598 notes = "Maintained by the Glean Team at Mozilla"
 599
 600 [[audits.glean]]
 601 who = "Chris H-C <chutten@mozilla.com>"
 602 criteria = "safe-to-deploy"
 603 version = "51.8.2"
 604 notes = "Maintained by the Glean Team at Mozilla."
 605
 606 [[audits.glean]]
 607 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 608 criteria = "safe-to-deploy"
 609 delta = "50.1.2 -> 50.1.3"
 610 notes = "Unchanged from last version"
 611
 612 [[audits.glean]]
 613 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 614 criteria = "safe-to-deploy"
 615 delta = "50.1.3 -> 51.0.1"
 616 notes = "Maintained by the Glean team at Mozilla"
 617
 618 [[audits.glean]]
 619 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 620 criteria = "safe-to-deploy"
 621 delta = "51.1.0 -> 51.2.0"
 622 notes = "Maintained by the Glean team at Mozilla"
 623
 624 [[audits.glean]]
 625 who = "Perry McManis <pmcmanis@mozilla.com>"
 626 criteria = "safe-to-deploy"
 627 delta = "51.2.0 -> 51.4.0"
 628
 629 [[audits.glean]]
 630 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 631 criteria = "safe-to-deploy"
 632 delta = "51.4.0 -> 51.5.0"
 633 notes = "Maintained by the Glean team at Mozilla"
 634
 635 [[audits.glean]]
 636 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 637 criteria = "safe-to-deploy"
 638 delta = "51.7.0 -> 51.8.0"
 639 notes = "Maintained by the Glean team at Mozilla"
 640
 641 [[audits.glean-core]]
 642 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 643 criteria = "safe-to-deploy"
 644 version = "50.1.0"
 645 notes = "Maintained by the Glean team at Mozilla"
 646
 647 [[audits.glean-core]]
 648 who = "Travis Long <tlong@mozilla.com>"
 649 criteria = "safe-to-deploy"
 650 version = "50.1.2"
 651 notes = "Maintained by the Glean team at Mozilla"
 652
 653 [[audits.glean-core]]
 654 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 655 criteria = "safe-to-deploy"
 656 version = "51.1.0"
 657 notes = "Maintained by the Glean team at Mozilla"
 658
 659 [[audits.glean-core]]
 660 who = "Chris H-C <chutten@mozilla.com>"
 661 criteria = "safe-to-deploy"
 662 version = "51.7.0"
 663 notes = "Maintained by the Glean team at Mozilla"
 664
 665 [[audits.glean-core]]
 666 who = "Chris H-C <chutten@mozilla.com>"
 667 criteria = "safe-to-deploy"
 668 version = "51.8.1"
 669 notes = "Maintained by the Glean Team at Mozilla"
 670
 671 [[audits.glean-core]]
 672 who = "Chris H-C <chutten@mozilla.com>"
 673 criteria = "safe-to-deploy"
 674 version = "51.8.2"
 675 notes = "Maintained by the Glean Team at Mozilla."
 676
 677 [[audits.glean-core]]
 678 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 679 criteria = "safe-to-deploy"
 680 delta = "50.1.2 -> 50.1.3"
 681 notes = "Bug fix release with minimal changes, changes done by myself"
 682
 683 [[audits.glean-core]]
 684 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 685 criteria = "safe-to-deploy"
 686 delta = "50.1.3 -> 51.0.1"
 687 notes = "Maintained by the Glean team at Mozilla"
 688
 689 [[audits.glean-core]]
 690 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 691 criteria = "safe-to-deploy"
 692 delta = "51.1.0 -> 51.2.0"
 693 notes = "Bug fix release with minimal changes, changes done by myself"
 694
 695 [[audits.glean-core]]
 696 who = "Perry McManis <pmcmanis@mozilla.com>"
 697 criteria = "safe-to-deploy"
 698 delta = "51.2.0 -> 51.4.0"
 699
 700 [[audits.glean-core]]
 701 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 702 criteria = "safe-to-deploy"
 703 delta = "51.4.0 -> 51.5.0"
 704 notes = "Maintained by the Glean team at Mozilla"
 705
 706 [[audits.glean-core]]
 707 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 708 criteria = "safe-to-deploy"
 709 delta = "51.7.0 -> 51.8.0"
 710 notes = "Maintained by the Glean team at Mozilla"
 711
 712 [[audits.goblin]]
 713 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
 714 criteria = "safe-to-deploy"
 715 delta = "0.1.3 -> 0.5.4"
 716 notes = "Several bugfixes since 2019. This version is also in use by Mozilla's crash reporting tooling, e.g. minidump-writer"
 717
 718 [[audits.goblin]]
 719 who = "Gabriele Svelto <gsvelto@mozilla.com>"
 720 criteria = "safe-to-deploy"
 721 delta = "0.5.4 -> 0.6.0"
 722 notes = "Mostly bug fixes and some added functionality"
 723
 724 [[audits.gpu-descriptor]]
 725 who = "Mike Hommey <mh+mozilla@glandium.org>"
 726 criteria = "safe-to-deploy"
 727 delta = "0.2.2 -> 0.2.3"
 728
 729 [[audits.guid_win]]
 730 who = "Bobby Holley <bobbyholley@gmail.com>"
 731 criteria = "safe-to-deploy"
 732 version = "0.2.0"
 733 notes = """
 734 This crate has some unsafe code for the FFI bits, which I've reviewed carefully.
 735 It uses the deprecated mem::uninitialized(), which is generally sketchy. However
 736 the usage is pretty straightforward and while it's technically UB, it seems no
 737 more likely to lead to miscompilation than any other use of mem::uninitialized.
 738 """
 739
 740 [[audits.h2]]
 741 who = "Mike Hommey <mh+mozilla@glandium.org>"
 742 criteria = "safe-to-run"
 743 delta = "0.3.13 -> 0.3.14"
 744
 745 [[audits.half]]
 746 who = "John M. Schanck <jschanck@mozilla.com>"
 747 criteria = "safe-to-deploy"
 748 version = "1.8.2"
 749 notes = """
 750 This crate contains unsafe code for bitwise casts to/from binary16 floating-point
 751 format. I've reviewed these and found no issues. There are no uses of ambient
 752 capabilities.
