supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "0.7.20"
   6 when = "2022-11-22"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.arbitrary]]
  12 version = "1.3.0"
  13 when = "2023-03-13"
  14 user-id = 696
  15 user-login = "fitzgen"
  16 user-name = "Nick Fitzgerald"
  17
  18 [[publisher.async-trait]]
  19 version = "0.1.68"
  20 when = "2023-03-24"
  21 user-id = 3618
  22 user-login = "dtolnay"
  23 user-name = "David Tolnay"
  24
  25 [[publisher.atomic]]
  26 version = "0.4.6"
  27 when = "2020-07-05"
  28 user-id = 2915
  29 user-login = "Amanieu"
  30 user-name = "Amanieu d'Antras"
  31
  32 [[publisher.audio_thread_priority]]
  33 version = "0.26.1"
  34 when = "2022-03-22"
  35 user-id = 1258
  36 user-login = "padenot"
  37 user-name = "Paul Adenot"
  38
  39 [[publisher.authenticator]]
  40 version = "0.4.0-alpha.15"
  41 when = "2023-05-15"
  42 user-id = 175410
  43 user-login = "jschanck"
  44 user-name = "John Schanck"
  45
  46 [[publisher.bhttp]]
  47 version = "0.3.1"
  48 when = "2023-02-23"
  49 user-id = 128763
  50 user-login = "martinthomson"
  51 user-name = "Martin Thomson"
  52
  53 [[publisher.byteorder]]
  54 version = "1.4.3"
  55 when = "2021-03-10"
  56 user-id = 189
  57 user-login = "BurntSushi"
  58 user-name = "Andrew Gallant"
  59
  60 [[publisher.bytes]]
  61 version = "1.4.0"
  62 when = "2023-01-31"
  63 user-id = 6741
  64 user-login = "Darksonn"
  65 user-name = "Alice Ryhl"
  66
  67 [[publisher.cexpr]]
  68 version = "0.6.0"
  69 when = "2021-10-11"
  70 user-id = 3788
  71 user-login = "emilio"
  72 user-name = "Emilio Cobos Álvarez"
  73
  74 [[publisher.clap]]
  75 version = "4.1.14"
  76 when = "2023-03-28"
  77 user-id = 6743
  78 user-login = "epage"
  79 user-name = "Ed Page"
  80
  81 [[publisher.clap_builder]]
  82 version = "4.1.14"
  83 when = "2023-03-28"
  84 user-id = 6743
  85 user-login = "epage"
  86 user-name = "Ed Page"
  87
  88 [[publisher.clap_derive]]
  89 version = "4.1.14"
  90 when = "2023-03-28"
  91 user-id = 6743
  92 user-login = "epage"
  93 user-name = "Ed Page"
  94
  95 [[publisher.clap_lex]]
  96 version = "0.4.1"
  97 when = "2023-03-28"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.core-foundation]]
 103 version = "0.9.3"
 104 when = "2022-02-07"
 105 user-id = 5946
 106 user-login = "jrmuizel"
 107 user-name = "Jeff Muizelaar"
 108
 109 [[publisher.core-foundation-sys]]
 110 version = "0.8.3"
 111 when = "2021-10-12"
 112 user-id = 2396
 113 user-login = "jdm"
 114 user-name = "Josh Matthews"
 115
 116 [[publisher.core-graphics]]
 117 version = "0.22.3"
 118 when = "2021-11-02"
 119 user-id = 5946
 120 user-login = "jrmuizel"
 121 user-name = "Jeff Muizelaar"
 122
 123 [[publisher.core-graphics-types]]
 124 version = "0.1.1"
 125 when = "2020-09-15"
 126 user-id = 2396
 127 user-login = "jdm"
 128 user-name = "Josh Matthews"
 129
 130 [[publisher.core-text]]
 131 version = "19.2.0"
 132 when = "2021-02-14"
 133 user-id = 5946
 134 user-login = "jrmuizel"
 135 user-name = "Jeff Muizelaar"
 136
 137 [[publisher.derive_arbitrary]]
 138 version = "1.3.0"
 139 when = "2023-03-13"
 140 user-id = 696
 141 user-login = "fitzgen"
 142 user-name = "Nick Fitzgerald"
 143
 144 [[publisher.dogear]]
 145 version = "0.4.0"
 146 when = "2019-09-16"
 147 user-id = 27901
