2821 lines
84 KiB
Text
2821 lines
84 KiB
Text
|
|
||
|
|
# cargo-vet imports lock
|
||
|
|
|
||
|
|
[[publisher.aho-corasick]]
|
||
|
|
version = "1.1.3"
|
||
|
|
when = "2024-03-20"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.anstream]]
|
||
|
|
version = "0.6.15"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.anstyle]]
|
||
|
|
version = "1.0.8"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.anstyle-parse]]
|
||
|
|
version = "0.2.5"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.anstyle-query]]
|
||
|
|
version = "1.1.1"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.anyhow]]
|
||
|
|
version = "1.0.86"
|
||
|
|
when = "2024-05-18"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.ashpd]]
|
||
|
|
version = "0.9.1"
|
||
|
|
when = "2024-07-14"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.async-broadcast]]
|
||
|
|
version = "0.7.1"
|
||
|
|
when = "2024-06-02"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-channel]]
|
||
|
|
version = "2.3.1"
|
||
|
|
when = "2024-05-16"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-executor]]
|
||
|
|
version = "1.13.0"
|
||
|
|
when = "2024-07-16"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-fs]]
|
||
|
|
version = "2.1.2"
|
||
|
|
when = "2024-04-27"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-io]]
|
||
|
|
version = "2.3.3"
|
||
|
|
when = "2024-06-01"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-lock]]
|
||
|
|
version = "3.4.0"
|
||
|
|
when = "2024-06-01"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-net]]
|
||
|
|
version = "2.0.0"
|
||
|
|
when = "2023-10-29"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-task]]
|
||
|
|
version = "4.7.1"
|
||
|
|
when = "2024-04-27"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.async-trait]]
|
||
|
|
version = "0.1.81"
|
||
|
|
when = "2024-07-07"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.atomic-waker]]
|
||
|
|
version = "1.1.2"
|
||
|
|
when = "2023-09-25"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.blocking]]
|
||
|
|
version = "1.6.1"
|
||
|
|
when = "2024-05-26"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.byteorder]]
|
||
|
|
version = "1.5.0"
|
||
|
|
when = "2023-10-06"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.cairo-rs]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.cairo-sys-rs]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.cc]]
|
||
|
|
version = "1.1.7"
|
||
|
|
when = "2024-07-29"
|
||
|
|
user-id = 55123
|
||
|
|
user-login = "rust-lang-owner"
|
||
|
|
|
||
|
|
[[publisher.cfg-expr]]
|
||
|
|
version = "0.15.8"
|
||
|
|
when = "2024-04-10"
|
||
|
|
user-id = 52553
|
||
|
|
user-login = "embark-studios"
|
||
|
|
|
||
|
|
[[publisher.colorchoice]]
|
||
|
|
version = "1.0.2"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.concurrent-queue]]
|
||
|
|
version = "2.5.0"
|
||
|
|
when = "2024-04-26"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.cpufeatures]]
|
||
|
|
version = "0.2.7"
|
||
|
|
when = "2023-04-20"
|
||
|
|
user-id = 267
|
||
|
|
user-login = "tarcieri"
|
||
|
|
user-name = "Tony Arcieri"
|
||
|
|
|
||
|
|
[[publisher.crossbeam-utils]]
|
||
|
|
version = "0.8.20"
|
||
|
|
when = "2024-05-19"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.digest]]
|
||
|
|
version = "0.10.7"
|
||
|
|
when = "2023-05-19"
|
||
|
|
user-id = 267
|
||
|
|
user-login = "tarcieri"
|
||
|
|
user-name = "Tony Arcieri"
|
||
|
|
|
||
|
|
[[publisher.endi]]
|
||
|
|
version = "1.1.0"
|
||
|
|
when = "2023-12-12"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.env_filter]]
|
||
|
|
version = "0.1.2"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.env_logger]]
|
||
|
|
version = "0.11.5"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.event-listener]]
|
||
|
|
version = "5.3.1"
|
||
|
|
when = "2024-05-29"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.event-listener-strategy]]
|
||
|
|
version = "0.5.2"
|
||
|
|
when = "2024-04-27"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.flate2]]
|
||
|
|
version = "1.0.26"
|
||
|
|
when = "2023-04-28"
|
||
|
|
user-id = 4333
|
||
|
|
user-login = "joshtriplett"
|
||
|
|
user-name = "Josh Triplett"
|
||
|
|
|
||
|
|
[[publisher.futures-channel]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-core]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-executor]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-io]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-lite]]
|
||
|
|
version = "2.3.0"
|
||
|
|
when = "2024-03-17"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.futures-macro]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-sink]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-task]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.futures-util]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2023-12-24"
|
||
|
|
user-id = 33035
|
||
|
|
user-login = "taiki-e"
|
||
|
|
user-name = "Taiki Endo"
|
||
|
|
|
||
|
|
[[publisher.gdk-pixbuf]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.gdk-pixbuf-sys]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.gdk4]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gdk4-sys]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gdk4-wayland]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gdk4-wayland-sys]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gdk4-x11]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gdk4-x11-sys]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gio]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.gio-sys]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.glib]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.glib-macros]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.glib-sys]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.glycin]]
|
||
|
|
version = "2.0.0-beta"
|
||
|
|
when = "2024-08-02"
|
||
|
|
user-id = 195802
|
||
|
|
user-login = "sophie-h"
|
||
|
|
user-name = "Sophie Herold"
|
||
|
|
|
||
|
|
[[publisher.glycin-utils]]
|
||
|
|
version = "2.0.0-beta"
|
||
|
|
when = "2024-08-02"
|
||
|
|
user-id = 195802
|
||
|
|
user-login = "sophie-h"
|
||
|
|
user-name = "Sophie Herold"
|
||
|
|
|
||
|
|