 753 """
 754
 755 [[audits.hashbrown]]
 756 who = "Mike Hommey <mh+mozilla@glandium.org>"
 757 criteria = "safe-to-deploy"
 758 version = "0.12.3"
 759 notes = "This version is used in rust's libstd, so effectively we're already trusting it"
 760
 761 [[audits.hashlink]]
 762 who = "Mike Hommey <mh+mozilla@glandium.org>"
 763 criteria = "safe-to-deploy"
 764 delta = "0.7.0 -> 0.8.1"
 765
 766 [[audits.hex]]
 767 who = "Simon Friedberger <simon@mozilla.com>"
 768 criteria = "safe-to-deploy"
 769 version = "0.4.3"
 770
 771 [[audits.hyper]]
 772 who = "Mike Hommey <mh+mozilla@glandium.org>"
 773 criteria = "safe-to-run"
 774 delta = "0.14.19 -> 0.14.20"
 775
 776 [[audits.indexmap]]
 777 who = "Mike Hommey <mh+mozilla@glandium.org>"
 778 criteria = "safe-to-deploy"
 779 delta = "1.8.2 -> 1.9.1"
 780
 781 [[audits.inherent]]
 782 who = "Mike Hommey <mh+mozilla@glandium.org>"
 783 criteria = "safe-to-deploy"
 784 delta = "1.0.1 -> 1.0.2"
 785
 786 [[audits.inplace_it]]
 787 who = "Mike Hommey <mh+mozilla@glandium.org>"
 788 criteria = "safe-to-deploy"
 789 delta = "0.3.3 -> 0.3.4"
 790
 791 [[audits.intl-memoizer]]
 792 who = "Zibi Braniecki <zibi@unicode.org>"
 793 criteria = "safe-to-deploy"
 794 version = "0.5.1"
 795
 796 [[audits.intl_pluralrules]]
 797 who = "Zibi Braniecki <zibi@unicode.org>"
 798 criteria = "safe-to-deploy"
 799 version = "7.0.1"
 800
 801 [[audits.intl_pluralrules]]
 802 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
 803 criteria = "safe-to-deploy"
 804 delta = "7.0.1 -> 7.0.2"
 805
 806 [[audits.itoa]]
 807 who = "Mike Hommey <mh+mozilla@glandium.org>"
 808 criteria = "safe-to-deploy"
 809 delta = "1.0.2 -> 1.0.3"
 810
 811 [[audits.libc]]
 812 who = "Mike Hommey <mh+mozilla@glandium.org>"
 813 criteria = "safe-to-deploy"
 814 delta = "0.2.126 -> 0.2.132"
 815
 816 [[audits.linked-hash-map]]
 817 who = "Aria Beingessner <a.beingessner@gmail.com>"
 818 criteria = "safe-to-deploy"
 819 version = "0.5.4"
 820 notes = "I own this crate (I am contain-rs) and 0.5.4 passes miri. This code is very old and used by lots of people, so I'm pretty confident in it, even though it's in maintenance-mode and missing some nice-to-have APIs."
 821
 822 [[audits.linked-hash-map]]
 823 who = "Mike Hommey <mh+mozilla@glandium.org>"
 824 criteria = "safe-to-run"
 825 delta = "0.5.4 -> 0.5.6"
 826
 827 [[audits.log]]
 828 who = "Mike Hommey <mh+mozilla@glandium.org>"
 829 criteria = "safe-to-deploy"
 830 version = "0.4.17"
 831
 832 [[audits.malloc_size_of_derive]]
 833 who = "Bobby Holley <bobbyholley@gmail.com>"
 834 criteria = "safe-to-deploy"
 835 version = "0.1.2"
 836 notes = """
 837 This was originally servo code which I put on crates.io some years ago but didn't
 838 examine at the time, so I examined it now. I didn't perform a full logic review
 839 but convinced myself that any generated code will be entirely safe to deploy.
 840 """
 841
 842 [[audits.matches]]
 843 who = "Bobby Holley <bobbyholley@gmail.com>"
 844 criteria = "safe-to-deploy"
 845 version = "0.1.9"
 846 notes = "This is a trivial crate."
 847
 848 [[audits.memmap2]]
 849 who = "Mike Hommey <mh+mozilla@glandium.org>"
 850 criteria = "safe-to-deploy"
 851 delta = "0.5.4 -> 0.5.7"
 852
 853 [[audits.memoffset]]
 854 who = "Gabriele Svelto <gsvelto@mozilla.com>"
 855 criteria = "safe-to-deploy"
 856 delta = "0.6.5 -> 0.7.1"
 857
 858 [[audits.metal]]
 859 who = "Jim Blandy <jimb@red-bean.com>"
 860 criteria = "safe-to-deploy"
 861 delta = "0.23.1 -> 0.24.0"
 862 notes = "This audit treats Dzmitry Malyshau (kvark) as a trusted reviewer."
 863
 864 [[audits.mozprofile]]
 865 who = "Henrik Skupin <mail@hskupin.info>"
 866 criteria = "safe-to-deploy"
 867 version = "0.9.0"
 868 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 869
 870 [[audits.mozrunner]]
 871 who = "Henrik Skupin <mail@hskupin.info>"
 872 criteria = "safe-to-deploy"
 873 version = "0.15.0"
 874 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 875
 876 [[audits.mozversion]]
 877 who = "Henrik Skupin <mail@hskupin.info>"
 878 criteria = "safe-to-run"
 879 version = "0.5.0"
 880 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
 881
 882 [[audits.naga]]
 883 who = "Dzmitry Malyshau <kvark@fastmail.com>"
 884 criteria = "safe-to-deploy"
 885 version = "0.8.0"
 886 notes = """
 887 This crate, up through the indicated version, was written or reviewed
 888 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
 889 Mozilla at the beginning of February 2022. This audit statement was
 890 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
 891 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
 892 """
 893
 894 [[audits.naga]]
 895 who = "Jim Blandy <jimb@red-bean.com>"
 896 criteria = "safe-to-deploy"
 897 delta = "0.8.0 -> 0.9.0"
 898
 899 [[audits.naga]]
 900 who = "Jim Blandy <jimb@red-bean.com>"
 901 criteria = "safe-to-deploy"
 902 delta = "0.9.0 -> 0.10.0"
 903
 904 [[audits.new_debug_unreachable]]
 905 who = "Bobby Holley <bobbyholley@gmail.com>"
 906 criteria = "safe-to-deploy"
 907 version = "1.0.4"
 908 notes = "This is a trivial crate."
 909
 910 [[audits.nix]]
 911 who = "Gabriele Svelto <gsvelto@mozilla.com>"
 912 criteria = "safe-to-deploy"
 913 delta = "0.15.0 -> 0.25.0"
 914 notes = "Plenty of new bindings but also several important bug fixes (including buffer overflows). New unsafe sections are restricted to wrappers and are no more dangerous than calling the C functions."
 915
 916 [[audits.nss-gk-api]]
 917 who = "John M. Schanck <jschanck@mozilla.com>"
 918 criteria = "safe-to-deploy"
 919 version = "0.2.1"
 920 notes = "Maintained by the CryptoEng team at Mozilla."
 921
 922 [[audits.num]]
 923 who = "Josh Stone <jistone@redhat.com>"
 924 criteria = "safe-to-deploy"
 925 version = "0.4.0"
 926 notes = "All code written or reviewed by Josh Stone."
 927
 928 [[audits.num-bigint]]
 929 who = "Josh Stone <jistone@redhat.com>"
 930 criteria = "safe-to-deploy"
 931 version = "0.2.6"
 932 notes = "All code written or reviewed by Josh Stone."
