2024-08-13 19:40:34 +02:00
# cargo-vet imports lock
[[publisher.aho-corasick]]
version = "1.1.3"
when = "2024-03-20"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.anstream]]
version = "0.6.15"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.anstyle]]
version = "1.0.8"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.anstyle-parse]]
version = "0.2.5"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.anstyle-query]]
version = "1.1.1"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.anyhow]]
version = "1.0.86"
when = "2024-05-18"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.ashpd]]
version = "0.9.1"
when = "2024-07-14"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.async-broadcast]]
version = "0.7.1"
when = "2024-06-02"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-channel]]
version = "2.3.1"
when = "2024-05-16"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-executor]]
version = "1.13.0"
when = "2024-07-16"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-fs]]
version = "2.1.2"
when = "2024-04-27"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-io]]
version = "2.3.3"
when = "2024-06-01"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-lock]]
version = "3.4.0"
when = "2024-06-01"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-net]]
version = "2.0.0"
when = "2023-10-29"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-task]]
version = "4.7.1"
when = "2024-04-27"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.async-trait]]
version = "0.1.81"
when = "2024-07-07"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.atomic-waker]]
version = "1.1.2"
when = "2023-09-25"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.blocking]]
version = "1.6.1"
when = "2024-05-26"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.byteorder]]
version = "1.5.0"
when = "2023-10-06"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.cairo-rs]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.cairo-sys-rs]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.cc]]
version = "1.1.7"
when = "2024-07-29"
user-id = 55123
user-login = "rust-lang-owner"
[[publisher.cfg-expr]]
version = "0.15.8"
when = "2024-04-10"
user-id = 52553
user-login = "embark-studios"
[[publisher.colorchoice]]
version = "1.0.2"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.concurrent-queue]]
version = "2.5.0"
when = "2024-04-26"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.cpufeatures]]
version = "0.2.7"
when = "2023-04-20"
user-id = 267
user-login = "tarcieri"
user-name = "Tony Arcieri"
[[publisher.crossbeam-utils]]
version = "0.8.20"
when = "2024-05-19"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.digest]]
version = "0.10.7"
when = "2023-05-19"
user-id = 267
user-login = "tarcieri"
user-name = "Tony Arcieri"
[[publisher.endi]]
version = "1.1.0"
when = "2023-12-12"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.env_filter]]
version = "0.1.2"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.env_logger]]
version = "0.11.5"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.event-listener]]
version = "5.3.1"
when = "2024-05-29"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.event-listener-strategy]]
version = "0.5.2"
when = "2024-04-27"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.flate2]]
version = "1.0.26"
when = "2023-04-28"
user-id = 4333
user-login = "joshtriplett"
user-name = "Josh Triplett"
[[publisher.futures-channel]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-core]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-executor]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-io]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-lite]]
version = "2.3.0"
when = "2024-03-17"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.futures-macro]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-sink]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-task]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.futures-util]]
version = "0.3.30"
when = "2023-12-24"
user-id = 33035
user-login = "taiki-e"
user-name = "Taiki Endo"
[[publisher.gdk-pixbuf]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.gdk-pixbuf-sys]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.gdk4]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gdk4-sys]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gdk4-wayland]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gdk4-wayland-sys]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gdk4-x11]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gdk4-x11-sys]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gio]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.gio-sys]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.glib]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.glib-macros]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.glib-sys]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.glycin]]
version = "2.0.0-beta"
when = "2024-08-02"
user-id = 195802
user-login = "sophie-h"
user-name = "Sophie Herold"
[[publisher.glycin-utils]]
version = "2.0.0-beta"
when = "2024-08-02"
user-id = 195802
user-login = "sophie-h"
user-name = "Sophie Herold"
[[publisher.gobject-sys]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.graphene-rs]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.graphene-sys]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.gsk4]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gsk4-sys]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gtk4]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gtk4-macros]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gtk4-sys]]
version = "0.9.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.gufo-common]]
version = "0.1.0"
when = "2024-07-30"
user-id = 195802
user-login = "sophie-h"
user-name = "Sophie Herold"
[[publisher.gufo-exif]]
version = "0.1.1"
when = "2024-07-30"
user-id = 195802
user-login = "sophie-h"
user-name = "Sophie Herold"
[[publisher.gvdb]]
version = "0.7.0"
when = "2024-07-12"
user-id = 156260
user-login = "felinira"
user-name = "Fina"
[[publisher.gvdb-macros]]
version = "0.1.13"
when = "2024-07-12"
user-id = 156260
user-login = "felinira"
user-name = "Fina"
[[publisher.gweather-sys]]
version = "4.5.0"
when = "2024-07-24"
user-id = 165052
user-login = "ItsJamie9494"
user-name = "Jamie"
[[publisher.hashbrown]]
version = "0.14.5"
when = "2024-04-28"
user-id = 2915
user-login = "Amanieu"
user-name = "Amanieu d'Antras"
[[publisher.indexmap]]
version = "2.3.0"
when = "2024-07-31"
user-id = 539
user-login = "cuviper"
user-name = "Josh Stone"
[[publisher.is_terminal_polyfill]]
version = "1.70.1"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.jobserver]]
version = "0.1.32"
when = "2024-07-23"
user-id = 55123
user-login = "rust-lang-owner"
[[publisher.kamadak-exif]]
version = "0.5.5"
when = "2022-10-22"
user-id = 5577
user-login = "kamadak"
user-name = "KAMADA Ken'ichi"
[[publisher.libadwaita]]
version = "0.7.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.libadwaita-sys]]
version = "0.7.0"
