supply-chain/config.toml

   1
   2 # cargo-vet config file
   3
   4 [imports.bytecodealliance]
   5 url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
   6
   7 [imports.chromeos]
   8 url = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/main/cargo-vet/audits.toml?format=TEXT"
   9
  10 [imports.embark]
  11 url = "https://raw.githubusercontent.com/EmbarkStudios/rust-ecosystem/main/audits.toml"
  12
  13 [policy.audioipc-client]
  14 criteria = []
  15 notes = "Going away very soon in bug 1697845"
  16
  17 [policy.audioipc-server]
  18 criteria = []
  19 notes = "Going away very soon in bug 1697845"
  20
  21 [policy.autocfg]
  22 audit-as-crates-io = true
  23 notes = "This is the upstream code plus a few local fixes, see bug 1685697."
  24
  25 [policy.chardetng]
  26 audit-as-crates-io = true
  27 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  28
  29 [policy.chardetng_c]
  30 audit-as-crates-io = true
  31 notes = "This is a crate Henri wrote which is also published. We should probably update Firefox to tip and certify that."
  32
  33 [policy.coremidi]
  34 audit-as-crates-io = true
  35 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  36
  37 [policy.cssparser-macros]
  38 audit-as-crates-io = true
  39 notes = "Using non-crates.io revision because the color-4 changes has not been published yet."
  40
  41 [policy.d3d12]
  42 audit-as-crates-io = true
  43 notes = "Unpublished wgpu revisions point to unpublished d3d12 revisions."
  44
  45 [policy.firefox-on-glean]
  46 audit-as-crates-io = false
  47 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on firefox-on-glean."
  48
  49 [policy.geckodriver]
  50 audit-as-crates-io = false
  51 criteria = "safe-to-run"
  52 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
  53
  54 [policy.gkrust-gtest]
  55 criteria = "safe-to-run"
  56 notes = "Used for testing."
  57
  58 [policy.gkrust-shared]
  59 dependency-criteria = { tokio-reactor = [], tokio-threadpool = [] }
  60
  61 [policy.gkrust_shared]
  62 notes = "The dependencies on tokio-reactor and tokio-threadpools are just a hack to pin the version used by audioipc-{client,server}. Suppress vetting on those for the same reasons behind the policy entries."
  63
  64 [policy.gluesmith]
  65 criteria = "safe-to-run"
  66 notes = "Used for fuzzing."
  67
  68 [policy.http3server]
  69 criteria = "safe-to-run"
  70 notes = "Used for testing."
  71
  72 [policy.l10nregistry]
  73 dependency-criteria = { fluent-testing = "safe-to-run", tokio = "safe-to-run" }
  74 notes = "This crate has two testing-only dependencies which are specified as regular-but-optional rather than a dev-dependencies, because they need to be available to both benchmarks and integration tests."
  75
  76 [policy.libudev-sys]
  77 audit-as-crates-io = false
  78 notes = "This override is an api-compatible fork with an orthogonal implementation."
  79
  80 [policy.marionette]
  81 audit-as-crates-io = true
  82 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
  83
  84 [policy.midir]
  85 audit-as-crates-io = true
  86 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  87
  88 [policy.minidump-writer]
  89 audit-as-crates-io = true
  90 notes = "This is a pinned version of the upstream code, presumably to get a fix that hadn't been released yet. We should consider switching to the latest official release."
  91
  92 [policy.mio]
  93 audit-as-crates-io = true
  94 notes = "Version 0.6.23 is a local fork of upstream which just twiddles some dependencies."
  95
  96 [policy.mio-named-pipes]
  97 audit-as-crates-io = true
  98 notes = "We have a local fork, but this entire subtree is going away shortly anyway with the old audioipc code."
  99
 100 [policy.mozbuild]
 101 audit-as-crates-io = false
 102 notes = "The crates.io version of this is just a placeholder to allow public crates to depend on mozbuild."
 103
 104 [policy.mozdevice]
 105 audit-as-crates-io = true
 106 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 107
 108 [policy.mozglue-static]
 109 dependency-criteria = { rustc_version = "safe-to-run" }
 110 notes = "The rustc_version dependency is only used in the build script, and does not generate any runtime code"
 111
 112 [policy.mozprofile]
 113 audit-as-crates-io = true
 114 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 115
 116 [policy.mozrunner]
 117 audit-as-crates-io = true
 118 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 119
 120 [policy.mozversion]
 121 audit-as-crates-io = true
 122 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 123
 124 [policy.naga]
 125 audit-as-crates-io = true
 126 notes = "wgpu-core pins this crate."
 127
 128 [policy.packed_simd_2]
 129 audit-as-crates-io = true
 130 notes = "Based on upstream, see bug 1719674."
 131
 132 [policy.pulse]
 133 audit-as-crates-io = false
 134 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 135
 136 [policy.qcms]
 137 audit-as-crates-io = true
 138 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 139
 140 [policy.rure]
 141 audit-as-crates-io = true
 142 notes = "Identical to upstream, but with cdylib and staticlib targets disabled to avoid unnecessary build artifacts and linker errors."
 143
 144 [policy.selectors]
 145 audit-as-crates-io = true
 146 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 147
 148 [policy.servo_arc]
 149 audit-as-crates-io = true
 150 notes = "This is a first-party crate which is also published to crates.io, but we should publish audits for it for the benefit of the ecosystem."