[[publisher.gobject-sys]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.graphene-rs]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.graphene-sys]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.gsk4]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gsk4-sys]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gtk4]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gtk4-macros]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gtk4-sys]]
|
||
|
|
version = "0.9.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.gufo-common]]
|
||
|
|
version = "0.1.0"
|
||
|
|
when = "2024-07-30"
|
||
|
|
user-id = 195802
|
||
|
|
user-login = "sophie-h"
|
||
|
|
user-name = "Sophie Herold"
|
||
|
|
|
||
|
|
[[publisher.gufo-exif]]
|
||
|
|
version = "0.1.1"
|
||
|
|
when = "2024-07-30"
|
||
|
|
user-id = 195802
|
||
|
|
user-login = "sophie-h"
|
||
|
|
user-name = "Sophie Herold"
|
||
|
|
|
||
|
|
[[publisher.gvdb]]
|
||
|
|
version = "0.7.0"
|
||
|
|
when = "2024-07-12"
|
||
|
|
user-id = 156260
|
||
|
|
user-login = "felinira"
|
||
|
|
user-name = "Fina"
|
||
|
|
|
||
|
|
[[publisher.gvdb-macros]]
|
||
|
|
version = "0.1.13"
|
||
|
|
when = "2024-07-12"
|
||
|
|
user-id = 156260
|
||
|
|
user-login = "felinira"
|
||
|
|
user-name = "Fina"
|
||
|
|
|
||
|
|
[[publisher.gweather-sys]]
|
||
|
|
version = "4.5.0"
|
||
|
|
when = "2024-07-24"
|
||
|
|
user-id = 165052
|
||
|
|
user-login = "ItsJamie9494"
|
||
|
|
user-name = "Jamie"
|
||
|
|
|
||
|
|
[[publisher.hashbrown]]
|
||
|
|
version = "0.14.5"
|
||
|
|
when = "2024-04-28"
|
||
|
|
user-id = 2915
|
||
|
|
user-login = "Amanieu"
|
||
|
|
user-name = "Amanieu d'Antras"
|
||
|
|
|
||
|
|
[[publisher.indexmap]]
|
||
|
|
version = "2.3.0"
|
||
|
|
when = "2024-07-31"
|
||
|
|
user-id = 539
|
||
|
|
user-login = "cuviper"
|
||
|
|
user-name = "Josh Stone"
|
||
|
|
|
||
|
|
[[publisher.is_terminal_polyfill]]
|
||
|
|
version = "1.70.1"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.jobserver]]
|
||
|
|
version = "0.1.32"
|
||
|
|
when = "2024-07-23"
|
||
|
|
user-id = 55123
|
||
|
|
user-login = "rust-lang-owner"
|
||
|
|
|
||
|
|
[[publisher.kamadak-exif]]
|
||
|
|
version = "0.5.5"
|
||
|
|
when = "2022-10-22"
|
||
|
|
user-id = 5577
|
||
|
|
user-login = "kamadak"
|
||
|
|
user-name = "KAMADA Ken'ichi"
|
||
|
|
|
||
|
|
[[publisher.libadwaita]]
|
||
|
|
version = "0.7.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.libadwaita-sys]]
|
||
|
|
version = "0.7.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 54339
|
||
|
|
user-login = "bilelmoussaoui"
|
||
|
|
user-name = "Bilal Elmoussaoui"
|
||
|
|
|
||
|
|
[[publisher.libc]]
|
||
|
|
version = "0.2.155"
|
||
|
|
when = "2024-05-17"
|
||
|
|
user-id = 5820
|
||
|
|
user-login = "the8472"
|
||
|
|
|
||
|
|
[[publisher.libgweather]]
|
||
|
|
version = "4.5.0"
|
||
|
|
when = "2024-07-24"
|
||
|
|
user-id = 165052
|
||
|
|
user-login = "ItsJamie9494"
|
||
|
|
user-name = "Jamie"
|
||
|
|
|
||
|
|
[[publisher.linux-raw-sys]]
|
||
|
|
version = "0.4.14"
|
||
|
|
when = "2024-05-17"
|
||
|
|
user-id = 6825
|
||
|
|
user-login = "sunfishcode"
|
||
|
|
user-name = "Dan Gohman"
|
||
|
|
|
||
|
|
[[publisher.log]]
|
||
|
|
version = "0.4.22"
|
||
|
|
when = "2024-06-28"
|
||
|
|
user-id = 3204
|
||
|
|
user-login = "KodrAus"
|
||
|
|
user-name = "Ashley Mannix"
|
||
|
|
|
||
|
|
[[publisher.memchr]]
|
||
|
|
version = "2.7.4"
|
||
|
|
when = "2024-06-14"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.mutate_once]]
|
||
|
|
version = "0.1.1"
|
||
|
|
when = "2019-12-12"
|
||
|
|
user-id = 5577
|
||
|
|
user-login = "kamadak"
|
||
|
|
user-name = "KAMADA Ken'ichi"
|
||
|
|
|
||
|
|
[[publisher.pango]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.pango-sys]]
|
||
|
|
version = "0.20.0"
|
||
|
|
when = "2024-07-10"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.parking]]
|
||
|
|
version = "2.2.0"
|
||
|
|
when = "2023-10-18"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.paste]]
|
||
|
|
version = "1.0.15"
|
||
|
|
when = "2024-05-07"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.piper]]
|
||
|
|
version = "0.2.3"
|
||
|
|
when = "2024-06-01"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.pkg-config]]
|
||
|
|
version = "0.3.30"
|
||
|
|
when = "2024-02-14"
|
||
|
|
user-id = 3623
|
||
|
|
user-login = "sdroege"
|
||
|
|
user-name = "Sebastian Dröge"
|
||
|
|
|
||
|
|
[[publisher.polling]]
|
||
|
|
version = "3.7.2"
|
||
|
|
when = "2024-06-15"
|
||
|
|
user-id = 69526
|
||
|
|
user-login = "notgull"
|
||
|
|
user-name = "John Nunley"
|
||
|
|
|
||
|
|
[[publisher.regex]]
|
||
|
|
version = "1.10.6"
|
||
|
|
when = "2024-08-02"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.regex-automata]]
|
||
|
|
version = "0.1.10"
|
||
|
|
when = "2021-06-01"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.regex-automata]]
|
||
|
|
version = "0.4.7"
|
||
|
|
when = "2024-06-09"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.regex-syntax]]
|
||
|
|
version = "0.6.29"
|
||
|
|
when = "2023-03-21"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.regex-syntax]]
|
||
|
|
version = "0.8.4"
|
||
|
|
when = "2024-06-09"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.rustix]]
|
||
|
|
version = "0.38.34"
|
||
|
|
when = "2024-04-22"
|
||
|
|
user-id = 6825
|
||
|
|
user-login = "sunfishcode"
|
||
|
|
user-name = "Dan Gohman"
|
||
|
|
|
||
|
|
[[publisher.ryu]]
|
||
|
|
version = "1.0.18"
|
||
|
|
when = "2024-05-07"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.same-file]]
|
||
|
|
version = "1.0.6"
|
||
|
|
when = "2020-01-11"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.serde_json]]
|
||
|
|
version = "1.0.122"
|
||
|
|
when = "2024-08-01"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.serde_repr]]
|
||
|
|
version = "0.1.19"
|
||
|
|
when = "2024-04-08"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.serde_spanned]]
|
||
|
|
version = "0.6.7"
|
||
|
|
when = "2024-07-25"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.sha1]]
|
||
|
|
version = "0.10.6"
|
||
|
|
when = "2023-09-21"
|
||
|
|
user-id = 5059
|
||
|
|
user-login = "newpavlov"
|
||
|
|
user-name = "Artyom Pavlov"
|
||
|
|
|
||
|
|
[[publisher.slab]]
|
||
|
|
version = "0.4.9"
|
||
|
|
when = "2023-08-22"
|
||
|
|
user-id = 6741
|
||
|
|
user-login = "Darksonn"
|
||
|
|
user-name = "Alice Ryhl"
|
||
|
|
|
||
|
|
[[publisher.smallvec]]
|
||
|
|
version = "1.13.2"
|
||
|
|
when = "2024-03-20"
|
||
|
|
user-id = 2017
|
||
|
|
user-login = "mbrubeck"
|
||
|
|
user-name = "Matt Brubeck"
|
||
|
|
|
||
|
|
[[publisher.syn]]
