supply-chain/imports.lock

   1
   2 # cargo-vet imports lock
   3
   4 [[publisher.aho-corasick]]
   5 version = "0.7.20"
   6 when = "2022-11-22"
   7 user-id = 189
   8 user-login = "BurntSushi"
   9 user-name = "Andrew Gallant"
  10
  11 [[publisher.arbitrary]]
  12 version = "1.3.0"
  13 when = "2023-03-13"
  14 user-id = 696
  15 user-login = "fitzgen"
  16 user-name = "Nick Fitzgerald"
  17
  18 [[publisher.async-trait]]
  19 version = "0.1.68"
  20 when = "2023-03-24"
  21 user-id = 3618
  22 user-login = "dtolnay"
  23 user-name = "David Tolnay"
  24
  25 [[publisher.atomic]]
  26 version = "0.4.6"
  27 when = "2020-07-05"
  28 user-id = 2915
  29 user-login = "Amanieu"
  30 user-name = "Amanieu d'Antras"
  31
  32 [[publisher.audio_thread_priority]]
  33 version = "0.26.1"
  34 when = "2022-03-22"
  35 user-id = 1258
  36 user-login = "padenot"
  37 user-name = "Paul Adenot"
  38
  39 [[publisher.authenticator]]
  40 version = "0.4.0-alpha.15"
  41 when = "2023-05-15"
  42 user-id = 175410
  43 user-login = "jschanck"
  44 user-name = "John Schanck"
  45
  46 [[publisher.bhttp]]
  47 version = "0.3.1"
  48 when = "2023-02-23"
  49 user-id = 128763
  50 user-login = "martinthomson"
  51 user-name = "Martin Thomson"
  52
  53 [[publisher.byteorder]]
  54 version = "1.4.3"
  55 when = "2021-03-10"
  56 user-id = 189
  57 user-login = "BurntSushi"
  58 user-name = "Andrew Gallant"
  59
  60 [[publisher.bytes]]
  61 version = "1.4.0"
  62 when = "2023-01-31"
  63 user-id = 6741
  64 user-login = "Darksonn"
  65 user-name = "Alice Ryhl"
  66
  67 [[publisher.cexpr]]
  68 version = "0.6.0"
  69 when = "2021-10-11"
  70 user-id = 3788
  71 user-login = "emilio"
  72 user-name = "Emilio Cobos Álvarez"
  73
  74 [[publisher.clap]]
  75 version = "4.1.14"
  76 when = "2023-03-28"
  77 user-id = 6743
  78 user-login = "epage"
  79 user-name = "Ed Page"
  80
  81 [[publisher.clap_builder]]
  82 version = "4.1.14"
  83 when = "2023-03-28"
  84 user-id = 6743
  85 user-login = "epage"
  86 user-name = "Ed Page"
  87
  88 [[publisher.clap_derive]]
  89 version = "4.1.14"
  90 when = "2023-03-28"
  91 user-id = 6743
  92 user-login = "epage"
  93 user-name = "Ed Page"
  94
  95 [[publisher.clap_lex]]
  96 version = "0.4.1"
  97 when = "2023-03-28"
  98 user-id = 6743
  99 user-login = "epage"
 100 user-name = "Ed Page"
 101
 102 [[publisher.core-foundation]]
 103 version = "0.9.3"
 104 when = "2022-02-07"
 105 user-id = 5946
 106 user-login = "jrmuizel"
 107 user-name = "Jeff Muizelaar"
 108
 109 [[publisher.core-foundation-sys]]
 110 version = "0.8.3"
 111 when = "2021-10-12"
 112 user-id = 2396
 113 user-login = "jdm"
 114 user-name = "Josh Matthews"
 115
 116 [[publisher.core-graphics]]
 117 version = "0.22.3"
 118 when = "2021-11-02"
 119 user-id = 5946
 120 user-login = "jrmuizel"
 121 user-name = "Jeff Muizelaar"
 122
 123 [[publisher.core-graphics-types]]
 124 version = "0.1.1"
 125 when = "2020-09-15"
 126 user-id = 2396
 127 user-login = "jdm"
 128 user-name = "Josh Matthews"
 129
 130 [[publisher.core-text]]
 131 version = "19.2.0"
 132 when = "2021-02-14"
 133 user-id = 5946
 134 user-login = "jrmuizel"
 135 user-name = "Jeff Muizelaar"
 136
 137 [[publisher.derive_arbitrary]]
 138 version = "1.3.0"
 139 when = "2023-03-13"
 140 user-id = 696
 141 user-login = "fitzgen"
 142 user-name = "Nick Fitzgerald"
 143
 144 [[publisher.dogear]]
 145 version = "0.4.0"
 146 when = "2019-09-16"
 147 user-id = 27901
 148 user-login = "linabutler"
 149 user-name = "Lina Butler"
 150
 151 [[publisher.dtoa]]
 152 version = "0.4.8"
 153 when = "2021-03-29"
 154 user-id = 3618
 155 user-login = "dtolnay"
 156 user-name = "David Tolnay"
 157
 158 [[publisher.etagere]]
 159 version = "0.2.7"
 160 when = "2022-05-04"
 161 user-id = 1281
 162 user-login = "nical"
 163 user-name = "Nicolas Silva"
 164
 165 [[publisher.euclid]]
 166 version = "0.22.7"
 167 when = "2022-04-04"
 168 user-id = 1281
 169 user-login = "nical"