 151
 152 [policy.smoosh]
 153 criteria = "safe-to-run"
 154 notes = "We're not shipping this and have no plans to ship it."
 155
 156 [policy.storage]
 157 audit-as-crates-io = false
 158 notes = "This is a first-party crate which is entirely unrelated to the crates.io package of the same name."
 159
 160 [policy.tabs]
 161 audit-as-crates-io = false
 162 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 163
 164 [policy.viaduct]
 165 audit-as-crates-io = false
 166 notes = "This is a first-party crate, maintained by the appservices team, which is entirely unrelated to the crates.io package of the same name."
 167
 168 [policy.warp]
 169 audit-as-crates-io = true
 170 notes = "This is a third-party crate, with an extra patch."
 171
 172 [policy.webdriver]
 173 audit-as-crates-io = false
 174 criteria = "safe-to-run"
 175 notes = "This is a first-party crate which is also published to crates.io. We certify audits for this crate as part of the documented release process, but that step happens after the version bump lands on central so we don't enforce it here. It's also used only for automation, so its subtree can be safe-to-run."
 176
 177 [policy.wgpu-core]
 178 audit-as-crates-io = true
 179 notes = "Upstream project which we pin."
 180
 181 [policy.wgpu-hal]
 182 audit-as-crates-io = true
 183 notes = "Upstream project which we pin."
 184
 185 [policy.wgpu-types]
 186 audit-as-crates-io = true
 187 notes = "Upstream project which we pin."
 188
 189 [[exemptions.adler]]
 190 version = "1.0.2"
 191 criteria = "safe-to-deploy"
 192
 193 [[exemptions.ahash]]
 194 version = "0.7.6"
 195 criteria = "safe-to-deploy"
 196
 197 [[exemptions.aho-corasick]]
 198 version = "0.7.18"
 199 criteria = "safe-to-deploy"
 200
 201 [[exemptions.alsa]]
 202 version = "0.4.3"
 203 criteria = "safe-to-deploy"
 204
 205 [[exemptions.alsa-sys]]
 206 version = "0.3.1"
 207 criteria = "safe-to-deploy"
 208
 209 [[exemptions.android_log-sys]]
 210 version = "0.2.0"
 211 criteria = "safe-to-deploy"
 212
 213 [[exemptions.ash]]
 214 version = "0.37.0+1.3.209"
 215 criteria = "safe-to-deploy"
 216
 217 [[exemptions.askama_derive]]
 218 version = "0.11.2"
 219 criteria = "safe-to-deploy"
 220
 221 [[exemptions.askama_escape]]
 222 version = "0.10.3"
 223 criteria = "safe-to-deploy"
 224
 225 [[exemptions.askama_shared]]
 226 version = "0.12.2"
 227 criteria = "safe-to-deploy"
 228
 229 [[exemptions.async-task]]
 230 version = "4.0.3"
 231 criteria = "safe-to-deploy"
 232
 233 [[exemptions.async-trait]]
 234 version = "0.1.56"
 235 criteria = "safe-to-deploy"
 236
 237 [[exemptions.atomic]]
 238 version = "0.4.6"
 239 criteria = "safe-to-deploy"
 240
 241 [[exemptions.audio-mixer]]
 242 version = "0.1.2"
 243 criteria = "safe-to-deploy"
 244
 245 [[exemptions.audio_thread_priority]]
 246 version = "0.26.1"
 247 criteria = "safe-to-deploy"
 248
 249 [[exemptions.base64]]
 250 version = "0.13.0"
 251 criteria = "safe-to-deploy"
 252
 253 [[exemptions.bincode]]
 254 version = "1.3.3"
 255 criteria = "safe-to-deploy"
 256
 257 [[exemptions.bitflags]]
 258 version = "1.3.2"
 259 criteria = "safe-to-deploy"
 260
 261 [[exemptions.bitreader]]
 262 version = "0.3.6"
 263 criteria = "safe-to-deploy"
 264
 265 [[exemptions.block]]
 266 version = "0.1.6"
 267 criteria = "safe-to-deploy"
 268
 269 [[exemptions.block-buffer]]
 270 version = "0.10.2"
 271 criteria = "safe-to-deploy"
 272
 273 [[exemptions.byteorder]]
 274 version = "1.4.3"
 275 criteria = "safe-to-deploy"
 276
 277 [[exemptions.bytes]]
 278 version = "1.1.0"
 279 criteria = "safe-to-deploy"
 280
 281 [[exemptions.cache-padded]]
 282 version = "1.2.0"
 283 criteria = "safe-to-deploy"
 284
 285 [[exemptions.camino]]
 286 version = "1.0.9"
 287 criteria = "safe-to-deploy"
 288
 289 [[exemptions.cargo-platform]]
 290 version = "0.1.2"
 291 criteria = "safe-to-deploy"
 292
 293 [[exemptions.cexpr]]
 294 version = "0.6.0"