 148 user-login = "linabutler"
 149 user-name = "Lina Butler"
 150
 151 [[publisher.dtoa]]
 152 version = "0.4.8"
 153 when = "2021-03-29"
 154 user-id = 3618
 155 user-login = "dtolnay"
 156 user-name = "David Tolnay"
 157
 158 [[publisher.etagere]]
 159 version = "0.2.7"
 160 when = "2022-05-04"
 161 user-id = 1281
 162 user-login = "nical"
 163 user-name = "Nicolas Silva"
 164
 165 [[publisher.euclid]]
 166 version = "0.22.7"
 167 when = "2022-04-04"
 168 user-id = 1281
 169 user-login = "nical"
 170 user-name = "Nicolas Silva"
 171
 172 [[publisher.flate2]]
 173 version = "1.0.24"
 174 when = "2022-05-28"
 175 user-id = 4333
 176 user-login = "joshtriplett"
 177 user-name = "Josh Triplett"
 178
 179 [[publisher.freetype]]
 180 version = "0.7.0"
 181 when = "2020-07-14"
 182 user-id = 2396
 183 user-login = "jdm"
 184 user-name = "Josh Matthews"
 185
 186 [[publisher.gleam]]
 187 version = "0.15.0"
 188 when = "2023-04-21"
 189 user-id = 5946
 190 user-login = "jrmuizel"
 191 user-name = "Jeff Muizelaar"
 192
 193 [[publisher.glean]]
 194 version = "53.0.0"
 195 when = "2023-06-07"
 196 user-id = 48
 197 user-login = "badboy"
 198 user-name = "Jan-Erik Rediger"
 199
 200 [[publisher.glean-core]]
 201 version = "53.0.0"
 202 when = "2023-06-07"
 203 user-id = 48
 204 user-login = "badboy"
 205 user-name = "Jan-Erik Rediger"
 206
 207 [[publisher.glslopt]]
 208 version = "0.1.9"
 209 when = "2021-03-17"
 210 user-id = 84794
 211 user-login = "jamienicol"
 212 user-name = "Jamie Nicol"
 213
 214 [[publisher.headers]]
 215 version = "0.3.8"
 216 when = "2022-09-02"
 217 user-id = 359
 218 user-login = "seanmonstar"
 219 user-name = "Sean McArthur"
 220
 221 [[publisher.httparse]]
 222 version = "1.8.0"
 223 when = "2022-08-30"
 224 user-id = 359
 225 user-login = "seanmonstar"
 226 user-name = "Sean McArthur"
 227
 228 [[publisher.indexmap]]
 229 version = "1.9.2"
 230 when = "2022-11-17"
 231 user-id = 539
 232 user-login = "cuviper"
 233 user-name = "Josh Stone"
 234
 235 [[publisher.inherent]]
 236 version = "1.0.7"
 237 when = "2023-03-25"
 238 user-id = 3618
 239 user-login = "dtolnay"
 240 user-name = "David Tolnay"
 241
 242 [[publisher.iovec]]
 243 version = "0.1.4"
 244 when = "2019-10-09"
 245 user-id = 10
 246 user-login = "carllerche"
 247 user-name = "Carl Lerche"
 248
 249 [[publisher.itoa]]
 250 version = "1.0.5"
 251 when = "2022-12-17"
 252 user-id = 3618
 253 user-login = "dtolnay"
 254 user-name = "David Tolnay"
 255
 256 [[publisher.jobserver]]
 257 version = "0.1.25"
 258 when = "2022-09-23"
 259 user-id = 1
 260 user-login = "alexcrichton"
 261 user-name = "Alex Crichton"
 262
 263 [[publisher.libc]]
 264 version = "0.2.132"
 265 when = "2022-08-16"
 266 user-id = 2915
 267 user-login = "Amanieu"
 268 user-name = "Amanieu d'Antras"
 269
 270 [[publisher.lock_api]]
 271 version = "0.4.9"
 272 when = "2022-09-20"
 273 user-id = 2915
 274 user-login = "Amanieu"
 275 user-name = "Amanieu d'Antras"
 276
 277 [[publisher.memchr]]
 278 version = "2.5.0"
 279 when = "2022-04-30"
 280 user-id = 189
 281 user-login = "BurntSushi"
 282 user-name = "Andrew Gallant"
 283
 284 [[publisher.mime]]
 285 version = "0.3.16"
 286 when = "2020-01-07"
 287 user-id = 359
 288 user-login = "seanmonstar"
 289 user-name = "Sean McArthur"
 290
 291 [[publisher.mio]]