 170 user-name = "Nicolas Silva"
 171
 172 [[publisher.flate2]]
 173 version = "1.0.24"
 174 when = "2022-05-28"
 175 user-id = 4333
 176 user-login = "joshtriplett"
 177 user-name = "Josh Triplett"
 178
 179 [[publisher.freetype]]
 180 version = "0.7.0"
 181 when = "2020-07-14"
 182 user-id = 2396
 183 user-login = "jdm"
 184 user-name = "Josh Matthews"
 185
 186 [[publisher.gleam]]
 187 version = "0.15.0"
 188 when = "2023-04-21"
 189 user-id = 5946
 190 user-login = "jrmuizel"
 191 user-name = "Jeff Muizelaar"
 192
 193 [[publisher.glean]]
 194 version = "53.0.0"
 195 when = "2023-06-07"
 196 user-id = 48
 197 user-login = "badboy"
 198 user-name = "Jan-Erik Rediger"
 199
 200 [[publisher.glean-core]]
 201 version = "53.0.0"
 202 when = "2023-06-07"
 203 user-id = 48
 204 user-login = "badboy"
 205 user-name = "Jan-Erik Rediger"
 206
 207 [[publisher.glslopt]]
 208 version = "0.1.9"
 209 when = "2021-03-17"
 210 user-id = 84794
 211 user-login = "jamienicol"
 212 user-name = "Jamie Nicol"
 213
 214 [[publisher.headers]]
 215 version = "0.3.8"
 216 when = "2022-09-02"
 217 user-id = 359
 218 user-login = "seanmonstar"
 219 user-name = "Sean McArthur"
 220
 221 [[publisher.httparse]]
 222 version = "1.8.0"
 223 when = "2022-08-30"
 224 user-id = 359
 225 user-login = "seanmonstar"
 226 user-name = "Sean McArthur"
 227
 228 [[publisher.indexmap]]
 229 version = "1.9.2"
 230 when = "2022-11-17"
 231 user-id = 539
 232 user-login = "cuviper"
 233 user-name = "Josh Stone"
 234
 235 [[publisher.inherent]]
 236 version = "1.0.7"
 237 when = "2023-03-25"
 238 user-id = 3618
 239 user-login = "dtolnay"
 240 user-name = "David Tolnay"
 241
 242 [[publisher.iovec]]
 243 version = "0.1.4"
 244 when = "2019-10-09"
 245 user-id = 10
 246 user-login = "carllerche"
 247 user-name = "Carl Lerche"
 248
 249 [[publisher.itoa]]
 250 version = "1.0.5"
 251 when = "2022-12-17"
 252 user-id = 3618
 253 user-login = "dtolnay"
 254 user-name = "David Tolnay"
 255
 256 [[publisher.jobserver]]
 257 version = "0.1.25"
 258 when = "2022-09-23"
 259 user-id = 1
 260 user-login = "alexcrichton"
 261 user-name = "Alex Crichton"
 262
 263 [[publisher.libc]]
 264 version = "0.2.132"
 265 when = "2022-08-16"
 266 user-id = 2915
 267 user-login = "Amanieu"
 268 user-name = "Amanieu d'Antras"
 269
 270 [[publisher.lock_api]]
 271 version = "0.4.9"
 272 when = "2022-09-20"
 273 user-id = 2915
 274 user-login = "Amanieu"
 275 user-name = "Amanieu d'Antras"
 276
 277 [[publisher.memchr]]
 278 version = "2.5.0"
 279 when = "2022-04-30"
 280 user-id = 189
 281 user-login = "BurntSushi"
 282 user-name = "Andrew Gallant"
 283
 284 [[publisher.mime]]
 285 version = "0.3.16"
 286 when = "2020-01-07"
 287 user-id = 359
 288 user-login = "seanmonstar"
 289 user-name = "Sean McArthur"
 290
 291 [[publisher.mio]]
 292 version = "0.6.21"
 293 when = "2019-11-27"
 294 user-id = 10
 295 user-login = "carllerche"
 296 user-name = "Carl Lerche"
 297
 298 [[publisher.num_cpus]]
 299 version = "1.15.0"
 300 when = "2022-12-20"
 301 user-id = 359
 302 user-login = "seanmonstar"
 303 user-name = "Sean McArthur"
 304
 305 [[publisher.ohttp]]
 306 version = "0.3.1"
 307 when = "2023-02-23"
 308 user-id = 128763
 309 user-login = "martinthomson"
 310 user-name = "Martin Thomson"
 311
 312 [[publisher.ordered-float]]
 313 version = "3.4.0"
 314 when = "2022-11-06"
 315 user-id = 2017
 316 user-login = "mbrubeck"
 317 user-name = "Matt Brubeck"
 318
 319 [[publisher.parking_lot]]
 320 version = "0.11.2"
 321 when = "2021-08-27"
 322 user-id = 2915
 323 user-login = "Amanieu"
 324 user-name = "Amanieu d'Antras"
 325
 326 [[publisher.parking_lot_core]]
 327 version = "0.8.6"
 328 when = "2022-12-12"
 329 user-id = 2915
 330 user-login = "Amanieu"
 331 user-name = "Amanieu d'Antras"
 332
 333 [[publisher.paste]]
 334 version = "1.0.11"
 335 when = "2022-12-17"
 336 user-id = 3618
 337 user-login = "dtolnay"
 338 user-name = "David Tolnay"
 339
 340 [[publisher.prio]]
 341 version = "0.12.1"