when = "2024-07-10"
user-id = 54339
user-login = "bilelmoussaoui"
user-name = "Bilal Elmoussaoui"
[[publisher.libc]]
version = "0.2.155"
when = "2024-05-17"
user-id = 5820
user-login = "the8472"
[[publisher.libgweather]]
version = "4.5.0"
when = "2024-07-24"
user-id = 165052
user-login = "ItsJamie9494"
user-name = "Jamie"
[[publisher.linux-raw-sys]]
version = "0.4.14"
when = "2024-05-17"
user-id = 6825
user-login = "sunfishcode"
user-name = "Dan Gohman"
[[publisher.log]]
version = "0.4.22"
when = "2024-06-28"
user-id = 3204
user-login = "KodrAus"
user-name = "Ashley Mannix"
[[publisher.memchr]]
version = "2.7.4"
when = "2024-06-14"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.mutate_once]]
version = "0.1.1"
when = "2019-12-12"
user-id = 5577
user-login = "kamadak"
user-name = "KAMADA Ken'ichi"
[[publisher.pango]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.pango-sys]]
version = "0.20.0"
when = "2024-07-10"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.parking]]
version = "2.2.0"
when = "2023-10-18"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.paste]]
version = "1.0.15"
when = "2024-05-07"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.piper]]
version = "0.2.3"
when = "2024-06-01"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.pkg-config]]
version = "0.3.30"
when = "2024-02-14"
user-id = 3623
user-login = "sdroege"
user-name = "Sebastian Dröge"
[[publisher.polling]]
version = "3.7.2"
when = "2024-06-15"
user-id = 69526
user-login = "notgull"
user-name = "John Nunley"
[[publisher.regex]]
version = "1.10.6"
when = "2024-08-02"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.regex-automata]]
version = "0.1.10"
when = "2021-06-01"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.regex-automata]]
version = "0.4.7"
when = "2024-06-09"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.regex-syntax]]
version = "0.6.29"
when = "2023-03-21"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.regex-syntax]]
version = "0.8.4"
when = "2024-06-09"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.rustix]]
version = "0.38.34"
when = "2024-04-22"
user-id = 6825
user-login = "sunfishcode"
user-name = "Dan Gohman"
[[publisher.ryu]]
version = "1.0.18"
when = "2024-05-07"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.same-file]]
version = "1.0.6"
when = "2020-01-11"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.serde_json]]
version = "1.0.122"
when = "2024-08-01"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.serde_repr]]
version = "0.1.19"
when = "2024-04-08"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.serde_spanned]]
version = "0.6.7"
when = "2024-07-25"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.sha1]]
version = "0.10.6"
when = "2023-09-21"
user-id = 5059
user-login = "newpavlov"
user-name = "Artyom Pavlov"
[[publisher.slab]]
version = "0.4.9"
when = "2023-08-22"
user-id = 6741
user-login = "Darksonn"
user-name = "Alice Ryhl"
[[publisher.smallvec]]
version = "1.13.2"
when = "2024-03-20"
user-id = 2017
user-login = "mbrubeck"
user-name = "Matt Brubeck"
[[publisher.syn]]
version = "2.0.72"
when = "2024-07-21"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.system-deps]]
version = "7.0.1"
when = "2024-06-18"
user-id = 52034
user-login = "gdesmott"
user-name = "Guillaume Desmottes"
2024-09-03 12:13:49 +02:00
[[publisher.system-deps]]
version = "7.0.2"
when = "2024-08-16"
user-id = 52034
user-login = "gdesmott"
user-name = "Guillaume Desmottes"
2024-08-13 19:40:34 +02:00
[[publisher.target-lexicon]]
version = "0.12.16"
when = "2024-07-30"
user-id = 696
user-login = "fitzgen"
user-name = "Nick Fitzgerald"
[[publisher.thiserror]]
version = "1.0.63"
when = "2024-07-17"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.thiserror-impl]]
version = "1.0.63"
when = "2024-07-17"
user-id = 3618
user-login = "dtolnay"
user-name = "David Tolnay"
[[publisher.toml]]
version = "0.8.19"
when = "2024-07-31"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.toml_datetime]]
version = "0.6.8"
when = "2024-07-30"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.toml_edit]]
version = "0.21.1"
when = "2024-01-31"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.toml_edit]]
version = "0.22.20"
when = "2024-07-31"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.tracing]]
version = "0.1.40"
when = "2023-10-19"
user-id = 1249
user-login = "hawkw"
user-name = "Eliza Weisman"
[[publisher.tracing-attributes]]
version = "0.1.27"
when = "2023-10-13"
user-id = 1249
user-login = "hawkw"
user-name = "Eliza Weisman"
[[publisher.tracing-core]]
version = "0.1.32"
when = "2023-10-13"
user-id = 1249
user-login = "hawkw"
user-name = "Eliza Weisman"
[[publisher.tracing-log]]
version = "0.2.0"
when = "2023-10-25"
user-id = 1249
user-login = "hawkw"
user-name = "Eliza Weisman"
[[publisher.unicode-normalization]]
version = "0.1.23"
when = "2024-02-20"
user-id = 1139
user-login = "Manishearth"
user-name = "Manish Goregaokar"
[[publisher.walkdir]]
version = "2.5.0"
when = "2024-03-01"
user-id = 189
user-login = "BurntSushi"
user-name = "Andrew Gallant"
[[publisher.winnow]]
version = "0.5.40"
when = "2024-02-12"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.winnow]]
version = "0.6.18"
when = "2024-07-31"
user-id = 6743
user-login = "epage"
user-name = "Ed Page"
[[publisher.xdg-home]]
version = "1.2.0"
when = "2024-06-08"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.zbus]]
version = "4.4.0"
when = "2024-07-22"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.zbus_macros]]
version = "4.4.0"
when = "2024-07-22"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.zbus_names]]
version = "3.0.0"
when = "2024-02-12"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.zerocopy]]
version = "0.6.6"
when = "2023-12-14"
user-id = 7178
user-login = "joshlf"
user-name = "Joshua Liebow-Feeser"
[[publisher.zerocopy]]
version = "0.7.35"
when = "2024-07-02"
user-id = 7178
user-login = "joshlf"
user-name = "Joshua Liebow-Feeser"
[[publisher.zerocopy-derive]]
version = "0.6.6"
when = "2023-12-14"
user-id = 7178
user-login = "joshlf"
user-name = "Joshua Liebow-Feeser"
[[publisher.zerocopy-derive]]
version = "0.7.35"
when = "2024-07-02"
user-id = 7178
user-login = "joshlf"
user-name = "Joshua Liebow-Feeser"
[[publisher.zvariant]]
version = "4.2.0"
when = "2024-07-19"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.zvariant_derive]]
version = "4.2.0"
when = "2024-07-19"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[publisher.zvariant_utils]]
version = "2.1.0"
when = "2024-07-19"
user-id = 6423
user-login = "zeenix"
user-name = "Zeeshan Ali Khan"
[[audits.bytecode-alliance.audits.adler]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "1.0.2"
notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
[[audits.bytecode-alliance.audits.block-buffer]]
who = "Benjamin Bouvier <public@benj.me>"
criteria = "safe-to-deploy"
delta = "0.9.0 -> 0.10.2"
[[audits.bytecode-alliance.audits.cfg-if]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "1.0.0"
notes = "I am the author of this crate."