 292 version = "0.6.21"
 293 when = "2019-11-27"
 294 user-id = 10
 295 user-login = "carllerche"
 296 user-name = "Carl Lerche"
 297
 298 [[publisher.num_cpus]]
 299 version = "1.15.0"
 300 when = "2022-12-20"
 301 user-id = 359
 302 user-login = "seanmonstar"
 303 user-name = "Sean McArthur"
 304
 305 [[publisher.ohttp]]
 306 version = "0.3.1"
 307 when = "2023-02-23"
 308 user-id = 128763
 309 user-login = "martinthomson"
 310 user-name = "Martin Thomson"
 311
 312 [[publisher.ordered-float]]
 313 version = "3.4.0"
 314 when = "2022-11-06"
 315 user-id = 2017
 316 user-login = "mbrubeck"
 317 user-name = "Matt Brubeck"
 318
 319 [[publisher.parking_lot]]
 320 version = "0.11.2"
 321 when = "2021-08-27"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.parking_lot_core]]
 327 version = "0.8.6"
 328 when = "2022-12-12"
 329 user-id = 2915
 330 user-login = "Amanieu"
 331 user-name = "Amanieu d'Antras"
 332
 333 [[publisher.paste]]
 334 version = "1.0.11"
 335 when = "2022-12-17"
 336 user-id = 3618
 337 user-login = "dtolnay"
 338 user-name = "David Tolnay"
 339
 340 [[publisher.prio]]
 341 version = "0.12.0"
 342 when = "2023-03-22"
 343 user-id = 101233
 344 user-login = "le-automaton"
 345
 346 [[publisher.proc-macro-hack]]
 347 version = "0.5.20+deprecated"
 348 when = "2022-12-19"
 349 user-id = 3618
 350 user-login = "dtolnay"
 351 user-name = "David Tolnay"
 352
 353 [[publisher.proc-macro2]]
 354 version = "1.0.59"
 355 when = "2023-05-25"
 356 user-id = 3618
 357 user-login = "dtolnay"
 358 user-name = "David Tolnay"
 359
 360 [[publisher.quote]]
 361 version = "1.0.28"
 362 when = "2023-05-25"
 363 user-id = 3618
 364 user-login = "dtolnay"
 365 user-name = "David Tolnay"
 366
 367 [[publisher.regex]]
 368 version = "1.7.1"
 369 when = "2023-01-09"
 370 user-id = 189
 371 user-login = "BurntSushi"
 372 user-name = "Andrew Gallant"
 373
 374 [[publisher.regex-syntax]]
 375 version = "0.6.28"
 376 when = "2022-11-05"
 377 user-id = 189
 378 user-login = "BurntSushi"
 379 user-name = "Andrew Gallant"
 380
 381 [[publisher.rust_cascade]]
 382 version = "1.5.0"
 383 when = "2023-04-05"
 384 user-id = 57462
 385 user-login = "mozkeeler"
 386 user-name = "Dana Keeler"
 387
 388 [[publisher.ryu]]
 389 version = "1.0.12"
 390 when = "2022-12-17"
 391 user-id = 3618
 392 user-login = "dtolnay"
 393 user-name = "David Tolnay"
 394
 395 [[publisher.same-file]]
 396 version = "1.0.6"
 397 when = "2020-01-11"
 398 user-id = 189
 399 user-login = "BurntSushi"
 400 user-name = "Andrew Gallant"
 401
 402 [[publisher.scopeguard]]
 403 version = "1.1.0"
 404 when = "2020-02-16"
 405 user-id = 2915
 406 user-login = "Amanieu"
 407 user-name = "Amanieu d'Antras"
 408
 409 [[publisher.serde]]
 410 version = "1.0.163"
 411 when = "2023-05-11"
 412 user-id = 3618
 413 user-login = "dtolnay"
 414 user-name = "David Tolnay"
 415
 416 [[publisher.serde_bytes]]
 417 version = "0.11.9"
 418 when = "2023-02-05"
 419 user-id = 3618
 420 user-login = "dtolnay"
 421 user-name = "David Tolnay"
 422
 423 [[publisher.serde_derive]]
 424 version = "1.0.163"
 425 when = "2023-05-10"
 426 user-id = 3618
 427 user-login = "dtolnay"
 428 user-name = "David Tolnay"
 429
 430 [[publisher.serde_json]]
 431 version = "1.0.93"
 432 when = "2023-02-08"
 433 user-id = 3618
 434 user-login = "dtolnay"
