mirror of
https://github.com/rosenpass/rosenpass.git
synced 2026-07-28 14:26:59 -07:00
cargo vet regenerate exemptions
This commit is contained in:
Ilka Schulz
+36
-20
@@ -78,7 +78,7 @@ version = "1.0.102"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.ar_archive_writer]]
|
||||
version = "0.5.1"
|
||||
version = "0.5.2"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.assert_tv]]
|
||||
@@ -122,11 +122,11 @@ version = "0.1.4"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.bytes]]
|
||||
version = "1.7.1"
|
||||
version = "1.12.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.cc]]
|
||||
version = "1.2.63"
|
||||
version = "1.2.65"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.chacha20]]
|
||||
@@ -237,6 +237,18 @@ criteria = "safe-to-deploy"
|
||||
version = "0.20.10"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.defmt]]
|
||||
version = "1.1.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.defmt-macros]]
|
||||
version = "1.1.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.defmt-parser]]
|
||||
version = "1.0.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.derive_builder]]
|
||||
version = "0.10.2"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -349,6 +361,10 @@ criteria = "safe-to-deploy"
|
||||
version = "0.2.17"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.getrandom]]
|
||||
version = "0.4.3"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.half]]
|
||||
version = "2.7.1"
|
||||
criteria = "safe-to-run"
|
||||
@@ -369,10 +385,6 @@ criteria = "safe-to-deploy"
|
||||
version = "0.4.12"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.id-arena]]
|
||||
version = "2.3.0"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.indexmap]]
|
||||
version = "2.14.0"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -394,11 +406,11 @@ version = "1.0.18"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.jiff]]
|
||||
version = "0.2.28"
|
||||
version = "0.2.29"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.jiff-static]]
|
||||
version = "0.2.28"
|
||||
version = "0.2.29"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.jobserver]]
|
||||
@@ -406,7 +418,7 @@ version = "0.1.34"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.js-sys]]
|
||||
version = "0.3.99"
|
||||
version = "0.3.102"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.keccak]]
|
||||
@@ -438,7 +450,7 @@ version = "0.4.33"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.memchr]]
|
||||
version = "2.8.1"
|
||||
version = "2.8.2"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.memoffset]]
|
||||
@@ -573,6 +585,10 @@ criteria = "safe-to-run"
|
||||
version = "0.1.31"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.quote]]
|
||||
version = "1.0.46"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.r-efi]]
|
||||
version = "5.2.0"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -594,7 +610,7 @@ version = "0.5.18"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.regex]]
|
||||
version = "1.11.1"
|
||||
version = "1.12.4"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.regex-automata]]
|
||||
@@ -602,7 +618,7 @@ version = "0.4.9"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.regex-syntax]]
|
||||
version = "0.8.10"
|
||||
version = "0.8.11"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.roff]]
|
||||
@@ -698,7 +714,7 @@ version = "1.0.109"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.syn]]
|
||||
version = "2.0.117"
|
||||
version = "2.0.118"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.take-until]]
|
||||
@@ -762,7 +778,7 @@ version = "0.2.11"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.uuid]]
|
||||
version = "1.23.2"
|
||||
version = "1.23.3"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.version_check]]
|
||||
@@ -778,23 +794,23 @@ version = "0.11.0+wasi-snapshot-preview1"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
[[exemptions.wasm-bindgen]]
|
||||
version = "0.2.122"
|
||||
version = "0.2.125"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.wasm-bindgen-macro]]
|
||||
version = "0.2.122"
|
||||
version = "0.2.125"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.wasm-bindgen-macro-support]]
|
||||
version = "0.2.122"
|
||||
version = "0.2.125"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.wasm-bindgen-shared]]
|
||||
version = "0.2.122"
|
||||
version = "0.2.125"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.web-sys]]
|
||||
version = "0.3.99"
|
||||
version = "0.3.102"
|
||||
criteria = "safe-to-run"
|
||||
|
||||
[[exemptions.winapi-i686-pc-windows-gnu]]
|
||||
|
||||
+38
-317
@@ -29,78 +29,18 @@ user-id = 696
|
||||
user-login = "fitzgen"
|
||||
user-name = "Nick Fitzgerald"
|
||||
|
||||
[[publisher.unicode-xid]]
|
||||
version = "0.2.6"
|
||||
when = "2024-09-19"
|
||||
user-id = 1139
|
||||
user-login = "Manishearth"
|
||||
user-name = "Manish Goregaokar"
|
||||
|
||||
[[publisher.wasip2]]
|
||||
version = "1.0.3+wasi-0.2.9"
|
||||
when = "2026-04-17"
|
||||
version = "1.0.4+wasi-0.2.12"
|
||||
when = "2026-06-12"
|
||||
user-id = 1
|
||||
user-login = "alexcrichton"
|
||||
user-name = "Alex Crichton"
|
||||
|
||||
[[publisher.wasip3]]
|
||||
version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
|
||||
when = "2026-01-15"
|
||||
user-id = 1
|
||||
user-login = "alexcrichton"
|
||||
user-name = "Alex Crichton"