 342 when = "2023-04-13"
 343 user-id = 101233
 344 user-login = "le-automaton"
 345
 346 [[publisher.proc-macro2]]
 347 version = "1.0.59"
 348 when = "2023-05-25"
 349 user-id = 3618
 350 user-login = "dtolnay"
 351 user-name = "David Tolnay"
 352
 353 [[publisher.quote]]
 354 version = "1.0.28"
 355 when = "2023-05-25"
 356 user-id = 3618
 357 user-login = "dtolnay"
 358 user-name = "David Tolnay"
 359
 360 [[publisher.regex]]
 361 version = "1.7.1"
 362 when = "2023-01-09"
 363 user-id = 189
 364 user-login = "BurntSushi"
 365 user-name = "Andrew Gallant"
 366
 367 [[publisher.regex-syntax]]
 368 version = "0.6.28"
 369 when = "2022-11-05"
 370 user-id = 189
 371 user-login = "BurntSushi"
 372 user-name = "Andrew Gallant"
 373
 374 [[publisher.rust_cascade]]
 375 version = "1.5.0"
 376 when = "2023-04-05"
 377 user-id = 57462
 378 user-login = "mozkeeler"
 379 user-name = "Dana Keeler"
 380
 381 [[publisher.ryu]]
 382 version = "1.0.12"
 383 when = "2022-12-17"
 384 user-id = 3618
 385 user-login = "dtolnay"
 386 user-name = "David Tolnay"
 387
 388 [[publisher.same-file]]
 389 version = "1.0.6"
 390 when = "2020-01-11"
 391 user-id = 189
 392 user-login = "BurntSushi"
 393 user-name = "Andrew Gallant"
 394
 395 [[publisher.scopeguard]]
 396 version = "1.1.0"
 397 when = "2020-02-16"
 398 user-id = 2915
 399 user-login = "Amanieu"
 400 user-name = "Amanieu d'Antras"
 401
 402 [[publisher.serde]]
 403 version = "1.0.163"
 404 when = "2023-05-11"
 405 user-id = 3618
 406 user-login = "dtolnay"
 407 user-name = "David Tolnay"
 408
 409 [[publisher.serde_bytes]]
 410 version = "0.11.9"
 411 when = "2023-02-05"
 412 user-id = 3618
 413 user-login = "dtolnay"
 414 user-name = "David Tolnay"
 415
 416 [[publisher.serde_derive]]
 417 version = "1.0.163"
 418 when = "2023-05-10"
 419 user-id = 3618
 420 user-login = "dtolnay"
 421 user-name = "David Tolnay"
 422
 423 [[publisher.serde_json]]
 424 version = "1.0.93"
 425 when = "2023-02-08"
 426 user-id = 3618
 427 user-login = "dtolnay"
 428 user-name = "David Tolnay"
 429
 430 [[publisher.serde_repr]]
 431 version = "0.1.12"
 432 when = "2023-03-18"
 433 user-id = 3618
 434 user-login = "dtolnay"
 435 user-name = "David Tolnay"
 436
 437 [[publisher.serde_yaml]]
 438 version = "0.8.26"
 439 when = "2022-07-16"
 440 user-id = 3618
 441 user-login = "dtolnay"
 442 user-name = "David Tolnay"
 443
 444 [[publisher.smallvec]]
 445 version = "1.10.0"
 446 when = "2022-10-02"
 447 user-id = 2017
 448 user-login = "mbrubeck"
 449 user-name = "Matt Brubeck"
 450
 451 [[publisher.syn]]
 452 version = "1.0.107"
 453 when = "2022-12-18"
 454 user-id = 3618
 455 user-login = "dtolnay"
 456 user-name = "David Tolnay"
 457
 458 [[publisher.syn]]
 459 version = "2.0.18"
 460 when = "2023-05-26"
 461 user-id = 3618
 462 user-login = "dtolnay"
 463 user-name = "David Tolnay"
 464
 465 [[publisher.termcolor]]
 466 version = "1.2.0"
 467 when = "2023-01-15"
 468 user-id = 189
 469 user-login = "BurntSushi"
 470 user-name = "Andrew Gallant"
 471
 472 [[publisher.threadbound]]
 473 version = "0.1.5"
 474 when = "2022-12-17"
 475 user-id = 3618
 476 user-login = "dtolnay"
 477 user-name = "David Tolnay"
 478
 479 [[publisher.tokio-util]]
 480 version = "0.7.2"
 481 when = "2022-05-15"
 482 user-id = 6741
 483 user-login = "Darksonn"
 484 user-name = "Alice Ryhl"
 485
 486 [[publisher.toml]]
 487 version = "0.5.7"
 488 when = "2020-10-11"
 489 user-id = 1
 490 user-login = "alexcrichton"
 491 user-name = "Alex Crichton"
 492
 493 [[publisher.unicode-ident]]
 494 version = "1.0.6"
 495 when = "2022-12-17"
 496 user-id = 3618
 497 user-login = "dtolnay"
 498 user-name = "David Tolnay"
 499
 500 [[publisher.unicode-segmentation]]
 501 version = "1.10.0"
 502 when = "2022-09-13"
 503 user-id = 1139
 504 user-login = "Manishearth"
 505 user-name = "Manish Goregaokar"
 506
 507 [[publisher.unicode-width]]
 508 version = "0.1.10"
 509 when = "2022-09-13"
 510 user-id = 1139