 295 criteria = "safe-to-deploy"
 296
 297 [[exemptions.chrono]]
 298 version = "0.4.19"
 299 criteria = "safe-to-deploy"
 300
 301 [[exemptions.chunky-vec]]
 302 version = "0.1.0"
 303 criteria = "safe-to-deploy"
 304
 305 [[exemptions.clang-sys]]
 306 version = "1.3.3"
 307 criteria = "safe-to-deploy"
 308
 309 [[exemptions.clap]]
 310 version = "3.1.18"
 311 criteria = "safe-to-deploy"
 312
 313 [[exemptions.clap_derive]]
 314 version = "3.1.18"
 315 criteria = "safe-to-deploy"
 316
 317 [[exemptions.clap_lex]]
 318 version = "0.2.0"
 319 criteria = "safe-to-deploy"
 320
 321 [[exemptions.cookie]]
 322 version = "0.16.0"
 323 criteria = "safe-to-run"
 324
 325 [[exemptions.core-foundation]]
 326 version = "0.9.3"
 327 criteria = "safe-to-deploy"
 328
 329 [[exemptions.core-foundation-sys]]
 330 version = "0.8.3"
 331 criteria = "safe-to-deploy"
 332
 333 [[exemptions.core-graphics]]
 334 version = "0.22.3"
 335 criteria = "safe-to-deploy"
 336
 337 [[exemptions.core-graphics-types]]
 338 version = "0.1.1"
 339 criteria = "safe-to-deploy"
 340
 341 [[exemptions.core-text]]
 342 version = "19.2.0"
 343 criteria = "safe-to-deploy"
 344
 345 [[exemptions.coreaudio-sys]]
 346 version = "0.2.10"
 347 criteria = "safe-to-deploy"
 348
 349 [[exemptions.coremidi]]
 350 version = "0.6.0@git:fc68464b5445caf111e41f643a2e69ccce0b4f83"
 351 criteria = "safe-to-deploy"
 352
 353 [[exemptions.coremidi-sys]]
 354 version = "3.1.0"
 355 criteria = "safe-to-deploy"
 356
 357 [[exemptions.cose]]
 358 version = "0.1.4"
 359 criteria = "safe-to-deploy"
 360
 361 [[exemptions.cose-c]]
 362 version = "0.1.5"
 363 criteria = "safe-to-deploy"
 364
 365 [[exemptions.cpufeatures]]
 366 version = "0.2.2"
 367 criteria = "safe-to-deploy"
 368
 369 [[exemptions.crc32fast]]
 370 version = "1.3.2"
 371 criteria = "safe-to-deploy"
 372
 373 [[exemptions.crossbeam-channel]]
 374 version = "0.5.4"
 375 criteria = "safe-to-deploy"
 376
 377 [[exemptions.crossbeam-deque]]
 378 version = "0.8.1"
 379 criteria = "safe-to-deploy"
 380
 381 [[exemptions.crossbeam-epoch]]
 382 version = "0.9.8"
 383 criteria = "safe-to-deploy"
 384
 385 [[exemptions.crossbeam-utils]]
 386 version = "0.8.8"
 387 criteria = "safe-to-deploy"
 388
 389 [[exemptions.d3d12]]
 390 version = "0.4.1"
 391 criteria = "safe-to-deploy"
 392
 393 [[exemptions.darling]]
 394 version = "0.13.4"
 395 criteria = "safe-to-deploy"
 396
 397 [[exemptions.darling_core]]
 398 version = "0.13.4"
 399 criteria = "safe-to-deploy"
 400
 401 [[exemptions.darling_macro]]
 402 version = "0.13.4"
 403 criteria = "safe-to-deploy"
 404
 405 [[exemptions.dashmap]]
 406 version = "4.0.2"
 407 criteria = "safe-to-deploy"
 408
 409 [[exemptions.data-encoding]]
 410 version = "2.3.2"
 411 criteria = "safe-to-deploy"
 412
 413 [[exemptions.dbus]]
 414 version = "0.6.5"
 415 criteria = "safe-to-deploy"
 416
 417 [[exemptions.derive_more]]
 418 version = "0.99.17"
 419 criteria = "safe-to-deploy"
 420
 421 [[exemptions.devd-rs]]
 422 version = "0.3.4"
 423 criteria = "safe-to-deploy"
 424
 425 [[exemptions.digest]]
 426 version = "0.10.3"
 427 criteria = "safe-to-deploy"
 428
 429 [[exemptions.dirs]]
 430 version = "4.0.0"
 431 criteria = "safe-to-deploy"
 432
 433 [[exemptions.dirs-sys]]
 434 version = "0.3.7"
 435 criteria = "safe-to-deploy"
 436
 437 [[exemptions.dns-parser]]
 438 version = "0.8.0"
 439 criteria = "safe-to-deploy"
 440
 441 [[exemptions.dogear]]
 442 version = "0.4.0"
 443 criteria = "safe-to-deploy"
 444
 445 [[exemptions.dtoa]]
 446 version = "0.4.8"
 447 criteria = "safe-to-deploy"
 448
 449 [[exemptions.dtoa-short]]
 450 version = "0.3.3"
 451 criteria = "safe-to-deploy"
 452
 453 [[exemptions.dwrote]]
 454 version = "0.11.0"
 455 criteria = "safe-to-deploy"
 456
 457 [[exemptions.either]]
 458 version = "1.6.1"
 459 criteria = "safe-to-deploy"
 460
 461 [[exemptions.enumset]]
 462 version = "1.0.11"