 933
 934 [[audits.num-bigint]]
 935 who = "Josh Stone <jistone@redhat.com>"
 936 criteria = "safe-to-deploy"
 937 version = "0.4.3"
 938 notes = "All code written or reviewed by Josh Stone."
 939
 940 [[audits.num-complex]]
 941 who = "Josh Stone <jistone@redhat.com>"
 942 criteria = "safe-to-deploy"
 943 version = "0.4.2"
 944 notes = "All code written or reviewed by Josh Stone."
 945
 946 [[audits.num-derive]]
 947 who = "Josh Stone <jistone@redhat.com>"
 948 criteria = "safe-to-deploy"
 949 version = "0.3.3"
 950 notes = "All code written or reviewed by Josh Stone."
 951
 952 [[audits.num-integer]]
 953 who = "Josh Stone <jistone@redhat.com>"
 954 criteria = "safe-to-deploy"
 955 version = "0.1.45"
 956 notes = "All code written or reviewed by Josh Stone."
 957
 958 [[audits.num-iter]]
 959 who = "Josh Stone <jistone@redhat.com>"
 960 criteria = "safe-to-deploy"
 961 version = "0.1.43"
 962 notes = "All code written or reviewed by Josh Stone."
 963
 964 [[audits.num-macros]]
 965 who = "Josh Stone <jistone@redhat.com>"
 966 criteria = "safe-to-deploy"
 967 version = "0.1.40"
 968 notes = "All code written or reviewed by Josh Stone."
 969
 970 [[audits.num-rational]]
 971 who = "Josh Stone <jistone@redhat.com>"
 972 criteria = "safe-to-deploy"
 973 version = "0.4.1"
 974 notes = "All code written or reviewed by Josh Stone."
 975
 976 [[audits.num-traits]]
 977 who = "Josh Stone <jistone@redhat.com>"
 978 criteria = "safe-to-deploy"
 979 version = "0.2.15"
 980 notes = "All code written or reviewed by Josh Stone."
 981
 982 [[audits.ohttp]]
 983 who = "Dana Keeler <dkeeler@mozilla.com>"
 984 criteria = "safe-to-deploy"
 985 version = "0.2.2"
 986 notes = """
 987 Developed and maintained  by Mozilla.
 988 When configured to use NSS (as we do), this crate uses unsafe blocks to call
 989 NSS functions. These calls have been audited.
 990 """
 991
 992 [[audits.once_cell]]
 993 who = "Mike Hommey <mh+mozilla@glandium.org>"
 994 criteria = "safe-to-deploy"
 995 delta = "1.12.0 -> 1.13.1"
 996
 997 [[audits.origin-trial-token]]
 998 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
 999 criteria = "safe-to-deploy"
1000 version = "0.1.1"
1001 notes = """
1002 I'm the author of the crate. The only unsafe code is a view over a byte array
1003 which is properly validated.
1004
1005 Cryptography shenanigans are delegated to the caller so there's no possible
1006 unsoundness there.
1007 """
1008
1009 [[audits.os_str_bytes]]
1010 who = "Mike Hommey <mh+mozilla@glandium.org>"
1011 criteria = "safe-to-deploy"
1012 delta = "6.1.0 -> 6.3.0"
1013
1014 [[audits.packed_simd_2]]
1015 who = "Mike Hommey <mh+mozilla@glandium.org>"
1016 criteria = "safe-to-deploy"
1017 delta = "0.3.7 -> 0.3.8"
1018
1019 [[audits.paste]]
1020 who = "Mike Hommey <mh+mozilla@glandium.org>"
1021 criteria = "safe-to-deploy"
1022 delta = "1.0.7 -> 1.0.8"
1023
1024 [[audits.pin-project]]
1025 who = "Mike Hommey <mh+mozilla@glandium.org>"
1026 criteria = "safe-to-run"
1027 delta = "1.0.10 -> 1.0.12"
1028
1029 [[audits.pin-project-internal]]
1030 who = "Mike Hommey <mh+mozilla@glandium.org>"
1031 criteria = "safe-to-run"
1032 delta = "1.0.10 -> 1.0.12"
1033
1034 [[audits.pkcs11-bindings]]
1035 who = "Dana Keeler <dkeeler@mozilla.com>"
1036 criteria = "safe-to-deploy"
1037 version = "0.1.0"
1038 notes = """
1039 This crate consists of declarations of types and constants that are
1040 auto-generated by running bindgen on the PKCS#11 specification headers. Other
1041 than the tests generated by bindgen, it consists of no runnable code.
1042 """
1043
1044 [[audits.pkcs11-bindings]]
1045 who = "John M. Schanck <jmschanck@gmail.com>"
1046 criteria = "safe-to-deploy"
1047 version = "0.1.1"
1048
1049 [[audits.pkcs11-bindings]]
1050 who = "Mike Hommey <mh+mozilla@glandium.org>"
1051 criteria = "safe-to-deploy"
1052 delta = "0.1.1 -> 0.1.4"
1053
1054 [[audits.plane-split]]
1055 who = "Nicolas Silva <nical@fastmail.com>"
1056 criteria = "safe-to-deploy"
1057 version = "0.18.0"
1058 notes = "Mozilla-developed package, no unsafe code, no access to file system, network or other far reaching APIs."
1059
1060 [[audits.precomputed-hash]]
1061 who = "Bobby Holley <bobbyholley@gmail.com>"
1062 criteria = "safe-to-deploy"
1063 version = "0.1.1"
1064 notes = "This is a trivial crate."
1065
1066 [[audits.prio]]
1067 who = "Simon Friedberger <simon@mozilla.com>"
1068 criteria = "safe-to-deploy"
1069 version = "0.8.4"
1070 notes = "The crate does not use any unsafe code or ambient capabilities and thus meets the criteria for safe-to-deploy. The cryptography itself should be considered experimental at this phase and is currently undergoing a thorough audit organized by Cloudflare."
1071
1072 [[audits.prio]]
1073 who = "Simon Friedberger <simon@mozilla.com>"
1074 criteria = "safe-to-deploy"
1075 version = "0.9.1"
1076
1077 [[audits.proc-macro2]]
1078 who = "Nika Layzell <nika@thelayzells.com>"
1079 criteria = "safe-to-deploy"
1080 version = "1.0.39"
1081 notes = """
1082 `proc-macro2` acts as either a thin(-ish) wrapper around the std-provided
1083 `proc_macro` crate, or as a fallback implementation of the crate, depending on
1084 where it is used.
1085
1086 If using this crate on older versions of rustc (1.56 and earlier), it will
1087 temporarily replace the panic handler while initializing in order to detect if
1088 it is running within a `proc_macro`, which could lead to surprising behaviour.
1089 This should not be an issue for more recent compiler versions, which support
1090 `proc_macro::is_available()`.