 511 user-login = "Manishearth"
 512 user-name = "Manish Goregaokar"
 513
 514 [[publisher.unicode-xid]]
 515 version = "0.2.4"
 516 when = "2022-09-15"
 517 user-id = 1139
 518 user-login = "Manishearth"
 519 user-name = "Manish Goregaokar"
 520
 521 [[publisher.walkdir]]
 522 version = "2.3.2"
 523 when = "2021-03-22"
 524 user-id = 189
 525 user-login = "BurntSushi"
 526 user-name = "Andrew Gallant"
 527
 528 [[publisher.warp]]
 529 version = "0.3.3"
 530 when = "2022-09-27"
 531 user-id = 359
 532 user-login = "seanmonstar"
 533 user-name = "Sean McArthur"
 534
 535 [[publisher.wasi]]
 536 version = "0.11.0+wasi-snapshot-preview1"
 537 when = "2022-01-19"
 538 user-id = 1
 539 user-login = "alexcrichton"
 540 user-name = "Alex Crichton"
 541
 542 [[publisher.wasm-encoder]]
 543 version = "0.29.0"
 544 when = "2023-05-26"
 545 user-id = 1
 546 user-login = "alexcrichton"
 547 user-name = "Alex Crichton"
 548
 549 [[publisher.wasm-smith]]
 550 version = "0.12.10"
 551 when = "2023-05-26"
 552 user-id = 1
 553 user-login = "alexcrichton"
 554 user-name = "Alex Crichton"
 555
 556 [[publisher.wasmparser]]
 557 version = "0.107.0"
 558 when = "2023-05-26"
 559 user-id = 1
 560 user-login = "alexcrichton"
 561 user-name = "Alex Crichton"
 562
 563 [[publisher.wast]]
 564 version = "60.0.0"
 565 when = "2023-05-26"
 566 user-id = 1
 567 user-login = "alexcrichton"
 568 user-name = "Alex Crichton"
 569
 570 [[publisher.winapi-util]]
 571 version = "0.1.5"
 572 when = "2020-04-20"
 573 user-id = 189
 574 user-login = "BurntSushi"
 575 user-name = "Andrew Gallant"
 576
 577 [[publisher.zeitstempel]]
 578 version = "0.1.1"
 579 when = "2021-03-18"
 580 user-id = 48
 581 user-login = "badboy"
 582 user-name = "Jan-Erik Rediger"
 583
 584 [[audits.bytecode-alliance.wildcard-audits.arbitrary]]
 585 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 586 criteria = "safe-to-deploy"
 587 user-id = 696 # Nick Fitzgerald (fitzgen)
 588 start = "2020-01-14"
 589 end = "2024-04-21"
 590 notes = "I am an author of this crate."
 591
 592 [[audits.bytecode-alliance.wildcard-audits.derive_arbitrary]]
 593 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 594 criteria = "safe-to-deploy"
 595 user-id = 696 # Nick Fitzgerald (fitzgen)
 596 start = "2020-01-14"
 597 end = "2024-04-27"
 598 notes = "I am an author of this crate"
 599
 600 [[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
 601 who = "Alex Crichton <alex@alexcrichton.com>"
 602 criteria = "safe-to-deploy"
 603 user-id = 1 # Alex Crichton (alexcrichton)
 604 start = "2020-12-11"
 605 end = "2024-04-14"
 606 notes = """
 607 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 608 repository of which I'm one of the primary maintainers and publishers for.
 609 I am employed by a member of the Bytecode Alliance and plan to continue doing
 610 so and will actively maintain this crate over time.
 611 """
 612
 613 [[audits.bytecode-alliance.wildcard-audits.wasm-smith]]
 614 who = "Alex Crichton <alex@alexcrichton.com>"
 615 criteria = "safe-to-deploy"
 616 user-id = 1 # Alex Crichton (alexcrichton)
 617 start = "2020-09-03"
 618 end = "2024-04-14"
 619 notes = """
 620 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 621 repository of which I'm one of the primary maintainers and publishers for.
 622 I am employed by a member of the Bytecode Alliance and plan to continue doing
 623 so and will actively maintain this crate over time.
 624 """
 625
 626 [[audits.bytecode-alliance.wildcard-audits.wasmparser]]
 627 who = "Alex Crichton <alex@alexcrichton.com>"
 628 criteria = "safe-to-deploy"
 629 user-id = 1 # Alex Crichton (alexcrichton)
 630 start = "2020-07-13"
 631 end = "2024-04-14"
 632 notes = """
 633 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 634 repository of which I'm one of the primary maintainers and publishers for.
 635 I am employed by a member of the Bytecode Alliance and plan to continue doing
 636 so and will actively maintain this crate over time.