 463 criteria = "safe-to-deploy"
 464
 465 [[exemptions.enumset_derive]]
 466 version = "0.6.0"
 467 criteria = "safe-to-deploy"
 468
 469 [[exemptions.env_logger]]
 470 version = "0.9.0"
 471 criteria = "safe-to-deploy"
 472
 473 [[exemptions.error-chain]]
 474 version = "0.12.4"
 475 criteria = "safe-to-deploy"
 476
 477 [[exemptions.etagere]]
 478 version = "0.2.7"
 479 criteria = "safe-to-deploy"
 480
 481 [[exemptions.euclid]]
 482 version = "0.22.7"
 483 criteria = "safe-to-deploy"
 484
 485 [[exemptions.fallible-iterator]]
 486 version = "0.2.0"
 487 criteria = "safe-to-deploy"
 488
 489 [[exemptions.fallible-streaming-iterator]]
 490 version = "0.1.9"
 491 criteria = "safe-to-deploy"
 492
 493 [[exemptions.fallible_collections]]
 494 version = "0.4.4"
 495 criteria = "safe-to-deploy"
 496
 497 [[exemptions.fastrand]]
 498 version = "1.7.0"
 499 criteria = "safe-to-deploy"
 500
 501 [[exemptions.ffi-support]]
 502 version = "0.4.4"
 503 criteria = "safe-to-deploy"
 504
 505 [[exemptions.flate2]]
 506 version = "1.0.24"
 507 criteria = "safe-to-deploy"
 508
 509 [[exemptions.float-cmp]]
 510 version = "0.6.0"
 511 criteria = "safe-to-deploy"
 512
 513 [[exemptions.foreign-types]]
 514 version = "0.3.2"
 515 criteria = "safe-to-deploy"
 516
 517 [[exemptions.foreign-types-shared]]
 518 version = "0.1.1"
 519 criteria = "safe-to-deploy"
 520
 521 [[exemptions.freetype]]
 522 version = "0.7.0"
 523 criteria = "safe-to-deploy"
 524
 525 [[exemptions.fs-err]]
 526 version = "2.7.0"
 527 criteria = "safe-to-deploy"
 528
 529 [[exemptions.fuchsia-zircon]]
 530 version = "0.3.3"
 531 criteria = "safe-to-run"
 532
 533 [[exemptions.fuchsia-zircon-sys]]
 534 version = "0.3.3"
 535 criteria = "safe-to-run"
 536
 537 [[exemptions.futures]]
 538 version = "0.3.21"
 539 criteria = "safe-to-deploy"
 540
 541 [[exemptions.futures-channel]]
 542 version = "0.3.21"
 543 criteria = "safe-to-deploy"
 544
 545 [[exemptions.futures-core]]
 546 version = "0.3.21"
 547 criteria = "safe-to-deploy"
 548
 549 [[exemptions.futures-executor]]
 550 version = "0.3.21"
 551 criteria = "safe-to-deploy"
 552
 553 [[exemptions.futures-io]]
 554 version = "0.3.21"
 555 criteria = "safe-to-deploy"
 556
 557 [[exemptions.futures-macro]]
 558 version = "0.3.21"
 559 criteria = "safe-to-deploy"
 560
 561 [[exemptions.futures-sink]]
 562 version = "0.3.21"
 563 criteria = "safe-to-deploy"
 564
 565 [[exemptions.futures-task]]
 566 version = "0.3.21"
 567 criteria = "safe-to-deploy"
 568
 569 [[exemptions.futures-util]]
 570 version = "0.3.21"
 571 criteria = "safe-to-deploy"
 572
 573 [[exemptions.generic-array]]
 574 version = "0.14.5"
 575 criteria = "safe-to-deploy"
 576
 577 [[exemptions.getrandom]]
 578 version = "0.2.6"
 579 criteria = "safe-to-deploy"
 580
 581 [[exemptions.gl_generator]]
 582 version = "0.14.0"
 583 criteria = "safe-to-deploy"
 584
 585 [[exemptions.gleam]]
 586 version = "0.13.1"
 587 criteria = "safe-to-deploy"
 588
 589 [[exemptions.glob]]
 590 version = "0.3.0"
 591 criteria = "safe-to-deploy"
 592
 593 [[exemptions.glsl]]
 594 version = "6.0.1"
 595 criteria = "safe-to-deploy"
 596
 597 [[exemptions.glslopt]]
 598 version = "0.1.9"
 599 criteria = "safe-to-deploy"
 600
 601 [[exemptions.goblin]]
 602 version = "0.1.3"
 603 criteria = "safe-to-deploy"
 604
 605 [[exemptions.gpu-alloc]]
 606 version = "0.5.3"
 607 criteria = "safe-to-deploy"
 608
 609 [[exemptions.gpu-alloc-types]]
 610 version = "0.2.0"
 611 criteria = "safe-to-deploy"
 612
 613 [[exemptions.gpu-descriptor]]
 614 version = "0.2.2"
 615 criteria = "safe-to-deploy"
 616
 617 [[exemptions.gpu-descriptor-types]]
 618 version = "0.1.1"
 619 criteria = "safe-to-deploy"
 620
 621 [[exemptions.hashlink]]
 622 version = "0.7.0"
 623 criteria = "safe-to-deploy"
 624
 625 [[exemptions.headers]]
 626 version = "0.3.7"
 627 criteria = "safe-to-run"
 628
 629 [[exemptions.headers-core]]
 630 version = "0.2.0"