 435 user-name = "David Tolnay"
 436
 437 [[publisher.serde_repr]]
 438 version = "0.1.12"
 439 when = "2023-03-18"
 440 user-id = 3618
 441 user-login = "dtolnay"
 442 user-name = "David Tolnay"
 443
 444 [[publisher.serde_yaml]]
 445 version = "0.8.26"
 446 when = "2022-07-16"
 447 user-id = 3618
 448 user-login = "dtolnay"
 449 user-name = "David Tolnay"
 450
 451 [[publisher.smallvec]]
 452 version = "1.10.0"
 453 when = "2022-10-02"
 454 user-id = 2017
 455 user-login = "mbrubeck"
 456 user-name = "Matt Brubeck"
 457
 458 [[publisher.syn]]
 459 version = "1.0.107"
 460 when = "2022-12-18"
 461 user-id = 3618
 462 user-login = "dtolnay"
 463 user-name = "David Tolnay"
 464
 465 [[publisher.syn]]
 466 version = "2.0.18"
 467 when = "2023-05-26"
 468 user-id = 3618
 469 user-login = "dtolnay"
 470 user-name = "David Tolnay"
 471
 472 [[publisher.termcolor]]
 473 version = "1.2.0"
 474 when = "2023-01-15"
 475 user-id = 189
 476 user-login = "BurntSushi"
 477 user-name = "Andrew Gallant"
 478
 479 [[publisher.threadbound]]
 480 version = "0.1.5"
 481 when = "2022-12-17"
 482 user-id = 3618
 483 user-login = "dtolnay"
 484 user-name = "David Tolnay"
 485
 486 [[publisher.tokio-util]]
 487 version = "0.7.2"
 488 when = "2022-05-15"
 489 user-id = 6741
 490 user-login = "Darksonn"
 491 user-name = "Alice Ryhl"
 492
 493 [[publisher.toml]]
 494 version = "0.5.7"
 495 when = "2020-10-11"
 496 user-id = 1
 497 user-login = "alexcrichton"
 498 user-name = "Alex Crichton"
 499
 500 [[publisher.unicode-ident]]
 501 version = "1.0.6"
 502 when = "2022-12-17"
 503 user-id = 3618
 504 user-login = "dtolnay"
 505 user-name = "David Tolnay"
 506
 507 [[publisher.unicode-segmentation]]
 508 version = "1.10.0"
 509 when = "2022-09-13"
 510 user-id = 1139
 511 user-login = "Manishearth"
 512 user-name = "Manish Goregaokar"
 513
 514 [[publisher.unicode-width]]
 515 version = "0.1.10"
 516 when = "2022-09-13"
 517 user-id = 1139
 518 user-login = "Manishearth"
 519 user-name = "Manish Goregaokar"
 520
 521 [[publisher.unicode-xid]]
 522 version = "0.2.4"
 523 when = "2022-09-15"
 524 user-id = 1139
 525 user-login = "Manishearth"
 526 user-name = "Manish Goregaokar"
 527
 528 [[publisher.walkdir]]
 529 version = "2.3.2"
 530 when = "2021-03-22"
 531 user-id = 189
 532 user-login = "BurntSushi"
 533 user-name = "Andrew Gallant"
 534
 535 [[publisher.warp]]
 536 version = "0.3.3"
 537 when = "2022-09-27"
 538 user-id = 359
 539 user-login = "seanmonstar"
 540 user-name = "Sean McArthur"
 541
 542 [[publisher.wasi]]
 543 version = "0.11.0+wasi-snapshot-preview1"
 544 when = "2022-01-19"
 545 user-id = 1
 546 user-login = "alexcrichton"
 547 user-name = "Alex Crichton"
 548
 549 [[publisher.winapi-util]]
 550 version = "0.1.5"
 551 when = "2020-04-20"
 552 user-id = 189
 553 user-login = "BurntSushi"
 554 user-name = "Andrew Gallant"
 555
 556 [[publisher.zeitstempel]]
 557 version = "0.1.1"
 558 when = "2021-03-18"
 559 user-id = 48
 560 user-login = "badboy"
 561 user-name = "Jan-Erik Rediger"
 562
 563 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 564 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 565 criteria = "safe-to-deploy"
 566 user-id = 696 # Nick Fitzgerald (fitzgen)
 567 start = "2020-01-14"
 568 end = "2024-04-21"
 569 notes = "I am an author of this crate."