|
||||
|
||||
[[publisher.wasm-encoder]]
|
||||
version = "0.244.0"
|
||||
when = "2026-01-06"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
|
||||
[[publisher.wasm-metadata]]
|
||||
version = "0.236.0"
|
||||
when = "2025-07-28"
|
||||
user-id = 73222
|
||||
user-login = "wasmtime-publish"
|
||||
|
||||
[[publisher.wasmparser]]
|
||||
version = "0.244.0"
|
||||
when = "2026-01-06"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
|
||||
[[publisher.wit-bindgen]]
|
||||
version = "0.51.0"
|
||||
when = "2026-01-12"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
|
||||
[[publisher.wit-bindgen]]
|
||||
version = "0.57.1"
|
||||
when = "2026-04-17"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
|
||||
[[publisher.wit-bindgen-core]]
|
||||
version = "0.51.0"
|
||||
when = "2026-01-12"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
|
||||
[[publisher.wit-bindgen-rust]]
|
||||
version = "0.51.0"
|
||||
when = "2026-01-12"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
|
||||
[[publisher.wit-bindgen-rust-macro]]
|
||||
version = "0.51.0"
|
||||
when = "2026-01-12"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
|
||||
[[publisher.wit-component]]
|
||||
version = "0.244.0"
|
||||
when = "2026-01-06"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
|
||||
[[publisher.wit-parser]]
|
||||
version = "0.244.0"
|
||||
when = "2026-01-06"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
|
||||
[audits.actix.audits]
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.arbitrary]]
|
||||
@@ -136,44 +76,6 @@ notes = """
|
||||
This is a Bytecode Alliance authored crate.
|
||||
"""
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wasip3]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 1 # Alex Crichton (alexcrichton)
|
||||
start = "2025-09-10"
|
||||
end = "2026-08-21"
|
||||
notes = """
|
||||
This is a Bytecode Alliance authored crate.
|
||||
"""
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wasm-encoder]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
start = "2025-08-14"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 73222 # wasmtime-publish
|
||||
start = "2023-01-01"
|
||||
end = "2026-06-03"
|
||||
notes = """
|
||||
The Bytecode Alliance uses the `wasmtime-publish` crates.io account to automate
|
||||
publication of this crate from CI. This repository requires all PRs are reviewed
|
||||
by a Bytecode Alliance maintainer and it owned by the Bytecode Alliance itself.
|
||||
"""
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wasmparser]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
start = "2025-08-14"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wit-bindgen]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -182,46 +84,6 @@ start = "2025-08-13"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wit-bindgen-core]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
start = "2025-08-13"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wit-bindgen-rust]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
start = "2025-08-13"
|
||||
end = "2027-01-12"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wit-bindgen-rust-macro]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wit-bindgen"
|
||||
start = "2025-08-13"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wit-component]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
start = "2025-08-14"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.wildcard-audits.wit-parser]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
trusted-publisher = "github:bytecodealliance/wasm-tools"
|
||||
start = "2025-08-14"
|
||||
end = "2027-01-08"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.addr2line]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -344,21 +206,6 @@ who = "Dan Gohman <dev@sunfishcode.online>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.3.9 -> 0.3.10"
|
||||
|
||||
[[audits.bytecode-alliance.audits.foldhash]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
version = "0.1.3"
|
||||
notes = """
|
||||
Only a minor amount of `unsafe` code in this crate related to global per-process
|
||||
initialization which looks correct to me.
|
||||
"""
|
||||
|
||||
[[audits.bytecode-alliance.audits.getrandom]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.4.1 -> 0.4.2"
|
||||
notes = "Nothing awry in this update, standard updates for some platforms and other misc things."
|
||||
|
||||
[[audits.bytecode-alliance.audits.gimli]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -409,12 +256,6 @@ criteria = "safe-to-deploy"
|
||||
version = "0.1.3"
|
||||
notes = "A part of RustCrypto/utils, this crate is designed to handle unsafe buffers and carefully documents the safety concerns throughout. Older versions of this tally up to ~130k daily downloads."
|
||||
|
||||
[[audits.bytecode-alliance.audits.leb128fmt]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
version = "0.1.0"
|
||||
notes = "Well-scoped crate do doing LEB encoding with no `unsafe` code and does what it says on the tin."
|
||||
|
||||
[[audits.bytecode-alliance.audits.miniz_oxide]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -525,54 +366,6 @@ criteria = "safe-to-deploy"
|
||||
delta = "3.5.0 -> 3.6.0"
|
||||
notes = "Dependency updates and new optimized trait implementations, but otherwise everything looks normal."