1091
1092 The `proc-macro2` crate's fallback behaviour is not identical to the complex
1093 behaviour of the rustc compiler (e.g. it does not perform unicode normalization
1094 for identifiers), however it behaves well enough for its intended use-case
1095 (tests and scripts processing rust code).
1096
1097 `proc-macro2` does not use unsafe code, however exposes one `unsafe` API to
1098 allow bypassing checks in the fallback implementation when constructing
1099 `Literal` using `from_str_unchecked`. This was intended to only be used by the
1100 `quote!` macro, however it has been removed
1101 (https://github.com/dtolnay/quote/commit/f621fe64a8a501cae8e95ebd6848e637bbc79078),
1102 and is likely completely unused. Even when used, this API shouldn't be able to
1103 cause unsoundness.
1104 """
1105
1106 [[audits.proc-macro2]]
1107 who = "Mike Hommey <mh+mozilla@glandium.org>"
1108 criteria = "safe-to-deploy"
1109 delta = "1.0.39 -> 1.0.43"
1110
1111 [[audits.qcms]]
1112 who = "Jeff Muizelaar <jmuizelaar@mozilla.com>"
1113 criteria = "safe-to-deploy"
1114 version = "0.2.0"
1115
1116 [[audits.quote]]
1117 who = "Nika Layzell <nika@thelayzells.com>"
1118 criteria = "safe-to-deploy"
1119 version = "1.0.18"
1120 notes = """
1121 `quote` is a utility crate used by proc-macros to generate TokenStreams
1122 conveniently from source code. The bulk of the logic is some complex
1123 interlocking `macro_rules!` macros which are used to parse and build the
1124 `TokenStream` within the proc-macro.
1125
1126 This crate contains no unsafe code, and the internal logic, while difficult to
1127 read, is generally straightforward. I have audited the the quote macros, ident
1128 formatter, and runtime logic.
1129 """
1130
1131 [[audits.quote]]
1132 who = "Mike Hommey <mh+mozilla@glandium.org>"
1133 criteria = "safe-to-deploy"
1134 delta = "1.0.18 -> 1.0.21"
1135
1136 [[audits.radium]]
1137 who = "Nika Layzell <nika@thelayzells.com>"
1138 criteria = "safe-to-deploy"
1139 version = "0.5.3"
1140 notes = """
1141 I am no longer the primary maintainer of `radium`, however I have audited the
1142 code to ensure it is still correct. The implementation contains no `unsafe`
1143 logic, and will not abstract away `Sync` trait bounds.
1144
1145 The core logic is very simple, and acts as an abstraction trait for `Cell<T>`
1146 and `AtomicT`.
1147 """
1148
1149 [[audits.raw-window-handle]]
1150 who = "Jim Blandy <jimb@red-bean.com>"
1151 criteria = "safe-to-deploy"
1152 version = "0.5.0"
1153 notes = "I looked through all the sources of the v0.5.0 crate."
1154
1155 [[audits.rayon]]
1156 who = "Josh Stone <jistone@redhat.com>"
1157 criteria = "safe-to-deploy"
1158 version = "1.5.3"
1159 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
1160
1161 [[audits.rayon-core]]
1162 who = "Josh Stone <jistone@redhat.com>"
1163 criteria = "safe-to-deploy"
1164 version = "1.9.3"
1165 notes = "All code written or reviewed by Josh Stone or Niko Matsakis."
1166
1167 [[audits.redox_syscall]]
1168 who = "Mike Hommey <mh+mozilla@glandium.org>"
1169 criteria = "safe-to-deploy"
1170 delta = "0.2.13 -> 0.2.16"
1171
1172 [[audits.regex]]
1173 who = "Mike Hommey <mh+mozilla@glandium.org>"
1174 criteria = "safe-to-deploy"
1175 delta = "1.5.6 -> 1.6.0"
1176
1177 [[audits.regex-syntax]]
1178 who = "Mike Hommey <mh+mozilla@glandium.org>"
1179 criteria = "safe-to-deploy"
1180 delta = "0.6.26 -> 0.6.27"
1181
1182 [[audits.rkv]]
1183 who = "Chris H-C <chutten@mozilla.com>"
1184 criteria = "safe-to-deploy"
1185 version = "0.18.2"
1186 notes = "Maintained by Jan-Erik and :krosylight."
1187
1188 [[audits.ron]]
1189 who = "Mike Hommey <mh+mozilla@glandium.org>"
1190 criteria = "safe-to-deploy"
1191 delta = "0.7.0 -> 0.7.1"
1192
1193 [[audits.ron]]
1194 who = "Jim Blandy <jimb@red-bean.com>"
1195 criteria = "safe-to-deploy"
1196 delta = "0.7.1 -> 0.8.0"
1197
1198 [[audits.rure]]
1199 who = "Nika Layzell <nika@thelayzells.com>"
1200 criteria = "safe-to-deploy"
1201 version = "0.2.2"
1202 notes = """
1203 This is a fairly straightforward FFI wrapper crate for `regex`, maintained by
1204 the `regex` developers in the same repository.
1205
1206 This crate is explicitly designed for FFI use, and should not be used directly
1207 by Rust code. The exported `extern \"C\"` functions are not marked as `unsafe`,
1208 meaning that it is technically incorrect to use them from within Rust code,
1209 however they are reasonable to use from C code.
1210
1211 The unsafe code in this crate heavily depends on the C caller maintaining
1212 invariants, however these invariants are clearly documented in the `rure.h`
1213 file, bundled with the crate.
1214
1215 I have checked the signatures of each function both in C++ and in the Rust to
1216 ensure they match.  In some places, the c `rure.h` header file is missing a
1217 `const` qualifier which could be present given the Rust code, however this will
1218 have no impact on ABI, and is fairly normal for FFI crates.
1219
1220 Panics are handled in all Rust FFI methods, meaning that projects which do not
1221 disable unwinding will still consistently abort (using `libc::abort()`) if a
1222 panic occurs in the Rust code.
1223 """
1224
1225 [[audits.rusqlite]]
1226 who = "Mike Hommey <mh+mozilla@glandium.org>"
1227 criteria = "safe-to-deploy"
1228 delta = "0.27.0 -> 0.28.0"
1229
1230 [[audits.rust_decimal]]
1231 who = "Mike Hommey <mh+mozilla@glandium.org>"
1232 criteria = "safe-to-deploy"
1233 delta = "1.24.0 -> 1.25.0"
1234
1235 [[audits.rust_decimal]]
1236 who = "Mike Hommey <mh+mozilla@glandium.org>"
1237 criteria = "safe-to-deploy"
1238 delta = "1.25.0 -> 1.26.1"
1239
1240 [[audits.rustc-hash]]
1241 who = "Bobby Holley <bobbyholley@gmail.com>"
1242 criteria = "safe-to-deploy"
1243 version = "1.1.0"
1244 notes = "Straightforward crate with no unsafe code, does what it says on the tin."