 570
 571 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 572 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 573 criteria = "safe-to-deploy"
 574 user-id = 696 # Nick Fitzgerald (fitzgen)
 575 start = "2020-01-14"
 576 end = "2024-04-27"
 577 notes = "I am an author of this crate"
 578
 579 [[audits.bytecode-alliance.audits.arrayref]]
 580 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 581 criteria = "safe-to-deploy"
 582 version = "0.3.6"
 583 notes = """
 584 Unsafe code, but its logic looks good to me. Necessary given what it is
 585 doing. Well tested, has quickchecks.
 586 """
 587
 588 [[audits.bytecode-alliance.audits.arrayvec]]
 589 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 590 criteria = "safe-to-deploy"
 591 version = "0.7.2"
 592 notes = """
 593 Well documented invariants, good assertions for those invariants in unsafe code,
 594 and tested with MIRI to boot. LGTM.
 595 """
 596
 597 [[audits.bytecode-alliance.audits.base64]]
 598 who = "Pat Hickey <phickey@fastly.com>"
 599 criteria = "safe-to-deploy"
 600 version = "0.21.0"
 601 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 602
 603 [[audits.bytecode-alliance.audits.block-buffer]]
 604 who = "Benjamin Bouvier <public@benj.me>"
 605 criteria = "safe-to-deploy"
 606 delta = "0.9.0 -> 0.10.2"
 607
 608 [[audits.bytecode-alliance.audits.bumpalo]]
 609 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 610 criteria = "safe-to-deploy"
 611 version = "3.11.1"
 612 notes = "I am the author of this crate."
 613
 614 [[audits.bytecode-alliance.audits.cargo-platform]]
 615 who = "Pat Hickey <phickey@fastly.com>"
 616 criteria = "safe-to-deploy"
 617 version = "0.1.2"
 618 notes = "no build, no ambient capabilities, no unsafe"
 619
 620 [[audits.bytecode-alliance.audits.cc]]
 621 who = "Alex Crichton <alex@alexcrichton.com>"
 622 criteria = "safe-to-deploy"
 623 version = "1.0.73"
 624 notes = "I am the author of this crate."
 625
 626 [[audits.bytecode-alliance.audits.cfg-if]]
 627 who = "Alex Crichton <alex@alexcrichton.com>"
 628 criteria = "safe-to-deploy"
 629 version = "1.0.0"
 630 notes = "I am the author of this crate."
 631
 632 [[audits.bytecode-alliance.audits.codespan-reporting]]
 633 who = "Jamey Sharp <jsharp@fastly.com>"
 634 criteria = "safe-to-deploy"
 635 version = "0.11.1"
 636 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 637
 638 [[audits.bytecode-alliance.audits.crypto-common]]
 639 who = "Benjamin Bouvier <public@benj.me>"
 640 criteria = "safe-to-deploy"
 641 version = "0.1.3"
 642
 643 [[audits.bytecode-alliance.audits.foreign-types]]
 644 who = "Pat Hickey <phickey@fastly.com>"
 645 criteria = "safe-to-deploy"
 646 version = "0.3.2"
 647 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 648
 649 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 650 who = "Pat Hickey <phickey@fastly.com>"
 651 criteria = "safe-to-deploy"
 652 version = "0.1.1"
 653
 654 [[audits.bytecode-alliance.audits.form_urlencoded]]
 655 who = "Alex Crichton <alex@alexcrichton.com>"
 656 criteria = "safe-to-deploy"
 657 version = "1.1.0"
 658 notes = """
 659 This is a small crate for working with url-encoded forms which doesn't have any
 660 more than what it says on the tin. Contains one `unsafe` block related to
 661 performance around utf-8 validation which is fairly easy to verify as correct.
 662 """
 663
 664 [[audits.bytecode-alliance.audits.futures-channel]]
 665 who = "Pat Hickey <phickey@fastly.com>"
 666 criteria = "safe-to-deploy"
 667 version = "0.3.27"
 668 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 669
 670 [[audits.bytecode-alliance.audits.futures-core]]
 671 who = "Pat Hickey <phickey@fastly.com>"
 672 criteria = "safe-to-deploy"
 673 version = "0.3.27"
 674 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 675
 676 [[audits.bytecode-alliance.audits.futures-executor]]
 677 who = "Pat Hickey <phickey@fastly.com>"
 678 criteria = "safe-to-deploy"
 679 version = "0.3.27"
 680 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 681
 682 [[audits.bytecode-alliance.audits.futures-io]]
 683 who = "Pat Hickey <phickey@fastly.com>"
 684 criteria = "safe-to-deploy"
 685 version = "0.3.27"
 686
 687 [[audits.bytecode-alliance.audits.futures-sink]]
 688 who = "Pat Hickey <phickey@fastly.com>"
 689 criteria = "safe-to-deploy"
 690 version = "0.3.27"
 691
 692 [[audits.bytecode-alliance.audits.heck]]
 693 who = "Alex Crichton <alex@alexcrichton.com>"
 694 criteria = "safe-to-deploy"
 695 version = "0.4.0"
 696 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 697
 698 [[audits.bytecode-alliance.audits.id-arena]]
 699 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 700 criteria = "safe-to-deploy"
 701 version = "2.2.1"
 702 notes = "I am the author of this crate."