[[audits.bytecode-alliance.audits.crypto-common]]
who = "Benjamin Bouvier <public@benj.me>"
criteria = "safe-to-deploy"
version = "0.1.3"
[[audits.bytecode-alliance.audits.errno]]
who = "Dan Gohman <dev@sunfishcode.online>"
criteria = "safe-to-deploy"
version = "0.3.0"
notes = "This crate uses libc and windows-sys APIs to get and set the raw OS error value."
[[audits.bytecode-alliance.audits.errno]]
who = "Dan Gohman <dev@sunfishcode.online>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.3.1"
notes = "Just a dependency version bump and a bug fix for redox"
[[audits.bytecode-alliance.audits.fastrand]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
delta = "2.0.0 -> 2.0.1"
notes = """
This update had a few doc updates but no otherwise-substantial source code
updates.
"""
[[audits.bytecode-alliance.audits.flate2]]
who = "Andrew Brown <andrew.brown@intel.com>"
criteria = "safe-to-deploy"
delta = "1.0.26 -> 1.0.28"
notes = "No new `unsafe` and no large changes in function. This diff is mostly refactoring with a lot of docs, CI, test changes. Adds some defensive clearing out of certain variables as a safeguard."
[[audits.bytecode-alliance.audits.foreign-types]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.3.2"
notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
[[audits.bytecode-alliance.audits.foreign-types-shared]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.1.1"
[[audits.bytecode-alliance.audits.heck]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
delta = "0.4.1 -> 0.5.0"
notes = "Minor changes for a `no_std` upgrade but otherwise everything looks as expected."
[[audits.bytecode-alliance.audits.idna]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "0.3.0"
notes = """
This is a crate without unsafe code or usage of the standard library. The large
size of this crate comes from the large generated unicode tables file. This
crate is broadly used throughout the ecosystem and does not contain anything
suspicious.
"""
[[audits.bytecode-alliance.audits.matchers]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
[[audits.bytecode-alliance.audits.memfd]]
who = "Dan Gohman <dev@sunfishcode.online>"
criteria = "safe-to-deploy"
version = "0.6.2"
notes = """
The only changes from 0.6.1 were from my own PR which updated memfd to newer
dependencies.
"""
[[audits.bytecode-alliance.audits.memfd]]
who = "Dan Gohman <dev@sunfishcode.online>"
criteria = "safe-to-deploy"
delta = "0.6.2 -> 0.6.3"
notes = "Just a dependency version bump and documentation update"
[[audits.bytecode-alliance.audits.memfd]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
delta = "0.6.3 -> 0.6.4"
notes = "This commit only updated the dependency `rustix`, so same as before."
[[audits.bytecode-alliance.audits.miniz_oxide]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "0.7.1"
notes = """
This crate is a Rust implementation of zlib compression/decompression and has
been used by default by the Rust standard library for quite some time. It's also
a default dependency of the popular `backtrace` crate for decompressing debug
information. This crate forbids unsafe code and does not otherwise access system
resources. It's originally a port of the `miniz.c` library as well, and given
its own longevity should be relatively hardened against some of the more common
compression-related issues.
"""
[[audits.bytecode-alliance.audits.nu-ansi-term]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.46.0"
notes = "one use of unsafe to call windows specific api to get console handle."
[[audits.bytecode-alliance.audits.num-traits]]
who = "Andrew Brown <andrew.brown@intel.com>"
criteria = "safe-to-deploy"
version = "0.2.19"
notes = "As advertised: a numeric library. The only `unsafe` is from some float-to-int conversions, which seems expected."
[[audits.bytecode-alliance.audits.overload]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.1.1"
notes = "small crate, only defines macro-rules!, nicely documented as well"
[[audits.bytecode-alliance.audits.percent-encoding]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "2.2.0"
notes = """
This crate is a single-file crate that does what it says on the tin. There are
a few `unsafe` blocks related to utf-8 validation which are locally verifiable
as correct and otherwise this crate is good to go.