|
||
|
|
version = "2.0.72"
|
||
|
|
when = "2024-07-21"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.system-deps]]
|
||
|
|
version = "7.0.1"
|
||
|
|
when = "2024-06-18"
|
||
|
|
user-id = 52034
|
||
|
|
user-login = "gdesmott"
|
||
|
|
user-name = "Guillaume Desmottes"
|
||
|
|
|
||
|
|
[[publisher.target-lexicon]]
|
||
|
|
version = "0.12.16"
|
||
|
|
when = "2024-07-30"
|
||
|
|
user-id = 696
|
||
|
|
user-login = "fitzgen"
|
||
|
|
user-name = "Nick Fitzgerald"
|
||
|
|
|
||
|
|
[[publisher.thiserror]]
|
||
|
|
version = "1.0.63"
|
||
|
|
when = "2024-07-17"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.thiserror-impl]]
|
||
|
|
version = "1.0.63"
|
||
|
|
when = "2024-07-17"
|
||
|
|
user-id = 3618
|
||
|
|
user-login = "dtolnay"
|
||
|
|
user-name = "David Tolnay"
|
||
|
|
|
||
|
|
[[publisher.toml]]
|
||
|
|
version = "0.8.19"
|
||
|
|
when = "2024-07-31"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.toml_datetime]]
|
||
|
|
version = "0.6.8"
|
||
|
|
when = "2024-07-30"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.toml_edit]]
|
||
|
|
version = "0.21.1"
|
||
|
|
when = "2024-01-31"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.toml_edit]]
|
||
|
|
version = "0.22.20"
|
||
|
|
when = "2024-07-31"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.tracing]]
|
||
|
|
version = "0.1.40"
|
||
|
|
when = "2023-10-19"
|
||
|
|
user-id = 1249
|
||
|
|
user-login = "hawkw"
|
||
|
|
user-name = "Eliza Weisman"
|
||
|
|
|
||
|
|
[[publisher.tracing-attributes]]
|
||
|
|
version = "0.1.27"
|
||
|
|
when = "2023-10-13"
|
||
|
|
user-id = 1249
|
||
|
|
user-login = "hawkw"
|
||
|
|
user-name = "Eliza Weisman"
|
||
|
|
|
||
|
|
[[publisher.tracing-core]]
|
||
|
|
version = "0.1.32"
|
||
|
|
when = "2023-10-13"
|
||
|
|
user-id = 1249
|
||
|
|
user-login = "hawkw"
|
||
|
|
user-name = "Eliza Weisman"
|
||
|
|
|
||
|
|
[[publisher.tracing-log]]
|
||
|
|
version = "0.2.0"
|
||
|
|
when = "2023-10-25"
|
||
|
|
user-id = 1249
|
||
|
|
user-login = "hawkw"
|
||
|
|
user-name = "Eliza Weisman"
|
||
|
|
|
||
|
|
[[publisher.unicode-normalization]]
|
||
|
|
version = "0.1.23"
|
||
|
|
when = "2024-02-20"
|
||
|
|
user-id = 1139
|
||
|
|
user-login = "Manishearth"
|
||
|
|
user-name = "Manish Goregaokar"
|
||
|
|
|
||
|
|
[[publisher.walkdir]]
|
||
|
|
version = "2.5.0"
|
||
|
|
when = "2024-03-01"
|
||
|
|
user-id = 189
|
||
|
|
user-login = "BurntSushi"
|
||
|
|
user-name = "Andrew Gallant"
|
||
|
|
|
||
|
|
[[publisher.winnow]]
|
||
|
|
version = "0.5.40"
|
||
|
|
when = "2024-02-12"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.winnow]]
|
||
|
|
version = "0.6.18"
|
||
|
|
when = "2024-07-31"
|
||
|
|
user-id = 6743
|
||
|
|
user-login = "epage"
|
||
|
|
user-name = "Ed Page"
|
||
|
|
|
||
|
|
[[publisher.xdg-home]]
|
||
|
|
version = "1.2.0"
|
||
|
|
when = "2024-06-08"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.zbus]]
|
||
|
|
version = "4.4.0"
|
||
|
|
when = "2024-07-22"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.zbus_macros]]
|
||
|
|
version = "4.4.0"
|
||
|
|
when = "2024-07-22"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.zbus_names]]
|
||
|
|
version = "3.0.0"
|
||
|
|
when = "2024-02-12"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.zerocopy]]
|
||
|
|
version = "0.6.6"
|
||
|
|
when = "2023-12-14"
|
||
|
|
user-id = 7178
|
||
|
|
user-login = "joshlf"
|
||
|
|
user-name = "Joshua Liebow-Feeser"
|
||
|
|
|
||
|
|
[[publisher.zerocopy]]
|
||
|
|
version = "0.7.35"
|
||
|
|
when = "2024-07-02"
|
||
|
|
user-id = 7178
|
||
|
|
user-login = "joshlf"
|
||
|
|
user-name = "Joshua Liebow-Feeser"
|
||
|
|
|
||
|
|
[[publisher.zerocopy-derive]]
|
||
|
|
version = "0.6.6"
|
||
|
|
when = "2023-12-14"
|
||
|
|
user-id = 7178
|
||
|
|
user-login = "joshlf"
|
||
|
|
user-name = "Joshua Liebow-Feeser"
|
||
|
|
|
||
|
|
[[publisher.zerocopy-derive]]
|
||
|
|
version = "0.7.35"
|
||
|
|
when = "2024-07-02"
|
||
|
|
user-id = 7178
|
||
|
|
user-login = "joshlf"
|
||
|
|
user-name = "Joshua Liebow-Feeser"
|
||
|
|
|
||
|
|
[[publisher.zvariant]]
|
||
|
|
version = "4.2.0"
|
||
|
|
when = "2024-07-19"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.zvariant_derive]]
|
||
|
|
version = "4.2.0"
|
||
|
|
when = "2024-07-19"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[publisher.zvariant_utils]]
|
||
|
|
version = "2.1.0"
|
||
|
|
when = "2024-07-19"
|
||
|
|
user-id = 6423
|
||
|
|
user-login = "zeenix"
|
||
|
|
user-name = "Zeeshan Ali Khan"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.adler]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.2"
|
||
|
|
notes = "This is a small crate which forbids unsafe code and is a straightforward implementation of the adler hashing algorithm."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.block-buffer]]
|
||
|
|
who = "Benjamin Bouvier <public@benj.me>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.9.0 -> 0.10.2"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.cfg-if]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.0"
|
||
|
|
notes = "I am the author of this crate."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.crypto-common]]
|
||
|
|
who = "Benjamin Bouvier <public@benj.me>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.3"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.errno]]
|
||
|
|
who = "Dan Gohman <dev@sunfishcode.online>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.3.0"
|
||
|
|
notes = "This crate uses libc and windows-sys APIs to get and set the raw OS error value."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.errno]]
|
||
|
|
who = "Dan Gohman <dev@sunfishcode.online>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.0 -> 0.3.1"
|
||
|
|
notes = "Just a dependency version bump and a bug fix for redox"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.fastrand]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.0.0 -> 2.0.1"
|
||
|
|
notes = """
|
||
|
|
This update had a few doc updates but no otherwise-substantial source code
|
||
|
|
updates.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.flate2]]
|
||
|
|
who = "Andrew Brown <andrew.brown@intel.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.26 -> 1.0.28"
|
||
|
|