1245
1246 [[audits.rustc_version]]
1247 who = "Nika Layzell <nika@thelayzells.com>"
1248 criteria = "safe-to-run"
1249 version = "0.4.0"
1250 notes = """
1251 Straightforward crate which runs `$RUSTC -vV` and parses the output into a
1252 machine-interpretable form for build scripts.
1253 """
1254
1255 [[audits.rustversion]]
1256 who = "Bobby Holley <bobbyholley@gmail.com>"
1257 criteria = "safe-to-deploy"
1258 version = "1.0.9"
1259 notes = """
1260 This crate has a build-time component and procedural macro logic, which I looked
1261 at enough to convince myself it wasn't going to do anything dramatically wrong.
1262 I don't think logic bugs in the version parsing etc can realistically introduce
1263 a security vulnerability.
1264 """
1265
1266 [[audits.ryu]]
1267 who = "Mike Hommey <mh+mozilla@glandium.org>"
1268 criteria = "safe-to-deploy"
1269 delta = "1.0.10 -> 1.0.11"
1270
1271 [[audits.scroll]]
1272 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1273 criteria = "safe-to-deploy"
1274 delta = "0.10.2 -> 0.11.0"
1275 notes = "Small changes to exposed traits, that look reasonable and have additional buffer boundary checks. No unsafe code touched."
1276
1277 [[audits.scroll_derive]]
1278 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1279 criteria = "safe-to-deploy"
1280 delta = "0.10.5 -> 0.11.0"
1281 notes = "No code changes. Tagged together with its parent crate scroll."
1282
1283 [[audits.selectors]]
1284 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1285 criteria = "safe-to-deploy"
1286 version = "0.22.0"
1287 notes = """
1288 This crate is basically developed in-tree. Mozilla employees have either
1289 reviewed or written virtually all of the code.
1290 """
1291
1292 [[audits.semver]]
1293 who = "Mike Hommey <mh+mozilla@glandium.org>"
1294 criteria = "safe-to-deploy"
1295 delta = "1.0.9 -> 1.0.10"
1296
1297 [[audits.semver]]
1298 who = "Mike Hommey <mh+mozilla@glandium.org>"
1299 criteria = "safe-to-deploy"
1300 delta = "1.0.10 -> 1.0.13"
1301
1302 [[audits.serde]]
1303 who = "Mike Hommey <mh+mozilla@glandium.org>"
1304 criteria = "safe-to-deploy"
1305 delta = "1.0.137 -> 1.0.143"
1306
1307 [[audits.serde]]
1308 who = "Mike Hommey <mh+mozilla@glandium.org>"
1309 criteria = "safe-to-deploy"
1310 delta = "1.0.143 -> 1.0.144"
1311
1312 [[audits.serde_bytes]]
1313 who = "Mike Hommey <mh+mozilla@glandium.org>"
1314 criteria = "safe-to-deploy"
1315 delta = "0.11.6 -> 0.11.7"
1316
1317 [[audits.serde_cbor]]
1318 who = "R. Martinho Fernandes <bugs@rmf.io>"
1319 criteria = "safe-to-deploy"
1320 version = "0.11.1"
1321
1322 [[audits.serde_cbor]]
1323 who = "John M. Schanck <jschanck@mozilla.com>"
1324 criteria = "safe-to-deploy"
1325 delta = "0.11.1 -> 0.11.2"
1326
1327 [[audits.serde_derive]]
1328 who = "Mike Hommey <mh+mozilla@glandium.org>"
1329 criteria = "safe-to-deploy"
1330 delta = "1.0.137 -> 1.0.143"
1331
1332 [[audits.serde_derive]]
1333 who = "Mike Hommey <mh+mozilla@glandium.org>"
1334 criteria = "safe-to-deploy"
1335 delta = "1.0.143 -> 1.0.144"
1336
1337 [[audits.serde_json]]
1338 who = "Mike Hommey <mh+mozilla@glandium.org>"
1339 criteria = "safe-to-deploy"
1340 delta = "1.0.81 -> 1.0.83"
1341
1342 [[audits.serde_json]]
1343 who = "Mike Hommey <mh+mozilla@glandium.org>"
1344 criteria = "safe-to-deploy"
1345 delta = "1.0.83 -> 1.0.85"
1346
1347 [[audits.serde_repr]]
1348 who = "Mike Hommey <mh+mozilla@glandium.org>"
1349 criteria = "safe-to-run"
1350 delta = "0.1.8 -> 0.1.9"
1351
1352 [[audits.serde_yaml]]
1353 who = "Mike Hommey <mh+mozilla@glandium.org>"
1354 criteria = "safe-to-run"
1355 delta = "0.8.24 -> 0.8.26"
1356
1357 [[audits.servo_arc]]
1358 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1359 criteria = "safe-to-deploy"
1360 version = "0.1.1"
1361 notes = "Developed in-tree, effectively."
1362
1363 [[audits.slab]]
1364 who = "Mike Hommey <mh+mozilla@glandium.org>"
1365 criteria = "safe-to-deploy"
1366 delta = "0.4.6 -> 0.4.7"
1367
1368 [[audits.smallvec]]
1369 who = "Mike Hommey <mh+mozilla@glandium.org>"
1370 criteria = "safe-to-deploy"
1371 delta = "1.8.0 -> 1.9.0"
1372
1373 [[audits.svg_fmt]]
1374 who = "Bobby Holley <bobbyholley@gmail.com>"
1375 criteria = "safe-to-deploy"
1376 version = "0.4.1"
1377 notes = "Simple string processing with no unsafe code or ambient capability usage."
1378
1379 [[audits.syn]]
1380 who = "Mike Hommey <mh+mozilla@glandium.org>"
1381 criteria = "safe-to-deploy"
1382 delta = "1.0.96 -> 1.0.99"
1383
1384 [[audits.synstructure]]
1385 who = "Nika Layzell <nika@thelayzells.com>"
1386 criteria = "safe-to-deploy"
1387 version = "0.12.6"
1388 notes = """
1389 I am the primary author of the `synstructure` crate, and its current
1390 maintainer. The one use of `unsafe` is unnecessary, but documented and
1391 harmless. It will be removed in the next version.
1392 """
1393
1394 [[audits.thin-vec]]
1395 who = "Aria Beingessner <a.beingessner@gmail.com>"
1396 criteria = "safe-to-deploy"
1397 version = "0.2.5"
1398 notes = "I own this crate, and most of its versions were codeveloped and reviewed by Nika Layzell. This version was not explicitly reviewed by her, but it was specifically a release that made the code pass miri and was reviewed by me. Firefox uses it in the gecko-ffi configuration which is less thoroughly tested and more dangerous but we're reasonably confident in it. The real danger is from C++ code failing to use it correctly in FFI but that's just how FFI is."