 631 criteria = "safe-to-run"
 632
 633 [[exemptions.hermit-abi]]
 634 version = "0.1.19"
 635 criteria = "safe-to-deploy"
 636
 637 [[exemptions.hexf-parse]]
 638 version = "0.2.1"
 639 criteria = "safe-to-deploy"
 640
 641 [[exemptions.httparse]]
 642 version = "1.7.1"
 643 criteria = "safe-to-run"
 644
 645 [[exemptions.ident_case]]
 646 version = "1.0.1"
 647 criteria = "safe-to-deploy"
 648
 649 [[exemptions.idna]]
 650 version = "0.2.3"
 651 criteria = "safe-to-deploy"
 652
 653 [[exemptions.indexmap]]
 654 version = "1.8.2"
 655 criteria = "safe-to-deploy"
 656
 657 [[exemptions.inherent]]
 658 version = "1.0.1"
 659 criteria = "safe-to-deploy"
 660
 661 [[exemptions.instant]]
 662 version = "0.1.12"
 663 criteria = "safe-to-deploy"
 664
 665 [[exemptions.ioctl-sys]]
 666 version = "0.7.1"
 667 criteria = "safe-to-deploy"
 668
 669 [[exemptions.iovec]]
 670 version = "0.1.4"
 671 criteria = "safe-to-deploy"
 672
 673 [[exemptions.itertools]]
 674 version = "0.10.3"
 675 criteria = "safe-to-deploy"
 676
 677 [[exemptions.itoa]]
 678 version = "1.0.2"
 679 criteria = "safe-to-deploy"
 680
 681 [[exemptions.jobserver]]
 682 version = "0.1.24"
 683 criteria = "safe-to-deploy"
 684
 685 [[exemptions.khronos-egl]]
 686 version = "4.1.0"
 687 criteria = "safe-to-deploy"
 688
 689 [[exemptions.khronos_api]]
 690 version = "3.1.0"
 691 criteria = "safe-to-deploy"
 692
 693 [[exemptions.lazy_static]]
 694 version = "1.4.0"
 695 criteria = "safe-to-deploy"
 696
 697 [[exemptions.lazycell]]
 698 version = "1.3.0"
 699 criteria = "safe-to-deploy"
 700
 701 [[exemptions.libc]]
 702 version = "0.2.126"
 703 criteria = "safe-to-deploy"
 704
 705 [[exemptions.libdbus-sys]]
 706 version = "0.2.2"
 707 criteria = "safe-to-deploy"
 708
 709 [[exemptions.libloading]]
 710 version = "0.7.3"
 711 criteria = "safe-to-deploy"
 712
 713 [[exemptions.libsqlite3-sys]]
 714 version = "0.25.2"
 715 criteria = "safe-to-deploy"
 716 suggest = false
 717 notes = "The in-gecko feature that we enable makes only pre-built bindings used, and none of the embedded C code is built. The build script was audited and is not doing anything besides exposing those bindings"
 718
 719 [[exemptions.libudev]]
 720 version = "0.2.0"
 721 criteria = "safe-to-deploy"
 722
 723 [[exemptions.line-wrap]]
 724 version = "0.1.1"
 725 criteria = "safe-to-run"
 726
 727 [[exemptions.lmdb-rkv]]
 728 version = "0.14.0"
 729 criteria = "safe-to-deploy"
 730
 731 [[exemptions.lmdb-rkv-sys]]
 732 version = "0.11.2"
 733 criteria = "safe-to-deploy"
 734
 735 [[exemptions.lock_api]]
 736 version = "0.4.7"
 737 criteria = "safe-to-deploy"
 738
 739 [[exemptions.mach]]
 740 version = "0.3.2"
 741 criteria = "safe-to-deploy"
 742
 743 [[exemptions.malloc_buf]]
 744 version = "0.0.6"
 745 criteria = "safe-to-deploy"
 746
 747 [[exemptions.memalloc]]
 748 version = "0.1.0"
 749 criteria = "safe-to-deploy"
 750
 751 [[exemptions.memchr]]
 752 version = "2.5.0"
 753 criteria = "safe-to-deploy"
 754
 755 [[exemptions.memmap2]]
 756 version = "0.5.4"
 757 criteria = "safe-to-deploy"
 758
 759 [[exemptions.memoffset]]
 760 version = "0.6.5"
 761 criteria = "safe-to-deploy"
 762
 763 [[exemptions.metal]]
 764 version = "0.23.1"
 765 criteria = "safe-to-deploy"
 766
 767 [[exemptions.midir]]
 768 version = "0.7.0"
 769 criteria = "safe-to-deploy"
 770
 771 [[exemptions.mime]]
 772 version = "0.3.16"
 773 criteria = "safe-to-deploy"
 774
 775 [[exemptions.mime_guess]]
 776 version = "2.0.4"
 777 criteria = "safe-to-deploy"
 778
 779 [[exemptions.minimal-lexical]]
 780 version = "0.2.1"
 781 criteria = "safe-to-deploy"
 782
 783 [[exemptions.miniz_oxide]]
 784 version = "0.5.3"
 785 criteria = "safe-to-deploy"
 786
 787 [[exemptions.mio]]
 788 version = "0.6.23"
 789 criteria = "safe-to-run"
 790
 791 [[exemptions.mio]]
 792 version = "0.8.0"
 793 criteria = "safe-to-deploy"
 794
 795 [[exemptions.mio-extras]]