notes = "No new `unsafe` and no large changes in function. This diff is mostly refactoring with a lot of docs, CI, test changes. Adds some defensive clearing out of certain variables as a safeguard."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.foreign-types]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.3.2"
|
||
|
|
notes = "This crate defined a macro-rules which creates wrappers working with FFI types. The implementation of this crate appears to be safe, but each use of this macro would need to be vetted for correctness as well."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.foreign-types-shared]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.1"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.heck]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.4.1 -> 0.5.0"
|
||
|
|
notes = "Minor changes for a `no_std` upgrade but otherwise everything looks as expected."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.idna]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.3.0"
|
||
|
|
notes = """
|
||
|
|
This is a crate without unsafe code or usage of the standard library. The large
|
||
|
|
size of this crate comes from the large generated unicode tables file. This
|
||
|
|
crate is broadly used throughout the ecosystem and does not contain anything
|
||
|
|
suspicious.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.matchers]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.0"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.memfd]]
|
||
|
|
who = "Dan Gohman <dev@sunfishcode.online>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.6.2"
|
||
|
|
notes = """
|
||
|
|
The only changes from 0.6.1 were from my own PR which updated memfd to newer
|
||
|
|
dependencies.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.memfd]]
|
||
|
|
who = "Dan Gohman <dev@sunfishcode.online>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.6.2 -> 0.6.3"
|
||
|
|
notes = "Just a dependency version bump and documentation update"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.memfd]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.6.3 -> 0.6.4"
|
||
|
|
notes = "This commit only updated the dependency `rustix`, so same as before."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.miniz_oxide]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.7.1"
|
||
|
|
notes = """
|
||
|
|
This crate is a Rust implementation of zlib compression/decompression and has
|
||
|
|
been used by default by the Rust standard library for quite some time. It's also
|
||
|
|
a default dependency of the popular `backtrace` crate for decompressing debug
|
||
|
|
information. This crate forbids unsafe code and does not otherwise access system
|
||
|
|
resources. It's originally a port of the `miniz.c` library as well, and given
|
||
|
|
its own longevity should be relatively hardened against some of the more common
|
||
|
|
compression-related issues.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.nu-ansi-term]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.46.0"
|
||
|
|
notes = "one use of unsafe to call windows specific api to get console handle."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.num-traits]]
|
||
|
|
who = "Andrew Brown <andrew.brown@intel.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.2.19"
|
||
|
|
notes = "As advertised: a numeric library. The only `unsafe` is from some float-to-int conversions, which seems expected."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.overload]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.1"
|
||
|
|
notes = "small crate, only defines macro-rules!, nicely documented as well"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.percent-encoding]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "2.2.0"
|
||
|
|
notes = """
|
||
|
|
This crate is a single-file crate that does what it says on the tin. There are
|
||
|
|
a few `unsafe` blocks related to utf-8 validation which are locally verifiable
|
||
|
|
as correct and otherwise this crate is good to go.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.pin-utils]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.0"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.semver]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.17"
|
||
|
|
notes = "plenty of unsafe pointer and vec tricks, but in well-structured and commented code that appears to be correct"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.sharded-slab]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.4"
|
||
|
|
notes = "I always really enjoy reading eliza's code, she left perfect comments at every use of unsafe."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.static_assertions]]
|
||
|
|
who = "Andrew Brown <andrew.brown@intel.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.1.0"
|
||
|
|
notes = "No dependencies and completely a compile-time crate as advertised. Uses `unsafe` in one module as a compile-time check only: `mem::transmute` and `ptr::write` are wrapped in an impossible-to-run closure."
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.thread_local]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.1.4"
|
||
|
|
notes = "uses unsafe to implement thread local storage of objects"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.tinyvec]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.6.0"
|
||
|
|
notes = """
|
||
|
|
This crate, while it implements collections, does so without `std::*` APIs and
|
||
|
|
without `unsafe`. Skimming the crate everything looks reasonable and what one
|
||
|
|
would expect from idiomatic safe collections in Rust.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.tinyvec_macros]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.0"
|
||
|
|
notes = """
|
||
|
|
This is a trivial crate which only contains a singular macro definition which is
|
||
|
|
intended to multiplex across the internal representation of a tinyvec,
|
||
|
|
presumably. This trivially doesn't contain anything bad.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.tracing-subscriber]]
|
||
|
|
who = "Pat Hickey <phickey@fastly.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.3.17"
|
||
|
|
|
||
|
|
[[audits.bytecode-alliance.audits.unicode-bidi]]
|
||
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.3.8"
|
||
|
|
notes = """
|
||
|
|
This crate has no unsafe code and does not use `std::*`. Skimming the crate it
|
||
|
|
does not attempt to out of the bounds of what it's already supposed to be doing.