"""
[[audits.bytecode-alliance.audits.pin-utils]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
[[audits.bytecode-alliance.audits.semver]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "1.0.17"
notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
[[audits.bytecode-alliance.audits.sharded-slab]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.1.4"
notes = "I always really enjoy reading eliza's code, she left perfect comments at every use of unsafe."
[[audits.bytecode-alliance.audits.static_assertions]]
who = "Andrew Brown <andrew.brown@intel.com>"
criteria = "safe-to-deploy"
version = "1.1.0"
notes = "No dependencies and completely a compile-time crate as advertised. Uses `unsafe` in one module as a compile-time check only: `mem::transmute` and `ptr::write` are wrapped in an impossible-to-run closure."
[[audits.bytecode-alliance.audits.thread_local]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "1.1.4"
notes = "uses unsafe to implement thread local storage of objects"
[[audits.bytecode-alliance.audits.tinyvec]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "1.6.0"
notes = """
This crate, while it implements collections, does so without `std::*` APIs and
without `unsafe`. Skimming the crate everything looks reasonable and what one
would expect from idiomatic safe collections in Rust.
"""
[[audits.bytecode-alliance.audits.tinyvec_macros]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = """
This is a trivial crate which only contains a singular macro definition which is
intended to multiplex across the internal representation of a tinyvec,
presumably. This trivially doesn't contain anything bad.
"""
[[audits.bytecode-alliance.audits.tracing-subscriber]]
who = "Pat Hickey <phickey@fastly.com>"
criteria = "safe-to-deploy"
version = "0.3.17"
[[audits.bytecode-alliance.audits.unicode-bidi]]
who = "Alex Crichton <alex@alexcrichton.com>"
criteria = "safe-to-deploy"
version = "0.3.8"
notes = """
This crate has no unsafe code and does not use `std::*`. Skimming the crate it
does not attempt to out of the bounds of what it's already supposed to be doing.
"""
[[audits.embark-studios.wildcard-audits.cfg-expr]]
who = "Jake Shadle <opensource@embark-studios.com>"
criteria = "safe-to-deploy"
user-id = 52553 # embark-studios
start = "2020-01-01"
end = "2024-05-23"
notes = "Maintained by Embark. No unsafe usage or ambient capabilities"
[[audits.embark-studios.audits.cfg_aliases]]
who = "Johan Andersson <opensource@embark-studios.com>"
criteria = "safe-to-deploy"
version = "0.1.1"
notes = "No unsafe usage or ambient capabilities"
[[audits.embark-studios.audits.idna]]
who = "Johan Andersson <opensource@embark-studios.com>"
criteria = "safe-to-deploy"
delta = "0.3.0 -> 0.4.0"
notes = "No unsafe usage or ambient capabilities"
[[audits.embark-studios.audits.utf8parse]]
who = "Johan Andersson <opensource@embark-studios.com>"
criteria = "safe-to-deploy"
version = "0.2.1"
notes = "Single unsafe usage that looks sound, no ambient capabilities"
[[audits.embark-studios.audits.valuable]]
who = "Johan Andersson <opensource@embark-studios.com>"
criteria = "safe-to-deploy"
version = "0.1.0"
notes = "No unsafe usage or ambient capabilities, sane build script"
[[audits.embark-studios.audits.version-compare]]
who = "Johan Andersson <opensource@embark-studios.com>"
criteria = "safe-to-deploy"
version = "0.1.1"
notes = "No unsafe usage or ambient capabilities"
[[audits.gnome.wildcard-audits.ashpd]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2020-09-14"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.cairo-rs]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2021-07-08"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.cairo-sys-rs]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2021-10-16"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.endi]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2023-12-10"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk-pixbuf]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2022-01-15"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk-pixbuf-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2022-01-15"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk4]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk4-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk4-wayland]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk4-wayland-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk4-x11]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gdk4-x11-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gio]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2020-08-28"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gio-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2020-09-16"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.glib]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2020-02-14"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.glib-macros]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2021-07-08"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.glib-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2020-09-16"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.glycin]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 195802 # Sophie Herold (sophie-h)
start = "2023-06-10"
end = "2025-07-25"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.glycin-utils]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 195802 # Sophie Herold (sophie-h)
start = "2023-06-10"
end = "2025-07-25"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gobject-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2022-01-15"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.graphene-rs]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2021-04-04"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.graphene-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2021-04-04"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gsk4]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gsk4-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gtk4]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gtk4-macros]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gtk4-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-07-12"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gufo-common]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 195802 # Sophie Herold (sophie-h)
start = "2024-06-27"
end = "2025-07-30"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gufo-exif]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 195802 # Sophie Herold (sophie-h)
start = "2024-06-27"
end = "2025-07-30"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gvdb]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 156260 # Fina (felinira)
start = "2022-04-21"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gvdb-macros]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 156260 # Fina (felinira)
start = "2022-04-21"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.gweather-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 165052 # Jamie (ItsJamie9494)
start = "2022-06-19"
end = "2025-07-25"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.libadwaita]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-06-23"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.libadwaita-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
start = "2021-06-23"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.libgweather]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 165052 # Jamie (ItsJamie9494)
start = "2022-06-19"
end = "2025-07-25"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.pango]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2020-08-11"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.pango-sys]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2022-01-15"
end = "2025-07-20"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.pkg-config]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3623 # Sebastian Dröge (sdroege)
start = "2019-07-25"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.xdg-home]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2023-03-28"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.zbus]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2020-07-19"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.zbus_macros]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2020-07-19"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.zbus_names]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2021-07-30"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.zvariant]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2019-12-30"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.zvariant_derive]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2020-05-22"
end = "2025-07-22"
notes = "GNOME contributor"
[[audits.gnome.wildcard-audits.zvariant_utils]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6423 # Zeeshan Ali Khan (zeenix)