1399
1400 [[audits.thin-vec]]
1401 who = "Mike Hommey <mh+mozilla@glandium.org>"
1402 criteria = "safe-to-deploy"
1403 delta = "0.2.5 -> 0.2.7"
1404
1405 [[audits.thiserror]]
1406 who = "Mike Hommey <mh+mozilla@glandium.org>"
1407 criteria = "safe-to-deploy"
1408 delta = "1.0.31 -> 1.0.32"
1409
1410 [[audits.thiserror-impl]]
1411 who = "Mike Hommey <mh+mozilla@glandium.org>"
1412 criteria = "safe-to-deploy"
1413 delta = "1.0.31 -> 1.0.32"
1414
1415 [[audits.threadbound]]
1416 who = "Mike Hommey <mh+mozilla@glandium.org>"
1417 criteria = "safe-to-deploy"
1418 delta = "0.1.3 -> 0.1.4"
1419
1420 [[audits.tinystr]]
1421 who = "Zibi Braniecki <zibi@unicode.org>"
1422 criteria = "safe-to-deploy"
1423 version = "0.3.4"
1424
1425 [[audits.tinystr]]
1426 who = "Zibi Braniecki <zibi@unicode.org>"
1427 criteria = "safe-to-deploy"
1428 version = "0.6.0"
1429
1430 [[audits.tinystr]]
1431 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1432 criteria = "safe-to-deploy"
1433 version = "0.7.0"
1434 notes = "One of original auther was Zibi Braniecki who worked at Mozilla and maintained by ICU4X developers (Google and Mozilla). I've vetted the one instance of unsafe code."
1435
1436 [[audits.topological-sort]]
1437 who = "Bobby Holley <bobbyholley@gmail.com>"
1438 criteria = "safe-to-deploy"
1439 version = "0.1.0"
1440 notes = "Simple algorithm crate with no unsafe code or capability usage."
1441
1442 [[audits.tower-service]]
1443 who = "Mike Hommey <mh+mozilla@glandium.org>"
1444 criteria = "safe-to-run"
1445 delta = "0.3.1 -> 0.3.2"
1446
1447 [[audits.tracing]]
1448 who = "Mike Hommey <mh+mozilla@glandium.org>"
1449 criteria = "safe-to-run"
1450 delta = "0.1.35 -> 0.1.36"
1451
1452 [[audits.tracing-attributes]]
1453 who = "Mike Hommey <mh+mozilla@glandium.org>"
1454 criteria = "safe-to-run"
1455 delta = "0.1.21 -> 0.1.22"
1456
1457 [[audits.tracing-core]]
1458 who = "Mike Hommey <mh+mozilla@glandium.org>"
1459 criteria = "safe-to-run"
1460 delta = "0.1.27 -> 0.1.29"
1461
1462 [[audits.tracy-rs]]
1463 who = "Glenn Watson <git@intuitionlibrary.com>"
1464 criteria = "safe-to-deploy"
1465 version = "0.1.2"
1466
1467 [[audits.typed-arena-nomut]]
1468 who = "Lee Salzman <lsalzman@gmail.com>"
1469 criteria = "safe-to-deploy"
1470 version = "0.1.0"
1471
1472 [[audits.uluru]]
1473 who = "Emilio Cobos Álvarez <emilio@crisal.io>"
1474 criteria = "safe-to-deploy"
1475 version = "3.0.0"
1476 notes = """
1477 I've reviewed multiple patches in this crate, including the initial
1478 implementation back in the day. It has no unsafe code at all nowadays.
1479 """
1480
1481 [[audits.unic-langid]]
1482 who = "Zibi Braniecki <zibi@unicode.org>"
1483 criteria = "safe-to-deploy"
1484 version = "0.9.0"
1485
1486 [[audits.unic-langid-impl]]
1487 who = "Zibi Braniecki <zibi@unicode.org>"
1488 criteria = "safe-to-deploy"
1489 version = "0.9.0"
1490
1491 [[audits.unic-langid-impl]]
1492 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1493 criteria = "safe-to-deploy"
1494 delta = "0.9.0 -> 0.9.1"
1495
1496 [[audits.unic-langid-macros]]
1497 who = "Zibi Braniecki <zibi@unicode.org>"
1498 criteria = "safe-to-deploy"
1499 version = "0.9.0"
1500
1501 [[audits.unic-langid-macros]]
1502 who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
1503 criteria = "safe-to-deploy"
1504 delta = "0.9.0 -> 0.9.1"
1505
1506 [[audits.unic-langid-macros-impl]]
1507 who = "Zibi Braniecki <zibi@unicode.org>"
1508 criteria = "safe-to-deploy"
1509 version = "0.9.0"
1510
1511 [[audits.unicode-ident]]
1512 who = "Mike Hommey <mh+mozilla@glandium.org>"
1513 criteria = "safe-to-deploy"
1514 delta = "1.0.0 -> 1.0.1"
1515
1516 [[audits.unicode-ident]]
1517 who = "Mike Hommey <mh+mozilla@glandium.org>"
1518 criteria = "safe-to-deploy"
1519 delta = "1.0.1 -> 1.0.3"
1520
1521 [[audits.unicode-normalization]]
1522 who = "Mike Hommey <mh+mozilla@glandium.org>"
1523 criteria = "safe-to-deploy"
1524 delta = "0.1.19 -> 0.1.20"
1525 notes = "I am the author of most of these changes upstream, and prepared the release myself, at which point I looked at the other changes since 0.1.19."
1526
1527 [[audits.unicode-normalization]]
1528 who = "Mike Hommey <mh+mozilla@glandium.org>"
1529 criteria = "safe-to-deploy"
1530 delta = "0.1.20 -> 0.1.21"
1531
1532 [[audits.uniffi]]
1533 who = "Travis Long <tlong@mozilla.com>"
1534 criteria = "safe-to-deploy"
1535 version = "0.19.3"
1536 notes = "Maintained by the Glean and Application Services teams"
1537
1538 [[audits.uniffi]]
1539 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1540 criteria = "safe-to-deploy"
1541 delta = "0.19.3 -> 0.19.6"
1542 notes = "Maintained by the Glean and Application Services team."
1543
1544 [[audits.uniffi]]
1545 who = "Perry McManis <pmcmanis@mozilla.com>"
1546 criteria = "safe-to-deploy"
1547 delta = "0.19.6 -> 0.20.0"
1548
1549 [[audits.uniffi]]
1550 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1551 criteria = "safe-to-deploy"
1552 delta = "0.20.0 -> 0.21.0"
1553 notes = "Maintained by the Glean and Application Services team."
1554
1555 [[audits.uniffi]]
1556 who = "Mike Hommey <mh+mozilla@glandium.org>"
1557 criteria = "safe-to-deploy"
1558 delta = "0.21.0 -> 0.21.1"
1559 notes = "No changes."