|
||
|
|
"""
|
||
|
|
|
||
|
|
[[audits.embark-studios.wildcard-audits.cfg-expr]]
|
||
|
|
who = "Jake Shadle <opensource@embark-studios.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 52553 # embark-studios
|
||
|
|
start = "2020-01-01"
|
||
|
|
end = "2024-05-23"
|
||
|
|
notes = "Maintained by Embark. No unsafe usage or ambient capabilities"
|
||
|
|
|
||
|
|
[[audits.embark-studios.audits.cfg_aliases]]
|
||
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.1"
|
||
|
|
notes = "No unsafe usage or ambient capabilities"
|
||
|
|
|
||
|
|
[[audits.embark-studios.audits.idna]]
|
||
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.0 -> 0.4.0"
|
||
|
|
notes = "No unsafe usage or ambient capabilities"
|
||
|
|
|
||
|
|
[[audits.embark-studios.audits.utf8parse]]
|
||
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.2.1"
|
||
|
|
notes = "Single unsafe usage that looks sound, no ambient capabilities"
|
||
|
|
|
||
|
|
[[audits.embark-studios.audits.valuable]]
|
||
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.0"
|
||
|
|
notes = "No unsafe usage or ambient capabilities, sane build script"
|
||
|
|
|
||
|
|
[[audits.embark-studios.audits.version-compare]]
|
||
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.1.1"
|
||
|
|
notes = "No unsafe usage or ambient capabilities"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.ashpd]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2020-09-14"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.cairo-rs]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2021-07-08"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.cairo-sys-rs]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2021-10-16"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.endi]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2023-12-10"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk-pixbuf]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2022-01-15"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk-pixbuf-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2022-01-15"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk4]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk4-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk4-wayland]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk4-wayland-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk4-x11]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gdk4-x11-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gio]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2020-08-28"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gio-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2020-09-16"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.glib]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2020-02-14"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.glib-macros]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2021-07-08"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.glib-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2020-09-16"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.glycin]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 195802 # Sophie Herold (sophie-h)
|
||
|
|
start = "2023-06-10"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.glycin-utils]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 195802 # Sophie Herold (sophie-h)
|
||
|
|
start = "2023-06-10"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gobject-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2022-01-15"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.graphene-rs]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2021-04-04"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.graphene-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2021-04-04"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gsk4]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gsk4-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gtk4]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gtk4-macros]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gtk4-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-07-12"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gufo-common]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 195802 # Sophie Herold (sophie-h)
|
||
|
|
start = "2024-06-27"
|
||
|
|
end = "2025-07-30"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gufo-exif]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 195802 # Sophie Herold (sophie-h)
|
||
|
|
start = "2024-06-27"
|
||
|
|
end = "2025-07-30"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gvdb]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 156260 # Fina (felinira)
|
||
|
|
start = "2022-04-21"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gvdb-macros]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 156260 # Fina (felinira)
|
||
|
|
start = "2022-04-21"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.gweather-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 165052 # Jamie (ItsJamie9494)
|
||
|
|
start = "2022-06-19"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.libadwaita]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-06-23"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.libadwaita-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 54339 # Bilal Elmoussaoui (bilelmoussaoui)
|
||
|
|
start = "2021-06-23"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.libgweather]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 165052 # Jamie (ItsJamie9494)
|
||
|
|
start = "2022-06-19"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.pango]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2020-08-11"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.pango-sys]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2022-01-15"
|
||
|
|
end = "2025-07-20"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.pkg-config]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3623 # Sebastian Dröge (sdroege)
|
||
|
|
start = "2019-07-25"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.xdg-home]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2023-03-28"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.zbus]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2020-07-19"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.zbus_macros]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2020-07-19"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.zbus_names]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2021-07-30"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.zvariant]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2019-12-30"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.zvariant_derive]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2020-05-22"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[[audits.gnome.wildcard-audits.zvariant_utils]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6423 # Zeeshan Ali Khan (zeenix)
|
||
|
|
start = "2023-03-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "GNOME contributor"
|
||
|
|
|
||
|
|
[audits.gnome.audits]
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-broadcast]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2024-06-02"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-channel]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-07-08"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-executor]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-fs]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-10-18"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-io]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-03-22"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-lock]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-03-02"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-net]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-09-25"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.async-task]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-03-24"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.atomic-waker]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.blocking]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.cc]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 55123 # rust-lang-owner
|
||
|
|
start = "2022-10-29"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.concurrent-queue]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.cpufeatures]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 267 # Tony Arcieri (tarcieri)
|
||
|
|
start = "2021-04-26"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "RustCrypto/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.digest]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 267 # Tony Arcieri (tarcieri)
|
||
|
|
start = "2020-06-10"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "RustCrypto/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.event-listener]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-09-10"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.event-listener-strategy]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-09-11"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.flate2]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 4333 # Josh Triplett (joshtriplett)
|
||
|
|
start = "2020-09-30"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-channel]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-core]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-executor]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-io]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-lite]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-macro]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-sink]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-task]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2019-07-29"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.futures-util]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 33035 # Taiki Endo (taiki-e)
|
||
|
|
start = "2020-10-05"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.hashbrown]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 2915 # Amanieu d'Antras (Amanieu)
|
||
|
|
start = "2019-04-02"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.jobserver]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 55123 # rust-lang-owner
|
||
|
|
start = "2024-07-23"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.libc]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 5820 # the8472
|
||
|
|
start = "2024-05-17"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.log]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 3204 # Ashley Mannix (KodrAus)
|
||
|
|
start = "2019-07-10"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.parking]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-07"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.piper]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-04-24"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.polling]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 69526 # John Nunley (notgull)
|
||
|
|
start = "2023-03-08"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "smol-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.rustix]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6825 # Dan Gohman (sunfishcode)
|
||
|
|
start = "2021-10-29"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "bytecodealliance/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.sha1]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 5059 # Artyom Pavlov (newpavlov)
|
||
|
|
start = "2022-01-17"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "RustCrypto/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.slab]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 6741 # Alice Ryhl (Darksonn)
|
||
|
|
start = "2021-10-13"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "tokio-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.system-deps]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 52034 # Guillaume Desmottes (gdesmott)
|
||
|
|
start = "2020-06-19"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "rust-lang/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.tracing]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 1249 # Eliza Weisman (hawkw)
|
||
|
|
start = "2019-06-28"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "tokio-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.tracing-attributes]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 1249 # Eliza Weisman (hawkw)
|
||
|
|
start = "2019-08-08"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "tokio-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.tracing-core]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 1249 # Eliza Weisman (hawkw)
|
||
|
|
start = "2019-06-20"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "tokio-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.tracing-log]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 1249 # Eliza Weisman (hawkw)
|
||
|
|
start = "2019-06-27"
|
||
|
|
end = "2025-07-25"
|
||
|
|
notes = "tokio-rs/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.zerocopy]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 7178 # Joshua Liebow-Feeser (joshlf)
|
||
|
|
start = "2019-02-28"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "google/ repo"
|
||
|
|
|
||
|
|
[[audits.gnome-trusted.wildcard-audits.zerocopy-derive]]
|
||
|
|
who = "Sophie Herold <sophie@hemio.de>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 7178 # Joshua Liebow-Feeser (joshlf)
|
||
|
|
start = "2019-02-28"
|
||
|
|
end = "2025-07-22"
|
||
|
|
notes = "google/ repo"
|
||
|
|
|
||
|
|
[audits.gnome-trusted.audits]
|
||
|
|
|
||
|
|
[[audits.google.audits.autocfg]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.1.0"
|
||
|
|
notes = """
|
||
|
|
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
|
||
|
|
and there were no hits except for reasonable, client-controlled usage of
|
||
|
|
`std::fs` in `AutoCfg::with_dir`.
|
||
|
|
|
||
|
|
This crate has been added to Chromium in
|
||
|
|
https://source.chromium.org/chromium/chromium/src/+/591a0f30c5eac93b6a3d981c2714ffa4db28dbcb
|
||
|
|
The CL description contains a link to a Google-internal document with audit details.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.autocfg]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.1.0 -> 1.2.0"
|
||
|
|
notes = '''
|
||
|
|
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
|
||
|
|
and nothing changed from the baseline audit of 1.1.0. Skimmed through the
|
||
|
|
1.1.0 => 1.2.0 delta and everything seemed okay.