start = "2023-03-07"
end = "2025-07-22"
notes = "GNOME contributor"
[audits.gnome.audits]
[[audits.gnome-trusted.wildcard-audits.async-broadcast]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2024-06-02"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-channel]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-07-08"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-executor]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-07"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-fs]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-10-18"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-io]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-03-22"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-lock]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-03-02"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-net]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-09-25"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.async-task]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-03-24"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.atomic-waker]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-07"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.blocking]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-07"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.cc]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 55123 # rust-lang-owner
start = "2022-10-29"
end = "2025-07-25"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.concurrent-queue]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-07"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.cpufeatures]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 267 # Tony Arcieri (tarcieri)
start = "2021-04-26"
end = "2025-07-22"
notes = "RustCrypto/ repo"
[[audits.gnome-trusted.wildcard-audits.digest]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 267 # Tony Arcieri (tarcieri)
start = "2020-06-10"
end = "2025-07-22"
notes = "RustCrypto/ repo"
[[audits.gnome-trusted.wildcard-audits.event-listener]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-09-10"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.event-listener-strategy]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-09-11"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.flate2]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 4333 # Josh Triplett (joshtriplett)
start = "2020-09-30"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-channel]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-core]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-executor]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-io]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-lite]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-07"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-macro]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-sink]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-task]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2019-07-29"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.futures-util]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 33035 # Taiki Endo (taiki-e)
start = "2020-10-05"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.hashbrown]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 2915 # Amanieu d'Antras (Amanieu)
start = "2019-04-02"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.jobserver]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 55123 # rust-lang-owner
start = "2024-07-23"
end = "2025-07-25"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.libc]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 5820 # the8472
start = "2024-05-17"
end = "2025-07-22"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.log]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 3204 # Ashley Mannix (KodrAus)
start = "2019-07-10"
end = "2025-07-25"
notes = "rust-lang/ repo"
[[audits.gnome-trusted.wildcard-audits.parking]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-07"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.piper]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-04-24"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.polling]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 69526 # John Nunley (notgull)
start = "2023-03-08"
end = "2025-07-22"
notes = "smol-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.rustix]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6825 # Dan Gohman (sunfishcode)
start = "2021-10-29"
end = "2025-07-25"
notes = "bytecodealliance/ repo"
[[audits.gnome-trusted.wildcard-audits.sha1]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 5059 # Artyom Pavlov (newpavlov)
start = "2022-01-17"
end = "2025-07-22"
notes = "RustCrypto/ repo"
[[audits.gnome-trusted.wildcard-audits.slab]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 6741 # Alice Ryhl (Darksonn)
start = "2021-10-13"
end = "2025-07-25"
notes = "tokio-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.tracing]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 1249 # Eliza Weisman (hawkw)
start = "2019-06-28"
end = "2025-07-22"
notes = "tokio-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.tracing-attributes]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 1249 # Eliza Weisman (hawkw)
start = "2019-08-08"
end = "2025-07-22"
notes = "tokio-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.tracing-core]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 1249 # Eliza Weisman (hawkw)
start = "2019-06-20"
end = "2025-07-22"
notes = "tokio-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.tracing-log]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 1249 # Eliza Weisman (hawkw)
start = "2019-06-27"
end = "2025-07-25"
notes = "tokio-rs/ repo"
[[audits.gnome-trusted.wildcard-audits.zerocopy]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 7178 # Joshua Liebow-Feeser (joshlf)
start = "2019-02-28"
end = "2025-07-22"
notes = "google/ repo"
[[audits.gnome-trusted.wildcard-audits.zerocopy-derive]]
who = "Sophie Herold <sophie@hemio.de>"
criteria = "safe-to-deploy"
user-id = 7178 # Joshua Liebow-Feeser (joshlf)
start = "2019-02-28"
end = "2025-07-22"
notes = "google/ repo"
[audits.gnome-trusted.audits]
[[audits.google.audits.autocfg]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.1.0"
notes = """
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
and there were no hits except for reasonable, client-controlled usage of
`std::fs` in `AutoCfg::with_dir`.
This crate has been added to Chromium in
https://source.chromium.org/chromium/chromium/src/+/591a0f30c5eac93b6a3d981c2714ffa4db28dbcb
The CL description contains a link to a Google-internal document with audit details.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.autocfg]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.1.0 -> 1.2.0"
notes = '''
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
and nothing changed from the baseline audit of 1.1.0. Skimmed through the
1.1.0 => 1.2.0 delta and everything seemed okay.
'''
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.bitflags]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.3.2"
notes = """
Security review of earlier versions of the crate can be found at
(Google-internal, sorry): go/image-crate-chromium-security-review
The crate exposes a function marked as `unsafe`, but doesn't use any
`unsafe` blocks (except for tests of the single `unsafe` function). I
think this justifies marking this crate as `ub-risk-1`.
Additional review comments can be found at https://crrev.com/c/4723145/31
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.bitflags]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "2.4.2"
notes = """
Audit notes:
* I've checked for any discussion in Google-internal cl/546819168 (where audit
of version 2.3.3 happened)
* `src/lib.rs` contains `#![cfg_attr(not(test), forbid(unsafe_code))]`
* There are 2 cases of `unsafe` in `src/external.rs` but they seem to be
correct in a straightforward way - they just propagate the marker trait's
impl (e.g. `impl bytemuck::Pod`) from the inner to the outer type
* Additional discussion and/or notes may be found in https://crrev.com/c/5238056
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.bitflags]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "2.4.2 -> 2.5.0"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.bitflags]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "2.5.0 -> 2.6.0"
notes = "The changes from the previous version are negligible and thus it retains the same properties."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.bytemuck]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.16.3"
notes = """
Review notes from the original audit (of 1.14.3) may be found in
https://crrev.com/c/5362675. Note that this audit has initially missed UB risk
that was fixed in 1.16.2 - see https://github.com/Lokathor/bytemuck/pull/258.