 796 version = "2.0.6"
 797 criteria = "safe-to-run"
 798
 799 [[exemptions.miow]]
 800 version = "0.3.7"
 801 criteria = "safe-to-deploy"
 802
 803 [[exemptions.moz_cbor]]
 804 version = "0.1.2"
 805 criteria = "safe-to-deploy"
 806
 807 [[exemptions.murmurhash3]]
 808 version = "0.0.5"
 809 criteria = "safe-to-deploy"
 810
 811 [[exemptions.net2]]
 812 version = "0.2.37"
 813 criteria = "safe-to-run"
 814
 815 [[exemptions.nix]]
 816 version = "0.15.0"
 817 criteria = "safe-to-deploy"
 818
 819 [[exemptions.nom]]
 820 version = "7.1.1"
 821 criteria = "safe-to-deploy"
 822
 823 [[exemptions.ntapi]]
 824 version = "0.3.7"
 825 criteria = "safe-to-deploy"
 826
 827 [[exemptions.num_cpus]]
 828 version = "1.13.1"
 829 criteria = "safe-to-deploy"
 830
 831 [[exemptions.objc]]
 832 version = "0.2.7"
 833 criteria = "safe-to-deploy"
 834
 835 [[exemptions.objc_exception]]
 836 version = "0.1.2"
 837 criteria = "safe-to-deploy"
 838
 839 [[exemptions.object]]
 840 version = "0.28.4"
 841 criteria = "safe-to-deploy"
 842
 843 [[exemptions.once_cell]]
 844 version = "1.12.0"
 845 criteria = "safe-to-deploy"
 846
 847 [[exemptions.ordered-float]]
 848 version = "3.0.0"
 849 criteria = "safe-to-deploy"
 850
 851 [[exemptions.os_str_bytes]]
 852 version = "6.1.0"
 853 criteria = "safe-to-deploy"
 854
 855 [[exemptions.oslog]]
 856 version = "0.1.0"
 857 criteria = "safe-to-deploy"
 858
 859 [[exemptions.owning_ref]]
 860 version = "0.4.1"
 861 criteria = "safe-to-deploy"
 862
 863 [[exemptions.packed_simd_2]]
 864 version = "0.3.7"
 865 criteria = "safe-to-deploy"
 866
 867 [[exemptions.parking_lot]]
 868 version = "0.11.2"
 869 criteria = "safe-to-deploy"
 870
 871 [[exemptions.parking_lot_core]]
 872 version = "0.8.5"
 873 criteria = "safe-to-deploy"
 874
 875 [[exemptions.paste]]
 876 version = "1.0.7"
 877 criteria = "safe-to-deploy"
 878
 879 [[exemptions.peeking_take_while]]
 880 version = "0.1.2"
 881 criteria = "safe-to-deploy"
 882
 883 [[exemptions.phf]]
 884 version = "0.10.1"
 885 criteria = "safe-to-deploy"
 886
 887 [[exemptions.phf_codegen]]
 888 version = "0.10.0"
 889 criteria = "safe-to-deploy"
 890
 891 [[exemptions.phf_generator]]
 892 version = "0.10.0"
 893 criteria = "safe-to-deploy"
 894
 895 [[exemptions.phf_macros]]
 896 version = "0.10.0"
 897 criteria = "safe-to-deploy"
 898
 899 [[exemptions.phf_shared]]
 900 version = "0.10.0"
 901 criteria = "safe-to-deploy"
 902
 903 [[exemptions.pin-project-lite]]
 904 version = "0.2.9"
 905 criteria = "safe-to-deploy"
 906
 907 [[exemptions.pin-utils]]
 908 version = "0.1.0"
 909 criteria = "safe-to-deploy"
 910
 911 [[exemptions.pkg-config]]
 912 version = "0.3.25"
 913 criteria = "safe-to-deploy"
 914
 915 [[exemptions.plain]]
 916 version = "0.2.3"
 917 criteria = "safe-to-deploy"
 918
 919 [[exemptions.plist]]
 920 version = "1.3.1"
 921 criteria = "safe-to-run"
 922
 923 [[exemptions.ppv-lite86]]
 924 version = "0.2.16"
 925 criteria = "safe-to-deploy"
 926
 927 [[exemptions.proc-macro-error]]
 928 version = "1.0.4"
 929 criteria = "safe-to-deploy"
 930
 931 [[exemptions.proc-macro-error-attr]]
 932 version = "1.0.4"
 933 criteria = "safe-to-deploy"
 934
 935 [[exemptions.proc-macro-hack]]
 936 version = "0.5.19"
 937 criteria = "safe-to-deploy"
 938
 939 [[exemptions.profiling]]
 940 version = "1.0.6"
 941 criteria = "safe-to-deploy"
 942
 943 [[exemptions.prost]]
 944 version = "0.8.0"
 945 criteria = "safe-to-deploy"
 946
 947 [[exemptions.prost-derive]]
 948 version = "0.8.0"
 949 criteria = "safe-to-deploy"
 950
 951 [[exemptions.qlog]]
 952 version = "0.4.0"
 953 criteria = "safe-to-deploy"
 954
 955 [[exemptions.quick-error]]
 956 version = "1.2.3"
 957 criteria = "safe-to-deploy"
 958
 959 [[exemptions.rand]]
 960 version = "0.8.5"
 961 criteria = "safe-to-deploy"
 962
 963 [[exemptions.rand_chacha]]
 964 version = "0.3.1"
 965 criteria = "safe-to-deploy"
 966
 967 [[exemptions.rand_core]]