|
||
|
|
'''
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.bitflags]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.3.2"
|
||
|
|
notes = """
|
||
|
|
Security review of earlier versions of the crate can be found at
|
||
|
|
(Google-internal, sorry): go/image-crate-chromium-security-review
|
||
|
|
|
||
|
|
The crate exposes a function marked as `unsafe`, but doesn't use any
|
||
|
|
`unsafe` blocks (except for tests of the single `unsafe` function). I
|
||
|
|
think this justifies marking this crate as `ub-risk-1`.
|
||
|
|
|
||
|
|
Additional review comments can be found at https://crrev.com/c/4723145/31
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.bitflags]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "2.4.2"
|
||
|
|
notes = """
|
||
|
|
Audit notes:
|
||
|
|
|
||
|
|
* I've checked for any discussion in Google-internal cl/546819168 (where audit
|
||
|
|
of version 2.3.3 happened)
|
||
|
|
* `src/lib.rs` contains `#![cfg_attr(not(test), forbid(unsafe_code))]`
|
||
|
|
* There are 2 cases of `unsafe` in `src/external.rs` but they seem to be
|
||
|
|
correct in a straightforward way - they just propagate the marker trait's
|
||
|
|
impl (e.g. `impl bytemuck::Pod`) from the inner to the outer type
|
||
|
|
* Additional discussion and/or notes may be found in https://crrev.com/c/5238056
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.bitflags]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.4.2 -> 2.5.0"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.bitflags]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.5.0 -> 2.6.0"
|
||
|
|
notes = "The changes from the previous version are negligible and thus it retains the same properties."
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.bytemuck]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.16.3"
|
||
|
|
notes = """
|
||
|
|
Review notes from the original audit (of 1.14.3) may be found in
|
||
|
|
https://crrev.com/c/5362675. Note that this audit has initially missed UB risk
|
||
|
|
that was fixed in 1.16.2 - see https://github.com/Lokathor/bytemuck/pull/258.
|
||
|
|
Because of this, the original audit has been edited to certify version `1.16.3`
|
||
|
|
instead (see also https://crrev.com/c/5771867).
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.crc32fast]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.4.2"
|
||
|
|
notes = """
|
||
|
|
Security review of earlier versions of the crate can be found at
|
||
|
|
(Google-internal, sorry): go/image-crate-chromium-security-review
|
||
|
|
|
||
|
|
Audit comments for 1.4.2 can be found at https://crrev.com/c/4723145.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.equivalent]]
|
||
|
|
who = "George Burgess IV <gbiv@google.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.1"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.fastrand]]
|
||
|
|
who = "George Burgess IV <gbiv@google.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.9.0"
|
||
|
|
notes = """
|
||
|
|
`does-not-implement-crypto` is certified because this crate explicitly says
|
||
|
|
that the RNG here is not cryptographically secure.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.getrandom]]
|
||
|
|
who = "David Koloski <dkoloski@google.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.2 -> 0.2.12"
|
||
|
|
notes = "Audited at https://fxrev.dev/932979"
|
||
|
|
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.heck]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.4.1"
|
||
|
|
notes = """
|
||
|
|
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
|
||
|
|
and there were no hits.
|
||
|
|
|
||
|
|
`heck` (version `0.3.3`) has been added to Chromium in
|
||
|
|
https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24c97e7a8f4057
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.itoa]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.10"
|
||
|
|
notes = '''
|
||
|
|
I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
|
||
|
|
|
||
|
|
There are a few places where `unsafe` is used. Unsafe review notes can be found
|
||
|
|
in https://crrev.com/c/5350697.
|
||
|
|
|
||
|
|
Version 1.0.1 of this crate has been added to Chromium in
|
||
|
|
https://crrev.com/c/3321896.
|
||
|
|
'''
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.itoa]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.10 -> 1.0.11"
|
||
|
|
notes = """
|
||
|
|
Straightforward diff between 1.0.10 and 1.0.11 - only 3 commits:
|
||
|
|
|
||
|
|
* Bumping up the version
|
||
|
|
* A touch up of comments
|
||
|
|
* And my own PR to make `unsafe` blocks more granular:
|
||
|
|
https://github.com/dtolnay/itoa/pull/42
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.lazy_static]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.4.0"
|
||
|
|
notes = '''
|
||
|
|
I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
|
||
|
|
|
||
|
|
There are two places where `unsafe` is used. Unsafe review notes can be found
|
||
|
|
in https://crrev.com/c/5347418.
|
||
|
|
|
||
|
|
This crate has been added to Chromium in https://crrev.com/c/3321895.
|
||
|
|
'''
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.lazy_static]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.4.0 -> 1.5.0"
|
||
|
|
notes = "Unsafe review notes: https://crrev.com/c/5650836"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.pin-project-lite]]
|
||
|
|
who = "David Koloski <dkoloski@google.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.2.9"
|
||
|
|
notes = "Reviewed on https://fxrev.dev/824504"
|
||
|
|
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.pin-project-lite]]
|
||
|
|
who = "David Koloski <dkoloski@google.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.9 -> 0.2.13"
|
||
|
|
notes = "Audited at https://fxrev.dev/946396"
|
||
|
|
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.78"
|
||
|
|
notes = """
|
||
|
|
Grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits
|
||
|
|
(except for a benign \"fs\" hit in a doc comment)
|
||
|
|
|
||
|
|
Notes from the `unsafe` review can be found in https://crrev.com/c/5385745.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.78 -> 1.0.79"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.79 -> 1.0.80"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.80 -> 1.0.81"
|
||
|
|
notes = "Comment changes only"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "danakj <danakj@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.81 -> 1.0.82"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.82 -> 1.0.83"
|
||
|
|
notes = "Substantive change is replacing String with Box<str>, saving memory."
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.83 -> 1.0.84"
|
||
|
|
notes = "Only doc comment changes in `src/lib.rs`."
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "danakj@chromium.org"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.84 -> 1.0.85"
|
||
|
|
notes = "Test-only changes."