 637 """
 638
 639 [[audits.bytecode-alliance.wildcard-audits.wast]]
 640 who = "Alex Crichton <alex@alexcrichton.com>"
 641 criteria = "safe-to-deploy"
 642 user-id = 1 # Alex Crichton (alexcrichton)
 643 start = "2019-10-16"
 644 end = "2024-04-14"
 645 notes = """
 646 This is a Bytecode Alliance authored crate maintained in the `wasm-tools`
 647 repository of which I'm one of the primary maintainers and publishers for.
 648 I am employed by a member of the Bytecode Alliance and plan to continue doing
 649 so and will actively maintain this crate over time.
 650 """
 651
 652 [[audits.bytecode-alliance.audits.arrayref]]
 653 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 654 criteria = "safe-to-deploy"
 655 version = "0.3.6"
 656 notes = """
 657 Unsafe code, but its logic looks good to me. Necessary given what it is
 658 doing. Well tested, has quickchecks.
 659 """
 660
 661 [[audits.bytecode-alliance.audits.arrayvec]]
 662 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 663 criteria = "safe-to-deploy"
 664 version = "0.7.2"
 665 notes = """
 666 Well documented invariants, good assertions for those invariants in unsafe code,
 667 and tested with MIRI to boot. LGTM.
 668 """
 669
 670 [[audits.bytecode-alliance.audits.base64]]
 671 who = "Pat Hickey <phickey@fastly.com>"
 672 criteria = "safe-to-deploy"
 673 version = "0.21.0"
 674 notes = "This crate has no dependencies, no build.rs, and contains no unsafe code."
 675
 676 [[audits.bytecode-alliance.audits.block-buffer]]
 677 who = "Benjamin Bouvier <public@benj.me>"
 678 criteria = "safe-to-deploy"
 679 delta = "0.9.0 -> 0.10.2"
 680
 681 [[audits.bytecode-alliance.audits.bumpalo]]
 682 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 683 criteria = "safe-to-deploy"
 684 version = "3.11.1"
 685 notes = "I am the author of this crate."
 686
 687 [[audits.bytecode-alliance.audits.cargo-platform]]
 688 who = "Pat Hickey <phickey@fastly.com>"
 689 criteria = "safe-to-deploy"
 690 version = "0.1.2"
 691 notes = "no build, no ambient capabilities, no unsafe"
 692
 693 [[audits.bytecode-alliance.audits.cc]]
 694 who = "Alex Crichton <alex@alexcrichton.com>"
 695 criteria = "safe-to-deploy"
 696 version = "1.0.73"
 697 notes = "I am the author of this crate."
 698
 699 [[audits.bytecode-alliance.audits.cfg-if]]
 700 who = "Alex Crichton <alex@alexcrichton.com>"
 701 criteria = "safe-to-deploy"
 702 version = "1.0.0"
 703 notes = "I am the author of this crate."
 704
 705 [[audits.bytecode-alliance.audits.codespan-reporting]]
 706 who = "Jamey Sharp <jsharp@fastly.com>"
 707 criteria = "safe-to-deploy"
 708 version = "0.11.1"
 709 notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
 710
 711 [[audits.bytecode-alliance.audits.cpufeatures]]
 712 who = "Alex Crichton <alex@alexcrichton.com>"
 713 criteria = "safe-to-deploy"
 714 delta = "0.2.2 -> 0.2.7"
 715 notes = """
 716 This is a minor update that looks to add some more detected CPU features and
 717 various other minor portability fixes such as MIRI support.
 718 """
 719
 720 [[audits.bytecode-alliance.audits.crypto-common]]
 721 who = "Benjamin Bouvier <public@benj.me>"
 722 criteria = "safe-to-deploy"
 723 version = "0.1.3"
 724
 725 [[audits.bytecode-alliance.audits.foreign-types]]
 726 who = "Pat Hickey <phickey@fastly.com>"
 727 criteria = "safe-to-deploy"
 728 version = "0.3.2"
 729 notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
 730
 731 [[audits.bytecode-alliance.audits.foreign-types-shared]]
 732 who = "Pat Hickey <phickey@fastly.com>"
 733 criteria = "safe-to-deploy"
 734 version = "0.1.1"
 735
 736 [[audits.bytecode-alliance.audits.form_urlencoded]]
 737 who = "Alex Crichton <alex@alexcrichton.com>"
 738 criteria = "safe-to-deploy"
 739 version = "1.1.0"
 740 notes = """
 741 This is a small crate for working with url-encoded forms which doesn't have any
 742 more than what it says on the tin. Contains one `unsafe` block related to
 743 performance around utf-8 validation which is fairly easy to verify as correct.
 744 """
 745
 746 [[audits.bytecode-alliance.audits.futures-channel]]
 747 who = "Pat Hickey <phickey@fastly.com>"
 748 criteria = "safe-to-deploy"
 749 version = "0.3.27"
 750 notes = "build.rs is just detecting the target and setting cfg. unsafety is for implementing a concurrency primitives using atomics and unsafecell, and is not obviously incorrect (this is the sort of thing I wouldn't certify as correct without formal methods)"
 751
 752 [[audits.bytecode-alliance.audits.futures-core]]
 753 who = "Pat Hickey <phickey@fastly.com>"
 754 criteria = "safe-to-deploy"
 755 version = "0.3.27"
 756 notes = "Unsafe used to implement a concurrency primitive AtomicWaker. Well-commented and not obviously incorrect. Like my other audits of these concurrency primitives inside the futures family, I couldn't certify that it is correct without formal methods, but that is out of scope for this vetting."