 968 version = "0.6.3"
 969 criteria = "safe-to-deploy"
 970
 971 [[exemptions.range-alloc]]
 972 version = "0.1.2"
 973 criteria = "safe-to-deploy"
 974
 975 [[exemptions.redox_syscall]]
 976 version = "0.2.13"
 977 criteria = "safe-to-deploy"
 978
 979 [[exemptions.regex]]
 980 version = "1.5.6"
 981 criteria = "safe-to-deploy"
 982
 983 [[exemptions.regex-syntax]]
 984 version = "0.6.26"
 985 criteria = "safe-to-deploy"
 986
 987 [[exemptions.remove_dir_all]]
 988 version = "0.5.3"
 989 criteria = "safe-to-deploy"
 990
 991 [[exemptions.renderdoc-sys]]
 992 version = "0.7.1"
 993 criteria = "safe-to-deploy"
 994
 995 [[exemptions.replace_with]]
 996 version = "0.1.7"
 997 criteria = "safe-to-deploy"
 998
 999 [[exemptions.ringbuf]]
1000 version = "0.2.8"
1001 criteria = "safe-to-deploy"
1002
1003 [[exemptions.ron]]
1004 version = "0.7.0"
1005 criteria = "safe-to-deploy"
1006
1007 [[exemptions.runloop]]
1008 version = "0.1.0"
1009 criteria = "safe-to-deploy"
1010
1011 [[exemptions.rusqlite]]
1012 version = "0.27.0"
1013 criteria = "safe-to-deploy"
1014
1015 [[exemptions.rust-ini]]
1016 version = "0.10.3"
1017 criteria = "safe-to-deploy"
1018
1019 [[exemptions.rust_cascade]]
1020 version = "1.4.0"
1021 criteria = "safe-to-deploy"
1022
1023 [[exemptions.rust_decimal]]
1024 version = "1.24.0"
1025 criteria = "safe-to-deploy"
1026
1027 [[exemptions.ryu]]
1028 version = "1.0.10"
1029 criteria = "safe-to-deploy"
1030
1031 [[exemptions.safemem]]
1032 version = "0.3.3"
1033 criteria = "safe-to-run"
1034
1035 [[exemptions.same-file]]
1036 version = "1.0.6"
1037 criteria = "safe-to-deploy"
1038
1039 [[exemptions.scoped-tls]]
1040 version = "1.0.0"
1041 criteria = "safe-to-run"
1042
1043 [[exemptions.scopeguard]]
1044 version = "1.1.0"
1045 criteria = "safe-to-deploy"
1046
1047 [[exemptions.scroll]]
1048 version = "0.10.2"
1049 criteria = "safe-to-deploy"
1050
1051 [[exemptions.scroll_derive]]
1052 version = "0.10.5"
1053 criteria = "safe-to-deploy"
1054
1055 [[exemptions.self_cell]]
1056 version = "0.10.2"
1057 criteria = "safe-to-deploy"
1058
1059 [[exemptions.semver]]
1060 version = "1.0.9"
1061 criteria = "safe-to-deploy"
1062
1063 [[exemptions.serde]]
1064 version = "1.0.137"
1065 criteria = "safe-to-deploy"
1066
1067 [[exemptions.serde_bytes]]
1068 version = "0.11.6"
1069 criteria = "safe-to-deploy"
1070
1071 [[exemptions.serde_derive]]
1072 version = "1.0.137"
1073 criteria = "safe-to-deploy"
1074
1075 [[exemptions.serde_json]]
1076 version = "1.0.81"
1077 criteria = "safe-to-deploy"
1078
1079 [[exemptions.serde_repr]]
1080 version = "0.1.8"
1081 criteria = "safe-to-run"
1082
1083 [[exemptions.serde_with]]
1084 version = "1.14.0"
1085 criteria = "safe-to-deploy"
1086
1087 [[exemptions.serde_with_macros]]
1088 version = "1.5.2"
1089 criteria = "safe-to-deploy"
1090
1091 [[exemptions.serde_yaml]]
1092 version = "0.8.24"
1093 criteria = "safe-to-run"
1094
1095 [[exemptions.sfv]]
1096 version = "0.9.2"
1097 criteria = "safe-to-deploy"
1098
1099 [[exemptions.sha1]]
1100 version = "0.10.0"
1101 criteria = "safe-to-run"
1102
1103 [[exemptions.sha2]]
1104 version = "0.10.2"
1105 criteria = "safe-to-deploy"
1106
1107 [[exemptions.shlex]]
1108 version = "1.1.0"
1109 criteria = "safe-to-deploy"
1110
1111 [[exemptions.siphasher]]
1112 version = "0.3.10"
1113 criteria = "safe-to-deploy"
1114
1115 [[exemptions.slab]]
1116 version = "0.4.6"
1117 criteria = "safe-to-deploy"
1118
1119 [[exemptions.smallbitvec]]
1120 version = "2.5.1"
1121 criteria = "safe-to-deploy"
1122
1123 [[exemptions.smallvec]]
1124 version = "1.8.0"
1125 criteria = "safe-to-deploy"
1126
1127 [[exemptions.socket2]]
1128 version = "0.4.4"
1129 criteria = "safe-to-deploy"
1130
1131 [[exemptions.spirv]]
1132 version = "0.2.0+1.5.4"
1133 criteria = "safe-to-deploy"
1134
1135 [[exemptions.stable_deref_trait]]
1136 version = "1.2.0"
1137 criteria = "safe-to-deploy"
1138