1560
1561 [[audits.uniffi_bindgen]]
1562 who = "Travis Long <tlong@mozilla.com>"
1563 criteria = "safe-to-deploy"
1564 version = "0.19.3"
1565 notes = "Maintained by the Glean and Application Services teams."
1566
1567 [[audits.uniffi_bindgen]]
1568 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1569 criteria = "safe-to-deploy"
1570 delta = "0.19.3 -> 0.19.6"
1571 notes = "Maintained by the Glean and Application Services team."
1572
1573 [[audits.uniffi_bindgen]]
1574 who = "Perry McManis <pmcmanis@mozilla.com>"
1575 criteria = "safe-to-deploy"
1576 delta = "0.19.6 -> 0.20.0"
1577
1578 [[audits.uniffi_bindgen]]
1579 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1580 criteria = "safe-to-deploy"
1581 delta = "0.20.0 -> 0.21.0"
1582 notes = "Maintained by the Glean and Application Services team."
1583
1584 [[audits.uniffi_bindgen]]
1585 who = "Mike Hommey <mh+mozilla@glandium.org>"
1586 criteria = "safe-to-deploy"
1587 delta = "0.21.0 -> 0.21.1"
1588 notes = "I authored the changes in this version."
1589
1590 [[audits.uniffi_build]]
1591 who = "Travis Long <tlong@mozilla.com>"
1592 criteria = "safe-to-deploy"
1593 version = "0.19.3"
1594 notes = "Maintained by the Glean and Application Services teams."
1595
1596 [[audits.uniffi_build]]
1597 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1598 criteria = "safe-to-deploy"
1599 delta = "0.19.3 -> 0.19.6"
1600 notes = "Maintained by the Glean and Application Services team."
1601
1602 [[audits.uniffi_build]]
1603 who = "Perry McManis <pmcmanis@mozilla.com>"
1604 criteria = "safe-to-deploy"
1605 delta = "0.19.6 -> 0.20.0"
1606
1607 [[audits.uniffi_build]]
1608 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1609 criteria = "safe-to-deploy"
1610 delta = "0.20.0 -> 0.21.0"
1611 notes = "Maintained by the Glean and Application Services team."
1612
1613 [[audits.uniffi_build]]
1614 who = "Mike Hommey <mh+mozilla@glandium.org>"
1615 criteria = "safe-to-deploy"
1616 delta = "0.21.0 -> 0.21.1"
1617 notes = "No changes."
1618
1619 [[audits.uniffi_checksum_derive]]
1620 who = "Mike Hommey <mh+mozilla@glandium.org>"
1621 criteria = "safe-to-deploy"
1622 version = "0.21.1"
1623 notes = "I authored this crate."
1624
1625 [[audits.uniffi_macros]]
1626 who = "Travis Long <tlong@mozilla.com>"
1627 criteria = "safe-to-deploy"
1628 version = "0.19.3"
1629 notes = "Maintained by the Glean and Application Services teams."
1630
1631 [[audits.uniffi_macros]]
1632 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1633 criteria = "safe-to-deploy"
1634 delta = "0.19.3 -> 0.19.6"
1635 notes = "Maintained by the Glean and Application Services team."
1636
1637 [[audits.uniffi_macros]]
1638 who = "Perry McManis <pmcmanis@mozilla.com>"
1639 criteria = "safe-to-deploy"
1640 delta = "0.19.6 -> 0.20.0"
1641
1642 [[audits.uniffi_macros]]
1643 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1644 criteria = "safe-to-deploy"
1645 delta = "0.20.0 -> 0.21.0"
1646 notes = "Maintained by the Glean and Application Services team."
1647
1648 [[audits.uniffi_macros]]
1649 who = "Mike Hommey <mh+mozilla@glandium.org>"
1650 criteria = "safe-to-deploy"
1651 delta = "0.21.0 -> 0.21.1"
1652 notes = "No changes."
1653
1654 [[audits.uniffi_meta]]
1655 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1656 criteria = "safe-to-deploy"
1657 version = "0.19.6"
1658 notes = "Maintained by the Glean and Application Services team."
1659
1660 [[audits.uniffi_meta]]
1661 who = "Perry McManis <pmcmanis@mozilla.com>"
1662 criteria = "safe-to-deploy"
1663 delta = "0.19.6 -> 0.20.0"
1664
1665 [[audits.uniffi_meta]]
1666 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1667 criteria = "safe-to-deploy"
1668 delta = "0.20.0 -> 0.21.0"
1669 notes = "Maintained by the Glean and Application Services team."
1670
1671 [[audits.uniffi_meta]]
1672 who = "Mike Hommey <mh+mozilla@glandium.org>"
1673 criteria = "safe-to-deploy"
1674 delta = "0.21.0 -> 0.21.1"
1675 notes = "I authored the changes in this version."
1676
1677 [[audits.void]]
1678 who = "Bobby Holley <bobbyholley@gmail.com>"
1679 criteria = "safe-to-deploy"
1680 version = "1.0.2"
1681 notes = "Very small crate, just hosts the Void type for easier cross-crate interfacing."
1682
1683 [[audits.wasm-encoder]]
1684 who = "Ryan Hunt <rhunt@eqrion.net>"
1685 criteria = "safe-to-deploy"
1686 version = "0.7.0"
1687 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. This has no unsafe code and uses no ambient capabilities."
1688
1689 [[audits.wasm-encoder]]
1690 who = "Ryan Hunt <rhunt@eqrion.net>"
1691 criteria = "safe-to-deploy"
1692 delta = "0.7.0 -> 0.14.0"
1693 notes = "wasm-encoder has no unsafe code and uses no ambient capabilities."
1694
1695 [[audits.wasm-encoder]]
1696 who = "Yury Delendik <ydelendik@mozilla.com>"
1697 criteria = "safe-to-deploy"
1698 delta = "0.14.0 -> 0.15.0"
1699
1700 [[audits.wasm-encoder]]
1701 who = "Yury Delendik <ydelendik@mozilla.com>"
1702 criteria = "safe-to-deploy"
1703 delta = "0.16.0 -> 0.17.0"
1704
1705 [[audits.wasm-encoder]]
1706 who = "Ryan Hunt <rhunt@eqrion.net>"
1707 criteria = "safe-to-deploy"
1708 delta = "0.19.0 -> 0.19.1"
1709
1710 [[audits.wasm-smith]]
1711 who = "Ryan Hunt <rhunt@eqrion.net>"
1712 criteria = "safe-to-deploy"
1713 version = "0.11.2"
1714 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
1715
1716 [[audits.wasm-smith]]
1717 who = "Yury Delendik <ydelendik@mozilla.com>"
1718 criteria = "safe-to-run"
1719 delta = "0.11.2 -> 0.11.3"
1720
1721 [[audits.wasm-smith]]
1722 who = "Yury Delendik <ydelendik@mozilla.com>"
1723 criteria = "safe-to-run"
1724 delta = "0.11.4 -> 0.11.5"
1725
1726 [[audits.wasm-smith]]
1727 who = "Ryan Hunt <rhunt@eqrion.net>"
1728 criteria = "safe-to-run"
1729 delta = "0.11.7 -> 0.11.8"
1730
1731 [[audits.wasmparser]]
1732 who = "Ryan Hunt <rhunt@eqrion.net>"
1733 criteria = "safe-to-deploy"
1734 version = "0.87.0"
1735 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. I've vetted the one instance of unsafe code."