 703
 704 [[audits.bytecode-alliance.audits.idna]]
 705 who = "Alex Crichton <alex@alexcrichton.com>"
 706 criteria = "safe-to-deploy"
 707 version = "0.3.0"
 708 notes = """
 709 This is a crate without unsafe code or usage of the standard library. The large
 710 size of this crate comes from the large generated unicode tables file. This
 711 crate is broadly used throughout the ecosystem and does not contain anything
 712 suspicious.
 713 """
 714
 715 [[audits.bytecode-alliance.audits.leb128]]
 716 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 717 criteria = "safe-to-deploy"
 718 version = "0.2.5"
 719 notes = "I am the author of this crate."
 720
 721 [[audits.bytecode-alliance.audits.memoffset]]
 722 who = "Alex Crichton <alex@alexcrichton.com>"
 723 criteria = "safe-to-deploy"
 724 delta = "0.7.1 -> 0.8.0"
 725 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 726
 727 [[audits.bytecode-alliance.audits.peeking_take_while]]
 728 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 729 criteria = "safe-to-deploy"
 730 version = "1.0.0"
 731 notes = "I am the author of this crate."
 732
 733 [[audits.bytecode-alliance.audits.percent-encoding]]
 734 who = "Alex Crichton <alex@alexcrichton.com>"
 735 criteria = "safe-to-deploy"
 736 version = "2.2.0"
 737 notes = """
 738 This crate is a single-file crate that does what it says on the tin. There are
 739 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
 740 as correct and otherwise this crate is good to go.
 741 """
 742
 743 [[audits.bytecode-alliance.audits.pin-utils]]
 744 who = "Pat Hickey <phickey@fastly.com>"
 745 criteria = "safe-to-deploy"
 746 version = "0.1.0"
 747
 748 [[audits.bytecode-alliance.audits.pkg-config]]
 749 who = "Pat Hickey <phickey@fastly.com>"
 750 criteria = "safe-to-deploy"
 751 version = "0.3.25"
 752 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
 753
 754 [[audits.bytecode-alliance.audits.rustc-demangle]]
 755 who = "Alex Crichton <alex@alexcrichton.com>"
 756 criteria = "safe-to-deploy"
 757 version = "0.1.21"
 758 notes = "I am the author of this crate."
 759
 760 [[audits.bytecode-alliance.audits.semver]]
 761 who = "Pat Hickey <phickey@fastly.com>"
 762 criteria = "safe-to-deploy"
 763 version = "1.0.17"
 764 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
 765
 766 [[audits.bytecode-alliance.audits.slab]]
 767 who = "Pat Hickey <phickey@fastly.com>"
 768 criteria = "safe-to-deploy"
 769 version = "0.4.6"
 770 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
 771
 772 [[audits.bytecode-alliance.audits.unicase]]
 773 who = "Alex Crichton <alex@alexcrichton.com>"
 774 criteria = "safe-to-deploy"
 775 version = "2.6.0"
 776 notes = """
 777 This crate contains no `unsafe` code and no unnecessary use of the standard
 778 library.
 779 """
 780
 781 [[audits.bytecode-alliance.audits.unicode-bidi]]
 782 who = "Alex Crichton <alex@alexcrichton.com>"
 783 criteria = "safe-to-deploy"
 784 version = "0.3.8"
 785 notes = """
 786 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
 787 does not attempt to out of the bounds of what it's already supposed to be doing.
 788 """
 789
 790 [[audits.bytecode-alliance.audits.unicode-normalization]]
 791 who = "Alex Crichton <alex@alexcrichton.com>"
 792 criteria = "safe-to-deploy"
 793 version = "0.1.19"
 794 notes = """
 795 This crate contains one usage of `unsafe` which I have manually checked to see
 796 it as correct. This crate's size comes in large part due to the generated
 797 unicode tables that it contains. This crate is additionally widely used
 798 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
 799 and nothing suspicious.