Because of this, the original audit has been edited to certify version `1.16.3`
instead (see also https://crrev.com/c/5771867).
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.crc32fast]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.4.2"
notes = """
Security review of earlier versions of the crate can be found at
(Google-internal, sorry): go/image-crate-chromium-security-review
Audit comments for 1.4.2 can be found at https://crrev.com/c/4723145.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.equivalent]]
who = "George Burgess IV <gbiv@google.com>"
criteria = "safe-to-deploy"
version = "1.0.1"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.fastrand]]
who = "George Burgess IV <gbiv@google.com>"
criteria = "safe-to-deploy"
version = "1.9.0"
notes = """
`does-not-implement-crypto` is certified because this crate explicitly says
that the RNG here is not cryptographically secure.
"""
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.google.audits.getrandom]]
who = "David Koloski <dkoloski@google.com>"
criteria = "safe-to-deploy"
delta = "0.2.2 -> 0.2.12"
notes = "Audited at https://fxrev.dev/932979"
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.heck]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "0.4.1"
notes = """
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
and there were no hits.
`heck` (version `0.3.3`) has been added to Chromium in
https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24c97e7a8f4057
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.itoa]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.10"
notes = '''
I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
There are a few places where `unsafe` is used. Unsafe review notes can be found
in https://crrev.com/c/5350697.
Version 1.0.1 of this crate has been added to Chromium in
https://crrev.com/c/3321896.
'''
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.itoa]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.10 -> 1.0.11"
notes = """
Straightforward diff between 1.0.10 and 1.0.11 - only 3 commits:
* Bumping up the version
* A touch up of comments
* And my own PR to make `unsafe` blocks more granular:
https://github.com/dtolnay/itoa/pull/42
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.lazy_static]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.4.0"
notes = '''
I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
There are two places where `unsafe` is used. Unsafe review notes can be found
in https://crrev.com/c/5347418.
This crate has been added to Chromium in https://crrev.com/c/3321895.
'''
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.lazy_static]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.4.0 -> 1.5.0"
notes = "Unsafe review notes: https://crrev.com/c/5650836"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.pin-project-lite]]
who = "David Koloski <dkoloski@google.com>"
criteria = "safe-to-deploy"
version = "0.2.9"
notes = "Reviewed on https://fxrev.dev/824504"
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.pin-project-lite]]
who = "David Koloski <dkoloski@google.com>"
criteria = "safe-to-deploy"
delta = "0.2.9 -> 0.2.13"
notes = "Audited at https://fxrev.dev/946396"
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.78"
notes = """
Grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits
(except for a benign \"fs\" hit in a doc comment)
Notes from the `unsafe` review can be found in https://crrev.com/c/5385745.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.78 -> 1.0.79"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.79 -> 1.0.80"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.80 -> 1.0.81"
notes = "Comment changes only"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "danakj <danakj@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.81 -> 1.0.82"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.82 -> 1.0.83"
notes = "Substantive change is replacing String with Box<str>, saving memory."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.83 -> 1.0.84"
notes = "Only doc comment changes in `src/lib.rs`."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "danakj@chromium.org"
criteria = "safe-to-deploy"
delta = "1.0.84 -> 1.0.85"
notes = "Test-only changes."
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.proc-macro2]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.85 -> 1.0.86"
notes = """
Comment-only changes in `build.rs`.
Reordering of `Cargo.toml` entries.
Just bumping up the version number in `lib.rs`.
Config-related changes in `test_size.rs`.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.quote]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.35"
notes = """
Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits
(except for benign \"net\" hit in tests and \"fs\" hit in README.md)
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.quote]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.35 -> 1.0.36"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.rustversion]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.14"
notes = """
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
and there were no hits except for:
* Using trivially-safe `unsafe` in test code:
```
tests/test_const.rs:unsafe fn _unsafe() {}
tests/test_const.rs:const _UNSAFE: () = unsafe { _unsafe() };
```
* Using `unsafe` in a string:
```
src/constfn.rs: \"unsafe\" => Qualifiers::Unsafe,
```
* Using `std::fs` in `build/build.rs` to write `${OUT_DIR}/version.expr`
which is later read back via `include!` used in `src/lib.rs`.
Version `1.0.6` of this crate has been added to Chromium in
https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24c97e7a8f4057
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.rustversion]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.14 -> 1.0.15"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.rustversion]]
who = "danakj <danakj@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.15 -> 1.0.16"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.rustversion]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.16 -> 1.0.17"
notes = "Just updates windows compat"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.197"
notes = """
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'`, `'\bunsafe\b'`.
There were some hits for `net`, but they were related to serialization and
not actually opening any connections or anything like that.
There were 2 hits of `unsafe` when grepping:
* In `fn as_str` in `impl Buf`
* In `fn serialize` in `impl Serialize for net::Ipv4Addr`
Unsafe review comments can be found in https://crrev.com/c/5350573/2 (this
review also covered `serde_json_lenient`).