1736
1737 [[audits.wasmparser]]
1738 who = "Yury Delendik <ydelendik@mozilla.com>"
1739 criteria = "safe-to-deploy"
1740 delta = "0.87.0 -> 0.88.0"
1741
1742 [[audits.wasmparser]]
1743 who = "Yury Delendik <ydelendik@mozilla.com>"
1744 criteria = "safe-to-deploy"
1745 delta = "0.89.1 -> 0.91.0"
1746
1747 [[audits.wasmparser]]
1748 who = "Ryan Hunt <rhunt@eqrion.net>"
1749 criteria = "safe-to-deploy"
1750 delta = "0.93.0 -> 0.94.0"
1751
1752 [[audits.wast]]
1753 who = "Ryan Hunt <rhunt@eqrion.net>"
1754 criteria = "safe-to-deploy"
1755 version = "44.0.0"
1756
1757 [[audits.wast]]
1758 who = "Ryan Hunt <rhunt@eqrion.net>"
1759 criteria = "safe-to-deploy"
1760 version = "44.0.0"
1761 notes = "Maintained by the Bytecode Alliance, with contributions from Mozilla. wast has no unsafe code and the only ambient capability it uses is to read the full contents of a file that is given to it."
1762
1763 [[audits.wast]]
1764 who = "Yury Delendik <ydelendik@mozilla.com>"
1765 criteria = "safe-to-deploy"
1766 delta = "44.0.0 -> 45.0.0"
1767
1768 [[audits.wast]]
1769 who = "Yury Delendik <ydelendik@mozilla.com>"
1770 criteria = "safe-to-deploy"
1771 delta = "46.0.0 -> 47.0.0"
1772
1773 [[audits.wast]]
1774 who = "Ryan Hunt <rhunt@eqrion.net>"
1775 criteria = "safe-to-deploy"
1776 delta = "48.0.0 -> 49.0.0"
1777
1778 [[audits.webdriver]]
1779 who = "Henrik Skupin <mail@hskupin.info>"
1780 criteria = "safe-to-deploy"
1781 version = "0.46.0"
1782 notes = "Maintained by the DevTools team at Mozilla and has no unsafe code."
1783
1784 [[audits.weedle2]]
1785 who = "Travis Long <tlong@mozilla.com>"
1786 criteria = "safe-to-deploy"
1787 version = "3.0.0"
1788 notes = "Maintained by the Glean and Application Services teams."
1789
1790 [[audits.weedle2]]
1791 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1792 criteria = "safe-to-deploy"
1793 delta = "3.0.0 -> 4.0.0"
1794 notes = "Maintained by the Glean and Application Services team."
1795
1796 [[audits.wgpu-core]]
1797 who = "Dzmitry Malyshau <kvark@fastmail.com>"
1798 criteria = "safe-to-deploy"
1799 version = "0.12.0"
1800 notes = """
1801 This crate, up through the indicated version, was written or reviewed
1802 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
1803 Mozilla at the beginning of February 2022. This audit statement was
1804 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
1805 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
1806 """
1807
1808 [[audits.wgpu-core]]
1809 who = "Jim Blandy <jimb@mozilla.com>"
1810 criteria = "safe-to-deploy"
1811 delta = "0.12.0 -> 0.13.0"
1812
1813 [[audits.wgpu-core]]
1814 who = "Jim Blandy <jimb@red-bean.com>"
1815 criteria = "safe-to-deploy"
1816 delta = "0.13.0 -> 0.14.0"
1817 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
1818
1819 [[audits.wgpu-hal]]
1820 who = "Dzmitry Malyshau <kvark@fastmail.com>"
1821 criteria = "safe-to-deploy"
1822 version = "0.12.0"
1823 notes = """
1824 This crate, up through the indicated version, was written or reviewed
1825 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
1826 Mozilla at the beginning of February 2022. This audit statement was
1827 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
1828 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
1829 """
1830
1831 [[audits.wgpu-hal]]
1832 who = "Jim Blandy <jimb@mozilla.com>"
1833 criteria = "safe-to-deploy"
1834 delta = "0.12.0 -> 0.13.0"
1835
1836 [[audits.wgpu-hal]]
1837 who = "Jim Blandy <jimb@red-bean.com>"
1838 criteria = "safe-to-deploy"
1839 delta = "0.13.0 -> 0.14.0"
1840 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
1841
1842 [[audits.wgpu-types]]
1843 who = "Dzmitry Malyshau <kvark@fastmail.com>"
1844 criteria = "safe-to-deploy"
1845 version = "0.12.0"
1846 notes = """
1847 This crate, up through the indicated version, was written or reviewed
1848 by Dzmitry Malyshau while he was a Mozilla employee. Dzmitry left
1849 Mozilla at the beginning of February 2022. This audit statement was
1850 collected by Jim Blandy, a Mozilla employee, over email in July 2022:
1851 Dzmitry was shown, and agreed to, the 'safe-to-deploy' text.
1852 """
1853
1854 [[audits.wgpu-types]]
1855 who = "Jim Blandy <jimb@mozilla.com>"
1856 criteria = "safe-to-deploy"
1857 delta = "0.12.0 -> 0.13.0"
1858
1859 [[audits.wgpu-types]]
1860 who = "Jim Blandy <jimb@red-bean.com>"
1861 criteria = "safe-to-deploy"
1862 delta = "0.13.0 -> 0.14.0"
1863 notes = "Audit by Erich Gubler, Jim Blandy, Nicolas Silva, and Teodor Tanasoaia."
1864
1865 [[audits.whatsys]]
1866 who = "Bobby Holley <bobbyholley@gmail.com>"
1867 criteria = "safe-to-deploy"
1868 version = "0.1.2"
1869 notes = """
1870 Contains platform-specific FFI code for apple, mac, and windows. The windows code
1871 also contains a small C file compiled at build-time. I audited all of it and it
1872 looks correct.
1873 """
1874
1875 [[audits.wpf-gpu-raster]]
1876 who = "Lee Salzman <lsalzman@mozilla.com>"
1877 criteria = "safe-to-deploy"
1878 version = "0.1.0"
1879 notes = "Written and maintained by Gfx team at Mozilla."
1880
1881 [[audits.xmldecl]]
1882 who = "Henri Sivonen <hsivonen@hsivonen.fi>"
1883 criteria = "safe-to-deploy"
1884 version = "0.2.0"
1885 notes = "I, Henri Sivonen, wrote this crate myself for Gecko even though it's published on crates.io."