 800 """
 801
 802 [[audits.bytecode-alliance.audits.wasm-encoder]]
 803 who = "Alex Crichton <alex@alexcrichton.com>"
 804 criteria = "safe-to-deploy"
 805 version = "0.25.0"
 806 notes = "The Bytecode Alliance is the author of this crate."
 807
 808 [[audits.bytecode-alliance.audits.wasm-smith]]
 809 who = "Alex Crichton <alex@alexcrichton.com>"
 810 criteria = "safe-to-run"
 811 version = "0.12.5"
 812 notes = "The Bytecode Alliance is the author of this crate."
 813
 814 [[audits.bytecode-alliance.audits.wasmparser]]
 815 who = "Alex Crichton <alex@alexcrichton.com>"
 816 criteria = "safe-to-deploy"
 817 version = "0.102.0"
 818 notes = "The Bytecode Alliance is the author of this crate."
 819
 820 [[audits.bytecode-alliance.audits.wast]]
 821 who = "Alex Crichton <alex@alexcrichton.com>"
 822 criteria = "safe-to-deploy"
 823 version = "55.0.0"
 824 notes = "The Bytecode Alliance is the author of this crate."
 825
 826 [[audits.embark-studios.audits.anyhow]]
 827 who = "Johan Andersson <opensource@embark-studios.com>"
 828 criteria = "safe-to-deploy"
 829 version = "1.0.58"
 830
 831 [[audits.embark-studios.audits.cty]]
 832 who = "Johan Andersson <opensource@embark-studios.com>"
 833 criteria = "safe-to-deploy"
 834 version = "0.2.2"
 835 notes = "Inspected it and is a tiny crate with just type definitions"
 836
 837 [[audits.embark-studios.audits.derive_more]]
 838 who = "Johan Andersson <opensource@embark-studios.com>"
 839 criteria = "safe-to-deploy"
 840 version = "0.99.17"
 841 notes = "No unsafe usage or ambient capabilities"
 842
 843 [[audits.embark-studios.audits.ident_case]]
 844 who = "Johan Andersson <opensource@embark-studios.com>"
 845 criteria = "safe-to-deploy"
 846 version = "1.0.1"
 847 notes = "No unsafe usage or ambient capabilities"
 848
 849 [[audits.embark-studios.audits.line-wrap]]
 850 who = "Johan Andersson <opensource@embark-studios.com>"
 851 criteria = "safe-to-deploy"
 852 version = "0.1.1"
 853 notes = "No unsafe usage or ambient capabilities"
 854
 855 [[audits.embark-studios.audits.thiserror]]
 856 who = "Johan Andersson <opensource@embark-studios.com>"
 857 criteria = "safe-to-deploy"
 858 version = "1.0.40"
 859 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
 860
 861 [[audits.embark-studios.audits.thiserror-impl]]
 862 who = "Johan Andersson <opensource@embark-studios.com>"
 863 criteria = "safe-to-deploy"
 864 version = "1.0.40"
 865 notes = "Found no unsafe or ambient capabilities used"
 866
 867 [[audits.embark-studios.audits.yaml-rust]]
 868 who = "Johan Andersson <opensource@embark-studios.com>"
 869 criteria = "safe-to-deploy"
 870 version = "0.4.5"
 871 notes = "No unsafe usage or ambient capabilities"
 872
 873 [[audits.google.audits.ash]]
 874 who = "David Koloski <dkoloski@google.com>"
 875 criteria = "safe-to-deploy"
 876 version = "0.37.0+1.3.209"
 877 notes = "Reviewed on https://fxrev.dev/694269"
 878 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 879
 880 [[audits.google.audits.fastrand]]
 881 who = "George Burgess IV <gbiv@google.com>"
 882 criteria = "safe-to-deploy"
 883 version = "1.9.0"
 884 notes = """
 885 `does-not-implement-crypto` is certified because this crate explicitly says
 886 that the RNG here is not cryptographically secure.