 757
 758 [[audits.bytecode-alliance.audits.futures-executor]]
 759 who = "Pat Hickey <phickey@fastly.com>"
 760 criteria = "safe-to-deploy"
 761 version = "0.3.27"
 762 notes = "Unsafe used to implement the unpark mutex, which is well commented and not obviously incorrect. Like with futures-channel I wouldn't be able to certify it as correct without formal methods."
 763
 764 [[audits.bytecode-alliance.audits.futures-io]]
 765 who = "Pat Hickey <phickey@fastly.com>"
 766 criteria = "safe-to-deploy"
 767 version = "0.3.27"
 768
 769 [[audits.bytecode-alliance.audits.futures-sink]]
 770 who = "Pat Hickey <phickey@fastly.com>"
 771 criteria = "safe-to-deploy"
 772 version = "0.3.27"
 773
 774 [[audits.bytecode-alliance.audits.heck]]
 775 who = "Alex Crichton <alex@alexcrichton.com>"
 776 criteria = "safe-to-deploy"
 777 version = "0.4.0"
 778 notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
 779
 780 [[audits.bytecode-alliance.audits.id-arena]]
 781 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 782 criteria = "safe-to-deploy"
 783 version = "2.2.1"
 784 notes = "I am the author of this crate."
 785
 786 [[audits.bytecode-alliance.audits.idna]]
 787 who = "Alex Crichton <alex@alexcrichton.com>"
 788 criteria = "safe-to-deploy"
 789 version = "0.3.0"
 790 notes = """
 791 This is a crate without unsafe code or usage of the standard library. The large
 792 size of this crate comes from the large generated unicode tables file. This
 793 crate is broadly used throughout the ecosystem and does not contain anything
 794 suspicious.
 795 """
 796
 797 [[audits.bytecode-alliance.audits.leb128]]
 798 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 799 criteria = "safe-to-deploy"
 800 version = "0.2.5"
 801 notes = "I am the author of this crate."
 802
 803 [[audits.bytecode-alliance.audits.memoffset]]
 804 who = "Alex Crichton <alex@alexcrichton.com>"
 805 criteria = "safe-to-deploy"
 806 delta = "0.7.1 -> 0.8.0"
 807 notes = "This was a small update to the crate which has to do with Rust language features and compiler versions, no substantial changes."
 808
 809 [[audits.bytecode-alliance.audits.peeking_take_while]]
 810 who = "Nick Fitzgerald <fitzgen@gmail.com>"
 811 criteria = "safe-to-deploy"
 812 version = "1.0.0"
 813 notes = "I am the author of this crate."
 814
 815 [[audits.bytecode-alliance.audits.percent-encoding]]
 816 who = "Alex Crichton <alex@alexcrichton.com>"
 817 criteria = "safe-to-deploy"
 818 version = "2.2.0"
 819 notes = """
 820 This crate is a single-file crate that does what it says on the tin. There are
 821 a few `unsafe` blocks related to utf-8 validation which are locally verifiable
 822 as correct and otherwise this crate is good to go.
 823 """
 824
 825 [[audits.bytecode-alliance.audits.pin-utils]]
 826 who = "Pat Hickey <phickey@fastly.com>"
 827 criteria = "safe-to-deploy"
 828 version = "0.1.0"
 829
 830 [[audits.bytecode-alliance.audits.pkg-config]]
 831 who = "Pat Hickey <phickey@fastly.com>"
 832 criteria = "safe-to-deploy"
 833 version = "0.3.25"
 834 notes = "This crate shells out to the pkg-config executable, but it appears to sanitize inputs reasonably."
 835
 836 [[audits.bytecode-alliance.audits.rustc-demangle]]
 837 who = "Alex Crichton <alex@alexcrichton.com>"
 838 criteria = "safe-to-deploy"
 839 version = "0.1.21"
 840 notes = "I am the author of this crate."
 841
 842 [[audits.bytecode-alliance.audits.semver]]
 843 who = "Pat Hickey <phickey@fastly.com>"
 844 criteria = "safe-to-deploy"
 845 version = "1.0.17"
 846 notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
 847
 848 [[audits.bytecode-alliance.audits.slab]]
 849 who = "Pat Hickey <phickey@fastly.com>"
 850 criteria = "safe-to-deploy"
 851 version = "0.4.6"
 852 notes = "provides a datastructure implemented using std's Vec. all uses of unsafe are just delegating to the underlying unsafe Vec methods."
 853
 854 [[audits.bytecode-alliance.audits.unicase]]
 855 who = "Alex Crichton <alex@alexcrichton.com>"
 856 criteria = "safe-to-deploy"
 857 version = "2.6.0"
 858 notes = """
 859 This crate contains no `unsafe` code and no unnecessary use of the standard
 860 library.
 861 """
 862
 863 [[audits.bytecode-alliance.audits.unicode-bidi]]
 864 who = "Alex Crichton <alex@alexcrichton.com>"
 865 criteria = "safe-to-deploy"
 866 version = "0.3.8"
 867 notes = """
 868 This crate has no unsafe code and does not use `std::*`. Skimming the crate it
 869 does not attempt to out of the bounds of what it's already supposed to be doing.