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.proc-macro2]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.85 -> 1.0.86"
|
||
|
|
notes = """
|
||
|
|
Comment-only changes in `build.rs`.
|
||
|
|
Reordering of `Cargo.toml` entries.
|
||
|
|
Just bumping up the version number in `lib.rs`.
|
||
|
|
Config-related changes in `test_size.rs`.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.quote]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.35"
|
||
|
|
notes = """
|
||
|
|
Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits
|
||
|
|
(except for benign \"net\" hit in tests and \"fs\" hit in README.md)
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.quote]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.35 -> 1.0.36"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.rustversion]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.14"
|
||
|
|
notes = """
|
||
|
|
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'``, `'\bnet\b'``, `'\bunsafe\b'``
|
||
|
|
and there were no hits except for:
|
||
|
|
|
||
|
|
* Using trivially-safe `unsafe` in test code:
|
||
|
|
|
||
|
|
```
|
||
|
|
tests/test_const.rs:unsafe fn _unsafe() {}
|
||
|
|
tests/test_const.rs:const _UNSAFE: () = unsafe { _unsafe() };
|
||
|
|
```
|
||
|
|
|
||
|
|
* Using `unsafe` in a string:
|
||
|
|
|
||
|
|
```
|
||
|
|
src/constfn.rs: \"unsafe\" => Qualifiers::Unsafe,
|
||
|
|
```
|
||
|
|
|
||
|
|
* Using `std::fs` in `build/build.rs` to write `${OUT_DIR}/version.expr`
|
||
|
|
which is later read back via `include!` used in `src/lib.rs`.
|
||
|
|
|
||
|
|
Version `1.0.6` of this crate has been added to Chromium in
|
||
|
|
https://source.chromium.org/chromium/chromium/src/+/28841c33c77833cc30b286f9ae24c97e7a8f4057
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.rustversion]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.14 -> 1.0.15"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.rustversion]]
|
||
|
|
who = "danakj <danakj@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.15 -> 1.0.16"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.rustversion]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.16 -> 1.0.17"
|
||
|
|
notes = "Just updates windows compat"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.197"
|
||
|
|
notes = """
|
||
|
|
Grepped for `-i cipher`, `-i crypto`, `'\bfs\b'`, `'\bnet\b'`, `'\bunsafe\b'`.
|
||
|
|
|
||
|
|
There were some hits for `net`, but they were related to serialization and
|
||
|
|
not actually opening any connections or anything like that.
|
||
|
|
|
||
|
|
There were 2 hits of `unsafe` when grepping:
|
||
|
|
* In `fn as_str` in `impl Buf`
|
||
|
|
* In `fn serialize` in `impl Serialize for net::Ipv4Addr`
|
||
|
|
|
||
|
|
Unsafe review comments can be found in https://crrev.com/c/5350573/2 (this
|
||
|
|
review also covered `serde_json_lenient`).
|
||
|
|
|
||
|
|
Version 1.0.130 of the crate has been added to Chromium in
|
||
|
|
https://crrev.com/c/3265545. The CL description contains a link to a
|
||
|
|
(Google-internal, sorry) document with a mini security review.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.197 -> 1.0.198"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde]]
|
||
|
|
who = "danakj <danakj@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.198 -> 1.0.201"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.201 -> 1.0.202"
|
||
|
|
notes = "Trivial changes"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.202 -> 1.0.203"
|
||
|
|
notes = "s/doc_cfg/docsrs/ + tuple_impls/tuple_impl_body-related changes"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.203 -> 1.0.204"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde_derive]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.197"
|
||
|
|
notes = "Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde_derive]]
|
||
|
|
who = "danakj <danakj@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.197 -> 1.0.201"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde_derive]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.201 -> 1.0.202"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde_derive]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.202 -> 1.0.203"
|
||
|
|
notes = "Grepped for \"unsafe\", \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.serde_derive]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.203 -> 1.0.204"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.strum]]
|
||
|
|
who = "danakj@chromium.org"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.25.0"
|
||
|
|
notes = """
|
||
|
|
Reviewed in https://crrev.com/c/5171063
|
||
|
|
|
||
|
|
Previously reviewed during security review and the audit is grandparented in.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.strum_macros]]
|
||
|
|
who = "danakj@chromium.org"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.25.3"
|
||
|
|
notes = """
|
||
|
|
Reviewed in https://crrev.com/c/5171063
|
||
|
|
|
||
|
|
Previously reviewed during security review and the audit is grandparented in.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.tinyvec]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.6.0 -> 1.6.1"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.tinyvec]]
|
||
|
|
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.6.1 -> 1.7.0"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.tinyvec]]
|
||
|
|
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.7.0 -> 1.8.0"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.unicode-ident]]
|
||
|
|
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.0.12"
|
||
|
|
notes = '''
|
||
|
|
I grepped for \"crypt\", \"cipher\", \"fs\", \"net\" - there were no hits.
|
||
|
|
|
||
|
|
All two functions from the public API of this crate use `unsafe` to avoid bound
|
||
|
|
checks for an array access. Cross-module analysis shows that the offsets can
|
||
|
|
be statically proven to be within array bounds. More details can be found in
|
||
|
|
the unsafe review CL at https://crrev.com/c/5350386.
|
||
|
|
|
||
|
|
This crate has been added to Chromium in https://crrev.com/c/3891618.
|
||
|
|
'''
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.google.audits.version_check]]
|
||
|
|
who = "George Burgess IV <gbiv@google.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.9.4"
|
||
|
|
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.block-buffer]]
|
||
|
|
who = "David Cook <dcook@divviup.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.9.0"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.getrandom]]
|
||
|
|
who = "David Cook <dcook@divviup.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.12 -> 0.2.14"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.getrandom]]
|
||
|
|
who = "David Cook <dcook@divviup.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.14 -> 0.2.15"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.once_cell]]
|
||
|
|
who = "Brandon Pitman <bran@bran.land>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.17.1 -> 1.17.2"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.once_cell]]
|
||
|
|
who = "David Cook <dcook@divviup.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.17.2 -> 1.18.0"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.once_cell]]
|
||
|
|
who = "Brandon Pitman <bran@bran.land>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.18.0 -> 1.19.0"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.rand_chacha]]
|
||
|
|
who = "David Cook <dcook@divviup.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.3.1"
|
||
|
|
|
||
|
|
[[audits.isrg.audits.rand_core]]
|
||
|
|
who = "David Cook <dcook@divviup.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.6.3"
|
||
|
|
|
||
|
|
[[audits.mozilla.wildcard-audits.unicode-normalization]]
|
||
|
|
who = "Manish Goregaokar <manishsmail@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
user-id = 1139 # Manish Goregaokar (Manishearth)
|
||
|
|
start = "2019-11-06"
|
||
|
|
end = "2024-05-03"
|
||
|
|
notes = "All code written or reviewed by Manish"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.block-buffer]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.10.2 -> 0.10.3"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.cpufeatures]]
|
||
|
|
who = "Gabriele Svelto <gsvelto@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.7 -> 0.2.8"
|
||
|
|
notes = "This release contains a single fix for an issue that affected Firefox"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.crypto-common]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.1.3 -> 0.1.6"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.errno]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.1 -> 0.3.3"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.fastrand]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.9.0 -> 2.0.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.flate2]]
|
||
|
|
who = "Alex Franchuk <afranchuk@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.28 -> 1.0.30"
|
||
|
|
notes = "Some new unsafe code, however it has been verified and there are unit tests as well."