Version 1.0.130 of the crate has been added to Chromium in
https://crrev.com/c/3265545. The CL description contains a link to a
(Google-internal, sorry) document with a mini security review.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.197 -> 1.0.198"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde]]
who = "danakj <danakj@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.198 -> 1.0.201"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.201 -> 1.0.202"
notes = "Trivial changes"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.202 -> 1.0.203"
notes = "s/doc_cfg/docsrs/ + tuple_impls/tuple_impl_body-related changes"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.203 -> 1.0.204"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde_derive]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.197"
notes = "Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde_derive]]
who = "danakj <danakj@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.197 -> 1.0.201"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde_derive]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.201 -> 1.0.202"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde_derive]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.202 -> 1.0.203"
notes = "Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.serde_derive]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.0.203 -> 1.0.204"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.strum]]
who = "danakj@chromium.org"
criteria = "safe-to-deploy"
version = "0.25.0"
notes = """
Reviewed in https://crrev.com/c/5171063
Previously reviewed during security review and the audit is grandparented in.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.strum_macros]]
who = "danakj@chromium.org"
criteria = "safe-to-deploy"
version = "0.25.3"
notes = """
Reviewed in https://crrev.com/c/5171063
Previously reviewed during security review and the audit is grandparented in.
"""
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.tinyvec]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.6.0 -> 1.6.1"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.tinyvec]]
who = "Adrian Taylor <adetaylor@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.6.1 -> 1.7.0"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.tinyvec]]
who = "Dustin J. Mitchell <djmitche@chromium.org>"
criteria = "safe-to-deploy"
delta = "1.7.0 -> 1.8.0"
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.unicode-ident]]
who = "Lukasz Anforowicz <lukasza@chromium.org>"
criteria = "safe-to-deploy"
version = "1.0.12"
notes = '''
I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
All two functions from the public API of this crate use `unsafe` to avoid bound
checks for an array access. Cross-module analysis shows that the offsets can
be statically proven to be within array bounds. More details can be found in
the unsafe review CL at https://crrev.com/c/5350386.
This crate has been added to Chromium in https://crrev.com/c/3891618.
'''
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
[[audits.google.audits.version_check]]
who = "George Burgess IV <gbiv@google.com>"
criteria = "safe-to-deploy"
version = "0.9.4"
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
[[audits.isrg.audits.block-buffer]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
version = "0.9.0"
[[audits.isrg.audits.getrandom]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
delta = "0.2.12 -> 0.2.14"
[[audits.isrg.audits.getrandom]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
delta = "0.2.14 -> 0.2.15"
[[audits.isrg.audits.once_cell]]
who = "Brandon Pitman <bran@bran.land>"
criteria = "safe-to-deploy"
delta = "1.17.1 -> 1.17.2"
[[audits.isrg.audits.once_cell]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
delta = "1.17.2 -> 1.18.0"
[[audits.isrg.audits.once_cell]]
who = "Brandon Pitman <bran@bran.land>"
criteria = "safe-to-deploy"
delta = "1.18.0 -> 1.19.0"
[[audits.isrg.audits.rand_chacha]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
version = "0.3.1"
[[audits.isrg.audits.rand_core]]
who = "David Cook <dcook@divviup.org>"
criteria = "safe-to-deploy"
version = "0.6.3"
[[audits.mozilla.wildcard-audits.unicode-normalization]]
who = "Manish Goregaokar <manishsmail@gmail.com>"
criteria = "safe-to-deploy"
user-id = 1139 # Manish Goregaokar (Manishearth)
start = "2019-11-06"
end = "2024-05-03"
notes = "All code written or reviewed by Manish"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.block-buffer]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.10.2 -> 0.10.3"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.cpufeatures]]
who = "Gabriele Svelto <gsvelto@mozilla.com>"
criteria = "safe-to-deploy"
delta = "0.2.7 -> 0.2.8"
notes = "This release contains a single fix for an issue that affected Firefox"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.crypto-common]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.1.3 -> 0.1.6"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.errno]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.3.1 -> 0.3.3"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.fastrand]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "1.9.0 -> 2.0.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.flate2]]
who = "Alex Franchuk <afranchuk@mozilla.com>"
criteria = "safe-to-deploy"
delta = "1.0.28 -> 1.0.30"
notes = "Some new unsafe code, however it has been verified and there are unit tests as well."
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.foreign-types]]
who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
criteria = "safe-to-deploy"
delta = "0.3.2 -> 0.5.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.foreign-types-macros]]
who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
criteria = "safe-to-deploy"
version = "0.2.3"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.foreign-types-shared]]
who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
criteria = "safe-to-deploy"
delta = "0.1.1 -> 0.3.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.form_urlencoded]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
version = "1.2.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.form_urlencoded]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
delta = "1.2.0 -> 1.2.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.hex]]
who = "Simon Friedberger <simon@mozilla.com>"
criteria = "safe-to-deploy"
version = "0.4.3"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.idna]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
delta = "0.4.0 -> 0.5.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.litrs]]
who = "Erich Gubler <erichdongubler@gmail.com>"
criteria = "safe-to-deploy"
version = "0.4.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.malloc_buf]]
who = "Bobby Holley <bobbyholley@gmail.com>"
criteria = "safe-to-deploy"
version = "0.0.6"
notes = """
Very small crate for managing malloc-ed buffers, primarily for use in the objc crate.
There is an edge-case condition that passes slice::from_raw_parts(0x1, 0) which I'm
not entirely certain is technically sound, but in either case I am reasonably confident
it's not exploitable.