 887 """
 888 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 889
 890 [[audits.google.audits.glob]]
 891 who = "George Burgess IV <gbiv@google.com>"
 892 criteria = "safe-to-deploy"
 893 version = "0.3.1"
 894 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 895
 896 [[audits.google.audits.h2]]
 897 who = "ChromeOS"
 898 criteria = "safe-to-run"
 899 version = "0.3.14"
 900 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 901
 902 [[audits.google.audits.http]]
 903 who = "ChromeOS"
 904 criteria = "safe-to-run"
 905 version = "0.2.8"
 906 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 907
 908 [[audits.google.audits.http-body]]
 909 who = "ChromeOS"
 910 criteria = "safe-to-run"
 911 version = "0.4.5"
 912 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 913
 914 [[audits.google.audits.httpdate]]
 915 who = "ChromeOS"
 916 criteria = "safe-to-run"
 917 version = "1.0.2"
 918 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 919
 920 [[audits.google.audits.hyper]]
 921 who = "ChromeOS"
 922 criteria = "safe-to-run"
 923 version = "0.14.20"
 924 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 925
 926 [[audits.google.audits.pin-project]]
 927 who = "ChromeOS"
 928 criteria = "safe-to-run"
 929 version = "1.0.12"
 930 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 931
 932 [[audits.google.audits.pin-project-internal]]
 933 who = "ChromeOS"
 934 criteria = "safe-to-run"
 935 version = "1.0.12"
 936 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 937
 938 [[audits.google.audits.scoped-tls]]
 939 who = "George Burgess IV <gbiv@google.com>"
 940 criteria = "safe-to-run"
 941 version = "1.0.0"
 942 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 943
 944 [[audits.google.audits.serde_urlencoded]]
 945 who = "ChromeOS"
 946 criteria = "safe-to-run"
 947 version = "0.7.1"
 948 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 949
 950 [[audits.google.audits.tokio-stream]]
 951 who = "David Koloski <dkoloski@google.com>"
 952 criteria = "safe-to-deploy"
 953 version = "0.1.11"
 954 notes = "Reviewed on https://fxrev.dev/804724"
 955 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 956
 957 [[audits.google.audits.tower-service]]
 958 who = "ChromeOS"
 959 criteria = "safe-to-run"
 960 version = "0.3.2"
 961 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 962
 963 [[audits.google.audits.tracing]]
 964 who = "ChromeOS"
 965 criteria = "safe-to-run"
 966 version = "0.1.35"
 967 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 968
 969 [[audits.google.audits.tracing-attributes]]
 970 who = "ChromeOS"
 971 criteria = "safe-to-run"
 972 version = "0.1.22"
 973 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 974
 975 [[audits.google.audits.tracing-core]]
 976 who = "ChromeOS"
 977 criteria = "safe-to-run"
 978 version = "0.1.29"
 979 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 980
 981 [[audits.google.audits.try-lock]]
 982 who = "ChromeOS"
 983 criteria = "safe-to-run"
 984 version = "0.2.3"
 985 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 986
 987 [[audits.google.audits.version_check]]
 988 who = "George Burgess IV <gbiv@google.com>"
 989 criteria = "safe-to-deploy"
 990 version = "0.9.4"
 991 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 992
 993 [[audits.google.audits.want]]
 994 who = "ChromeOS"
 995 criteria = "safe-to-run"
 996 version = "0.3.0"
 997 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 998
 999 [[audits.isrg.wildcard-audits.prio]]
1000 who = "David Cook <dcook@divviup.org>"
1001 criteria = "safe-to-deploy"
1002 user-id = 101233 # le-automaton
1003 start = "2020-09-28"
1004 end = "2024-03-23"
1005
1006 [[audits.isrg.audits.block-buffer]]
1007 who = "David Cook <dcook@divviup.org>"
1008 criteria = "safe-to-deploy"
1009 version = "0.9.0"
1010
1011 [[audits.isrg.audits.rayon-core]]
1012 who = "Brandon Pitman <bran@bran.land>"
1013 criteria = "safe-to-deploy"
1014 delta = "1.10.2 -> 1.11.0"
1015
1016 [[audits.mozilla.wildcard-audits.zeitstempel]]
1017 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1018 criteria = "safe-to-deploy"
1019 user-id = 48 # Jan-Erik Rediger (badboy)
1020 start = "2021-03-03"
1021 end = "2024-05-10"
1022 notes = "Maintained by me"
1023 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1024
1025 [[audits.mozilla.audits.either]]
1026 who = "Nika Layzell <nika@thelayzells.com>"
1027 criteria = "safe-to-deploy"
1028 version = "1.6.1"
1029 notes = """
1030 Straightforward crate providing the Either enum and trait implementations with
1031 no unsafe code.
1032 """
1033 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1034
1035 [[audits.mozilla.audits.lazy_static]]
1036 who = "Nika Layzell <nika@thelayzells.com>"
1037 criteria = "safe-to-deploy"
1038 version = "1.4.0"
1039 notes = "I have read over the macros, and audited the unsafe code."
1040 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"