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.foreign-types]]
|
||
|
|
who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.2 -> 0.5.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.foreign-types-macros]]
|
||
|
|
who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.2.3"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.foreign-types-shared]]
|
||
|
|
who = "Teodor Tanasoaia <ttanasoaia@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.1.1 -> 0.3.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.form_urlencoded]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "1.2.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.form_urlencoded]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.2.0 -> 1.2.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.hex]]
|
||
|
|
who = "Simon Friedberger <simon@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.4.3"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.idna]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.4.0 -> 0.5.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.litrs]]
|
||
|
|
who = "Erich Gubler <erichdongubler@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.4.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.malloc_buf]]
|
||
|
|
who = "Bobby Holley <bobbyholley@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.0.6"
|
||
|
|
notes = """
|
||
|
|
Very small crate for managing malloc-ed buffers, primarily for use in the objc crate.
|
||
|
|
There is an edge-case condition that passes slice::from_raw_parts(0x1, 0) which I'm
|
||
|
|
not entirely certain is technically sound, but in either case I am reasonably confident
|
||
|
|
it's not exploitable.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.memmap2]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.5.4 -> 0.5.7"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.memmap2]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.5.7 -> 0.5.8"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.memmap2]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.5.8 -> 0.5.9"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.memmap2]]
|
||
|
|
who = "Gabriele Svelto <gsvelto@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.5.9 -> 0.8.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.memmap2]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.8.0 -> 0.9.3"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.once_cell]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.12.0 -> 1.13.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.once_cell]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.13.1 -> 1.16.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.once_cell]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.16.0 -> 1.17.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.percent-encoding]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.2.0 -> 2.3.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.percent-encoding]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.3.0 -> 2.3.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.ppv-lite86]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.16 -> 0.2.17"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.rand_core]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.6.3 -> 0.6.4"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.typenum]]
|
||
|
|
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.15.0 -> 1.16.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.unicode-bidi]]
|
||
|
|
who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.8 -> 0.3.13"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.unicode-bidi]]
|
||
|
|
who = "Jonathan Kew <jkew@mozilla.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.13 -> 0.3.14"
|
||
|
|
notes = "I am the author of the bulk of the upstream changes in this version, and also checked the remaining post-0.3.13 changes."
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.unicode-bidi]]
|
||
|
|
who = "Jonathan Kew <jfkthame@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.14 -> 0.3.15"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.url]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "2.4.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.url]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.4.0 -> 2.4.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.url]]
|
||
|
|
who = "Valentin Gosu <valentin.gosu@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.4.1 -> 2.5.0"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.mozilla.audits.url]]
|
||
|
|
who = "Henri Sivonen <hsivonen@hsivonen.fi>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.5.0 -> 2.5.1"
|
||
|
|
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.autocfg]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.2.0 -> 1.3.0"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.block-buffer]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.10.3 -> 0.10.4"
|
||
|
|
notes = "Adds panics to prevent a block size of zero from causing unsoundness."
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.cpufeatures]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.8 -> 0.2.9"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.cpufeatures]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.9 -> 0.2.11"
|
||
|
|
notes = """
|
||
|
|
New `unsafe` block is to call `libc::getauxval(libc::AT_HWCAP)` on Linux for
|
||
|
|
LoongArch64 CPU feature detection support. This and the supporting macro code is
|
||
|
|
the same as the existing Linux code for AArch64.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.cpufeatures]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.11 -> 0.2.12"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.errno]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.3 -> 0.3.8"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.errno]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.8 -> 0.3.9"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.fastrand]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.0.1 -> 2.0.2"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.fastrand]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "2.0.2 -> 2.1.0"
|
||
|
|
notes = """
|
||
|
|
As noted in the changelog, this version produces different output for a given seed.
|
||
|
|
The documentation did not mention stability. It is possible that some uses relying on
|
||
|
|
determinism across the update would be broken.
|
||
|
|
|
||
|
|
The new constants do appear to match WyRand v4.2 (modulo ordering issues that I have not checked):
|
||
|
|
https://github.com/wangyi-fudan/wyhash/blob/408620b6d12b7d667b3dd6ae39b7929a39e8fa05/wyhash.h#L145
|
||
|
|
I have no way to check whether these constants are an improvement or not.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.generic-array]]
|
||
|
|
who = "Sean Bowe <ewillbefull@gmail.com>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.14.6 -> 0.14.7"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.memmap2]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.9.3 -> 0.9.4"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.miniz_oxide]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.7.1 -> 0.7.2"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.pin-project-lite]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.2.13 -> 0.2.14"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.rustc_version]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
version = "0.4.0"
|
||
|
|
notes = """
|
||
|
|
Most of the crate is code to parse and validate the output of `rustc -vV`. The caller can
|
||
|
|
choose which `rustc` to use, or can use `rustc_version::{version, version_meta}` which will
|
||
|
|
try `$RUSTC` followed by `rustc`.
|
||
|
|
|
||
|
|
If an adversary can arbitrarily set the `$RUSTC` environment variable then this crate will
|
||
|
|
execute arbitrary code. But when this crate is used within a build script, `$RUSTC` should
|
||
|
|
be set correctly by `cargo`.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.semver]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.17 -> 1.0.18"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.semver]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.18 -> 1.0.19"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.semver]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.19 -> 1.0.20"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.semver]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.20 -> 1.0.22"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.semver]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.0.22 -> 1.0.23"
|
||
|
|
notes = """
|
||
|
|
`build.rs` change is to enable checking for expected `#[cfg]` names if compiling
|
||
|
|
with Rust 1.80 or later.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/librustzcash/main/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.sharded-slab]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.1.4 -> 0.1.7"
|
||
|
|
notes = "Only change to an `unsafe` block is to fix a clippy lint."
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.thread_local]]
|
||
|
|
who = "Jack Grigg <jack@z.cash>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.1.4 -> 1.1.7"
|
||
|
|
notes = """
|
||
|
|
New `unsafe` usage:
|
||
|
|
- An extra `deallocate_bucket`, to replace a `Mutex::lock` with a `compare_exchange`.
|
||
|
|
- Setting and getting a `#[thread_local] static mut Option<Thread>` on nightly.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.thread_local]]
|
||
|
|
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.1.7 -> 1.1.8"
|
||
|
|
notes = """
|
||
|
|
Adds `unsafe` code that makes an assumption that `ptr::null_mut::<Entry<T>>()` is a valid representation
|
||
|
|
of an `AtomicPtr<Entry<T>>`, but this is likely a correct assumption.
|
||
|
|
"""
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.tinyvec_macros]]
|
||
|
|
who = "Jack Grigg <jack@z.cash>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.1.0 -> 0.1.1"
|
||
|
|
notes = "Adds `#![forbid(unsafe_code)]` and license files."
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.tracing-subscriber]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "0.3.17 -> 0.3.18"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||
|
|
|
||
|
|
[[audits.zcash.audits.typenum]]
|
||
|
|
who = "Jack Grigg <jack@electriccoin.co>"
|
||
|
|
criteria = "safe-to-deploy"
|
||
|
|
delta = "1.16.0 -> 1.17.0"
|
||
|
|
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|