1139 [[exemptions.static_assertions]]
1140 version = "1.1.0"
1141 criteria = "safe-to-deploy"
1142
1143 [[exemptions.strsim]]
1144 version = "0.10.0"
1145 criteria = "safe-to-deploy"
1146
1147 [[exemptions.syn]]
1148 version = "1.0.96"
1149 criteria = "safe-to-deploy"
1150
1151 [[exemptions.tempfile]]
1152 version = "3.3.0"
1153 criteria = "safe-to-deploy"
1154
1155 [[exemptions.termcolor]]
1156 version = "1.1.3"
1157 criteria = "safe-to-deploy"
1158
1159 [[exemptions.terminal_size]]
1160 version = "0.1.17"
1161 criteria = "safe-to-deploy"
1162
1163 [[exemptions.textwrap]]
1164 version = "0.15.0"
1165 criteria = "safe-to-deploy"
1166
1167 [[exemptions.thiserror]]
1168 version = "1.0.31"
1169 criteria = "safe-to-deploy"
1170
1171 [[exemptions.thiserror-impl]]
1172 version = "1.0.31"
1173 criteria = "safe-to-deploy"
1174
1175 [[exemptions.threadbound]]
1176 version = "0.1.3"
1177 criteria = "safe-to-deploy"
1178
1179 [[exemptions.time]]
1180 version = "0.1.44"
1181 criteria = "safe-to-deploy"
1182
1183 [[exemptions.time]]
1184 version = "0.3.9"
1185 criteria = "safe-to-run"
1186
1187 [[exemptions.time-macros]]
1188 version = "0.2.4"
1189 criteria = "safe-to-run"
1190
1191 [[exemptions.tokio]]
1192 version = "1.17.0"
1193 criteria = "safe-to-run"
1194
1195 [[exemptions.tokio-macros]]
1196 version = "1.8.0"
1197 criteria = "safe-to-run"
1198
1199 [[exemptions.tokio-stream]]
1200 version = "0.1.9"
1201 criteria = "safe-to-run"
1202
1203 [[exemptions.tokio-util]]
1204 version = "0.7.2"
1205 criteria = "safe-to-run"
1206
1207 [[exemptions.toml]]
1208 version = "0.5.9"
1209 criteria = "safe-to-deploy"
1210
1211 [[exemptions.triple_buffer]]
1212 version = "5.0.6"
1213 criteria = "safe-to-deploy"
1214
1215 [[exemptions.type-map]]
1216 version = "0.4.0"
1217 criteria = "safe-to-deploy"
1218
1219 [[exemptions.typenum]]
1220 version = "1.15.0"
1221 criteria = "safe-to-deploy"
1222
1223 [[exemptions.unicode-ident]]
1224 version = "1.0.0"
1225 criteria = "safe-to-deploy"
1226
1227 [[exemptions.unicode-segmentation]]
1228 version = "1.9.0"
1229 criteria = "safe-to-deploy"
1230
1231 [[exemptions.unicode-width]]
1232 version = "0.1.9"
1233 criteria = "safe-to-deploy"
1234
1235 [[exemptions.unicode-xid]]
1236 version = "0.2.3"
1237 criteria = "safe-to-deploy"
1238
1239 [[exemptions.unix_path]]
1240 version = "1.0.1"
1241 criteria = "safe-to-run"
1242
1243 [[exemptions.unix_str]]
1244 version = "1.0.0"
1245 criteria = "safe-to-run"
1246
1247 [[exemptions.url]]
1248 version = "2.1.0"
1249 criteria = "safe-to-deploy"
1250
1251 [[exemptions.uuid]]
1252 version = "0.8.2"
1253 criteria = "safe-to-deploy"
1254
1255 [[exemptions.version_check]]
1256 version = "0.9.4"
1257 criteria = "safe-to-deploy"
1258
1259 [[exemptions.walkdir]]
1260 version = "2.3.2"
1261 criteria = "safe-to-deploy"
1262
1263 [[exemptions.warp]]
1264 version = "0.3.2"
1265 criteria = "safe-to-run"
1266
1267 [[exemptions.wasi]]
1268 version = "0.11.0+wasi-snapshot-preview1"
1269 criteria = "safe-to-deploy"
1270
1271 [[exemptions.webrtc-sdp]]
1272 version = "0.3.9"
1273 criteria = "safe-to-deploy"
1274
1275 [[exemptions.winapi]]
1276 version = "0.3.9"
1277 criteria = "safe-to-deploy"
1278
1279 [[exemptions.winapi-i686-pc-windows-gnu]]
1280 version = "0.4.0"
1281 criteria = "safe-to-deploy"
1282
1283 [[exemptions.winapi-util]]
1284 version = "0.1.5"
1285 criteria = "safe-to-deploy"
1286
1287 [[exemptions.winapi-x86_64-pc-windows-gnu]]
1288 version = "0.4.0"
1289 criteria = "safe-to-deploy"
1290
1291 [[exemptions.wio]]
1292 version = "0.2.2"
1293 criteria = "safe-to-deploy"
1294
1295 [[exemptions.xml-rs]]
1296 version = "0.8.4"
1297 criteria = "safe-to-deploy"
1298
1299 [[exemptions.yaml-rust]]
1300 version = "0.4.5"
1301 criteria = "safe-to-run"
1302
1303 [[exemptions.zeitstempel]]
1304 version = "0.1.1"
1305 criteria = "safe-to-deploy"
1306
1307 [[exemptions.zip]]
1308 version = "0.6.2"
1309 criteria = "safe-to-run"