"""
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.memmap2]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.5.4 -> 0.5.7"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.memmap2]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.5.7 -> 0.5.8"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.memmap2]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.5.8 -> 0.5.9"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.memmap2]]
who = "Gabriele Svelto <gsvelto@mozilla.com>"
criteria = "safe-to-deploy"
delta = "0.5.9 -> 0.8.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.memmap2]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.8.0 -> 0.9.3"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.once_cell]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "1.12.0 -> 1.13.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.once_cell]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "1.13.1 -> 1.16.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.once_cell]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "1.16.0 -> 1.17.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.percent-encoding]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
delta = "2.2.0 -> 2.3.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.percent-encoding]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
delta = "2.3.0 -> 2.3.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.ppv-lite86]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.2.16 -> 0.2.17"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.rand_core]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "0.6.3 -> 0.6.4"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.typenum]]
who = "Mike Hommey <mh+mozilla@glandium.org>"
criteria = "safe-to-deploy"
delta = "1.15.0 -> 1.16.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.unicode-bidi]]
who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
criteria = "safe-to-deploy"
delta = "0.3.8 -> 0.3.13"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.unicode-bidi]]
who = "Jonathan Kew <jkew@mozilla.com>"
criteria = "safe-to-deploy"
delta = "0.3.13 -> 0.3.14"
notes = "I am the author of the bulk of the upstream changes in this version, and also checked the remaining post-0.3.13 changes."
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.unicode-bidi]]
who = "Jonathan Kew <jfkthame@gmail.com>"
criteria = "safe-to-deploy"
delta = "0.3.14 -> 0.3.15"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.url]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
version = "2.4.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.url]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
delta = "2.4.0 -> 2.4.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.url]]
who = "Valentin Gosu <valentin.gosu@gmail.com>"
criteria = "safe-to-deploy"
delta = "2.4.1 -> 2.5.0"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.mozilla.audits.url]]
who = "Henri Sivonen <hsivonen@hsivonen.fi>"
criteria = "safe-to-deploy"
delta = "2.5.0 -> 2.5.1"
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
[[audits.zcash.audits.autocfg]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "1.2.0 -> 1.3.0"
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
[[audits.zcash.audits.block-buffer]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.10.3 -> 0.10.4"
notes = "Adds panics to prevent a block size of zero from causing unsoundness."
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.cpufeatures]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.2.8 -> 0.2.9"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.cpufeatures]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.2.9 -> 0.2.11"
notes = """
New `unsafe` block is to call `libc::getauxval(libc::AT_HWCAP)` on Linux for
LoongArch64 CPU feature detection support. This and the supporting macro code is
the same as the existing Linux code for AArch64.
"""
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.cpufeatures]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "0.2.11 -> 0.2.12"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.errno]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.3.3 -> 0.3.8"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.errno]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "0.3.8 -> 0.3.9"
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
[[audits.zcash.audits.fastrand]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "2.0.1 -> 2.0.2"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.fastrand]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "2.0.2 -> 2.1.0"
notes = """
As noted in the changelog, this version produces different output for a given seed.
The documentation did not mention stability. It is possible that some uses relying on
determinism across the update would be broken.
The new constants do appear to match WyRand v4.2 (modulo ordering issues that I have not checked):
https://github.com/wangyi-fudan/wyhash/blob/408620b6d12b7d667b3dd6ae39b7929a39e8fa05/wyhash.h#L145
I have no way to check whether these constants are an improvement or not.
"""
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
[[audits.zcash.audits.generic-array]]
who = "Sean Bowe <ewillbefull@gmail.com>"
criteria = "safe-to-deploy"
delta = "0.14.6 -> 0.14.7"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.memmap2]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.9.3 -> 0.9.4"
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
[[audits.zcash.audits.miniz_oxide]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "0.7.1 -> 0.7.2"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.pin-project-lite]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "0.2.13 -> 0.2.14"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.rustc_version]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
version = "0.4.0"
notes = """
Most of the crate is code to parse and validate the output of `rustc -vV`. The caller can
choose which `rustc` to use, or can use `rustc_version::{version, version_meta}` which will
try `$RUSTC` followed by `rustc`.
If an adversary can arbitrarily set the `$RUSTC` environment variable then this crate will
execute arbitrary code. But when this crate is used within a build script, `$RUSTC` should
be set correctly by `cargo`.
"""
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.semver]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "1.0.17 -> 1.0.18"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.semver]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "1.0.18 -> 1.0.19"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.semver]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "1.0.19 -> 1.0.20"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.semver]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "1.0.20 -> 1.0.22"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.semver]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "1.0.22 -> 1.0.23"
notes = """
`build.rs` change is to enable checking for expected `#[cfg]` names if compiling
with Rust 1.80 or later.
"""
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
[[audits.zcash.audits.sharded-slab]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.1.4 -> 0.1.7"
notes = "Only change to an `unsafe` block is to fix a clippy lint."
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.thread_local]]
who = "Jack Grigg <jack@z.cash>"
criteria = "safe-to-deploy"
delta = "1.1.4 -> 1.1.7"
notes = """
New `unsafe` usage:
- An extra `deallocate_bucket`, to replace a `Mutex::lock` with a `compare_exchange`.
- Setting and getting a `#[thread_local] static mut Option<Thread>` on nightly.
"""
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.thread_local]]
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
criteria = "safe-to-deploy"
delta = "1.1.7 -> 1.1.8"
notes = """
Adds `unsafe` code that makes an assumption that `ptr::null_mut::<Entry<T>>()` is a valid representation
of an `AtomicPtr<Entry<T>>`, but this is likely a correct assumption.
"""
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.tinyvec_macros]]
who = "Jack Grigg <jack@z.cash>"
criteria = "safe-to-deploy"
delta = "0.1.0 -> 0.1.1"
notes = "Adds `#![forbid(unsafe_code)]` and license files."
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.tracing-subscriber]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "0.3.17 -> 0.3.18"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
[[audits.zcash.audits.typenum]]
who = "Jack Grigg <jack@electriccoin.co>"
criteria = "safe-to-deploy"
delta = "1.16.0 -> 1.17.0"
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