 870 """
 871
 872 [[audits.bytecode-alliance.audits.unicode-normalization]]
 873 who = "Alex Crichton <alex@alexcrichton.com>"
 874 criteria = "safe-to-deploy"
 875 version = "0.1.19"
 876 notes = """
 877 This crate contains one usage of `unsafe` which I have manually checked to see
 878 it as correct. This crate's size comes in large part due to the generated
 879 unicode tables that it contains. This crate is additionally widely used
 880 throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
 881 and nothing suspicious.
 882 """
 883
 884 [[audits.bytecode-alliance.audits.wasm-encoder]]
 885 who = "Alex Crichton <alex@alexcrichton.com>"
 886 criteria = "safe-to-deploy"
 887 version = "0.25.0"
 888 notes = "The Bytecode Alliance is the author of this crate."
 889
 890 [[audits.bytecode-alliance.audits.wasm-smith]]
 891 who = "Alex Crichton <alex@alexcrichton.com>"
 892 criteria = "safe-to-run"
 893 version = "0.12.5"
 894 notes = "The Bytecode Alliance is the author of this crate."
 895
 896 [[audits.bytecode-alliance.audits.wasmparser]]
 897 who = "Alex Crichton <alex@alexcrichton.com>"
 898 criteria = "safe-to-deploy"
 899 version = "0.102.0"
 900 notes = "The Bytecode Alliance is the author of this crate."
 901
 902 [[audits.bytecode-alliance.audits.wast]]
 903 who = "Alex Crichton <alex@alexcrichton.com>"
 904 criteria = "safe-to-deploy"
 905 version = "55.0.0"
 906 notes = "The Bytecode Alliance is the author of this crate."
 907
 908 [[audits.embark-studios.audits.anyhow]]
 909 who = "Johan Andersson <opensource@embark-studios.com>"
 910 criteria = "safe-to-deploy"
 911 version = "1.0.58"
 912
 913 [[audits.embark-studios.audits.cty]]
 914 who = "Johan Andersson <opensource@embark-studios.com>"
 915 criteria = "safe-to-deploy"
 916 version = "0.2.2"
 917 notes = "Inspected it and is a tiny crate with just type definitions"
 918
 919 [[audits.embark-studios.audits.derive_more]]
 920 who = "Johan Andersson <opensource@embark-studios.com>"
 921 criteria = "safe-to-deploy"
 922 version = "0.99.17"
 923 notes = "No unsafe usage or ambient capabilities"
 924
 925 [[audits.embark-studios.audits.ident_case]]
 926 who = "Johan Andersson <opensource@embark-studios.com>"
 927 criteria = "safe-to-deploy"
 928 version = "1.0.1"
 929 notes = "No unsafe usage or ambient capabilities"
 930
 931 [[audits.embark-studios.audits.line-wrap]]
 932 who = "Johan Andersson <opensource@embark-studios.com>"
 933 criteria = "safe-to-deploy"
 934 version = "0.1.1"
 935 notes = "No unsafe usage or ambient capabilities"
 936
 937 [[audits.embark-studios.audits.thiserror]]
 938 who = "Johan Andersson <opensource@embark-studios.com>"
 939 criteria = "safe-to-deploy"
 940 version = "1.0.40"
 941 notes = "Wrapper over implementation crate, found no unsafe or ambient capabilities used"
 942
 943 [[audits.embark-studios.audits.thiserror-impl]]
 944 who = "Johan Andersson <opensource@embark-studios.com>"
 945 criteria = "safe-to-deploy"
 946 version = "1.0.40"
 947 notes = "Found no unsafe or ambient capabilities used"
 948
 949 [[audits.embark-studios.audits.yaml-rust]]
 950 who = "Johan Andersson <opensource@embark-studios.com>"
 951 criteria = "safe-to-deploy"
 952 version = "0.4.5"
 953 notes = "No unsafe usage or ambient capabilities"
 954
 955 [[audits.google.audits.ash]]
 956 who = "David Koloski <dkoloski@google.com>"
 957 criteria = "safe-to-deploy"
 958 version = "0.37.0+1.3.209"
 959 notes = "Reviewed on https://fxrev.dev/694269"
 960 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
 961
 962 [[audits.google.audits.fastrand]]
 963 who = "George Burgess IV <gbiv@google.com>"
 964 criteria = "safe-to-deploy"
 965 version = "1.9.0"
 966 notes = """
 967 `does-not-implement-crypto` is certified because this crate explicitly says
 968 that the RNG here is not cryptographically secure.
 969 """
 970 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 971
 972 [[audits.google.audits.futures]]
 973 who = "George Burgess IV <gbiv@google.com>"
 974 criteria = "safe-to-deploy"
 975 version = "0.3.28"
 976 notes = """
 977 `futures` has no logic other than tests - it simply `pub use`s things from
 978 other crates.
 979 """
 980 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 981
 982 [[audits.google.audits.glob]]
 983 who = "George Burgess IV <gbiv@google.com>"
 984 criteria = "safe-to-deploy"
 985 version = "0.3.1"
 986 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 987
 988 [[audits.google.audits.h2]]
 989 who = "ChromeOS"
 990 criteria = "safe-to-run"
 991 version = "0.3.14"
 992 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 993
 994 [[audits.google.audits.http]]
 995 who = "ChromeOS"
 996 criteria = "safe-to-run"
 997 version = "0.2.8"
 998 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
 999
1000 [[audits.google.audits.http-body]]
1001 who = "ChromeOS"
1002 criteria = "safe-to-run"
1003 version = "0.4.5"
1004 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1005
1006 [[audits.google.audits.httpdate]]
1007 who = "ChromeOS"
1008 criteria = "safe-to-run"
1009 version = "1.0.2"
1010 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1011
1012 [[audits.google.audits.hyper]]
1013 who = "ChromeOS"
1014 criteria = "safe-to-run"
1015 version = "0.14.20"
1016 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1017
1018 [[audits.google.audits.pin-project]]
1019 who = "ChromeOS"
1020 criteria = "safe-to-run"
1021 version = "1.0.12"
1022 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1023
1024 [[audits.google.audits.pin-project-internal]]
1025 who = "ChromeOS"
1026 criteria = "safe-to-run"
1027 version = "1.0.12"
1028 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1029
1030 [[audits.google.audits.scoped-tls]]
1031 who = "George Burgess IV <gbiv@google.com>"
1032 criteria = "safe-to-run"
1033 version = "1.0.0"
1034 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1035
1036 [[audits.google.audits.serde_urlencoded]]
1037 who = "ChromeOS"
1038 criteria = "safe-to-run"
1039 version = "0.7.1"
1040 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1041
1042 [[audits.google.audits.tokio-stream]]
1043 who = "David Koloski <dkoloski@google.com>"
1044 criteria = "safe-to-deploy"
1045 version = "0.1.11"
1046 notes = "Reviewed on https://fxrev.dev/804724"
1047 aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
1048
1049 [[audits.google.audits.tower-service]]
1050 who = "ChromeOS"
1051 criteria = "safe-to-run"
1052 version = "0.3.2"
1053 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1054
1055 [[audits.google.audits.tracing]]
1056 who = "ChromeOS"
1057 criteria = "safe-to-run"
1058 version = "0.1.35"
1059 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1060
1061 [[audits.google.audits.tracing-attributes]]
1062 who = "ChromeOS"
1063 criteria = "safe-to-run"
1064 version = "0.1.22"
1065 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1066
1067 [[audits.google.audits.tracing-core]]
1068 who = "ChromeOS"
1069 criteria = "safe-to-run"
1070 version = "0.1.29"
1071 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1072
1073 [[audits.google.audits.try-lock]]
1074 who = "ChromeOS"
1075 criteria = "safe-to-run"
1076 version = "0.2.3"
1077 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1078
1079 [[audits.google.audits.version_check]]
1080 who = "George Burgess IV <gbiv@google.com>"
1081 criteria = "safe-to-deploy"
1082 version = "0.9.4"
1083 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1084
1085 [[audits.google.audits.want]]
1086 who = "ChromeOS"
1087 criteria = "safe-to-run"
1088 version = "0.3.0"
1089 aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
1090
1091 [[audits.isrg.wildcard-audits.prio]]
1092 who = "David Cook <dcook@divviup.org>"
1093 criteria = "safe-to-deploy"
1094 user-id = 101233 # le-automaton
1095 start = "2020-09-28"
1096 end = "2024-03-23"
1097
1098 [[audits.isrg.audits.block-buffer]]
1099 who = "David Cook <dcook@divviup.org>"
1100 criteria = "safe-to-deploy"
1101 version = "0.9.0"
1102
1103 [[audits.isrg.audits.keccak]]
1104 who = "David Cook <dcook@divviup.org>"
1105 criteria = "safe-to-deploy"
1106 version = "0.1.2"
1107
1108 [[audits.isrg.audits.rayon-core]]
1109 who = "Brandon Pitman <bran@bran.land>"
1110 criteria = "safe-to-deploy"
1111 delta = "1.10.2 -> 1.11.0"
1112
1113 [[audits.isrg.audits.sha3]]
1114 who = "David Cook <dcook@divviup.org>"
1115 criteria = "safe-to-deploy"
1116 version = "0.10.6"
1117
1118 [[audits.mozilla.wildcard-audits.zeitstempel]]
1119 who = "Jan-Erik Rediger <jrediger@mozilla.com>"
1120 criteria = "safe-to-deploy"
1121 user-id = 48 # Jan-Erik Rediger (badboy)
1122 start = "2021-03-03"
1123 end = "2024-05-10"
1124 notes = "Maintained by me"
1125 aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
1126
1127 [[audits.mozilla.audits.either]]
1128 who = "Nika Layzell <nika@thelayzells.com>"
1129 criteria = "safe-to-deploy"
1130 version = "1.6.1"
1131 notes = """
1132 Straightforward crate providing the Either enum and trait implementations with
1133 no unsafe code.
1134 """
1135 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"
1136
1137 [[audits.mozilla.audits.lazy_static]]
1138 who = "Nika Layzell <nika@thelayzells.com>"
1139 criteria = "safe-to-deploy"
1140 version = "1.4.0"
1141 notes = "I have read over the macros, and audited the unsafe code."
1142 aggregated-from = "https://raw.githubusercontent.com/mozilla/cargo-vet/main/supply-chain/audits.toml"