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.236.0 -> 0.237.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.237.0 -> 0.238.1"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.238.1 -> 0.239.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.239.0 -> 0.240.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.240.0 -> 0.241.2"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.241.2 -> 0.242.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.242.0 -> 0.243.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.bytecode-alliance.audits.wasm-metadata]]
|
||||
who = "Alex Crichton <alex@alexcrichton.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.243.0 -> 0.244.0"
|
||||
notes = "The Bytecode Alliance is the author of this crate"
|
||||
|
||||
[[audits.embark-studios.audits.cfg_aliases]]
|
||||
who = "Johan Andersson <opensource@embark-studios.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -611,6 +404,22 @@ criteria = "safe-to-run"
|
||||
version = "0.19.0"
|
||||
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.bitflags]]
|
||||
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
version = "1.3.2"
|
||||
notes = """
|
||||
Security review of earlier versions of the crate can be found at
|
||||
(Google-internal, sorry): go/image-crate-chromium-security-review
|
||||
|
||||
The crate exposes a function marked as `unsafe`, but doesn't use any
|
||||
`unsafe` blocks (except for tests of the single `unsafe` function). I
|
||||
think this justifies marking this crate as `ub-risk-1`.
|
||||
|
||||
Additional review comments can be found at https://crrev.com/c/4723145/31
|
||||
"""
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.byteorder]]
|
||||
who = "danakj <danakj@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -707,20 +516,6 @@ delta = "1.0.1 -> 1.0.2"
|
||||
notes = "No changes to any .rs files or Rust code."
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.foldhash]]
|
||||
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.1.3 -> 0.1.4"
|
||||
notes = "No changes to safety-relevant code"
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.foldhash]]
|
||||
who = "Chris Palmer <palmer@google.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.1.4 -> 0.1.5"
|
||||
notes = "No new `unsafe`."
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.gimli]]
|
||||
who = "George Burgess IV <gbiv@google.com>"
|
||||
criteria = "safe-to-run"
|
||||
@@ -926,56 +721,6 @@ delta = "1.0.93 -> 1.0.94"
|
||||
notes = "Minor doc changes and clippy lint adjustments+fixes."
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.quote]]
|
||||
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
version = "1.0.35"
|
||||
notes = """
|
||||
Grepped for "unsafe", "crypt", "cipher", "fs", "net" - there were no hits
|
||||
(except for benign "net" hit in tests and "fs" hit in README.md)
|
||||
"""
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.quote]]
|
||||
who = "Adrian Taylor <adetaylor@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.35 -> 1.0.36"
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.quote]]
|
||||
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.36 -> 1.0.37"
|
||||
notes = """
|
||||
The delta just 1) inlines/expands `impl ToTokens` that used to be handled via
|
||||
`primitive!` macro and 2) adds `impl ToTokens` for `CStr` and `CString`.
|
||||
"""
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.quote]]
|
||||
who = "Dustin J. Mitchell <djmitche@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.37 -> 1.0.38"
|
||||
notes = "Still no unsafe"
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.quote]]
|
||||
who = "Daniel Cheng <dcheng@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.38 -> 1.0.39"
|
||||
notes = "Only minor changes for clippy lints and documentation."
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.quote]]
|
||||
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.39 -> 1.0.40"
|
||||
notes = """
|
||||
The delta is just a simplification of how `tokens.extend(...)` call is made.
|
||||
Still no `unsafe` anywhere.
|
||||
"""
|
||||
aggregated-from = "https://chromium.googlesource.com/chromium/src/+/main/third_party/rust/chromium_crates_io/supply-chain/audits.toml?format=TEXT"
|
||||
|
||||
[[audits.google.audits.rand]]
|
||||
who = "Lukasz Anforowicz <lukasza@chromium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -1559,16 +1304,6 @@ who = "David Cook <dcook@divviup.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.3.3 -> 0.3.4"
|
||||
|
||||
[[audits.isrg.audits.getrandom]]
|
||||
who = "David Cook <dcook@divviup.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.3.4 -> 0.4.0"
|
||||
|
||||
[[audits.isrg.audits.getrandom]]
|
||||
who = "David Cook <dcook@divviup.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "0.4.0 -> 0.4.1"
|
||||
|
||||
[[audits.isrg.audits.once_cell]]
|
||||
who = "J.C. Jones <jc@insufficient.coffee>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -1705,15 +1440,6 @@ end = "2024-04-21"
|
||||
notes = "No unsafe code, rather straight-forward parser."
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.wildcard-audits.unicode-xid]]
|
||||
who = "Manish Goregaokar <manishsmail@gmail.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
user-id = 1139 # Manish Goregaokar (Manishearth)
|
||||
start = "2019-07-25"
|
||||
end = "2027-04-23"
|
||||
notes = "All code written or reviewed by Manish"
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.adler2]]
|
||||
who = "Erich Gubler <erichdongubler@gmail.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -1907,18 +1633,26 @@ version = "11.1.5"
|
||||
notes = "Small random number generator, explicitly not cryptographically secure, no use of unsafe code, no dependencies"
|
||||
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.proc-macro-error-attr2]]
|
||||
who = "Kagami Sascha Rosylight <saschanaz@outlook.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
version = "2.0.0"
|
||||
notes = "No unsafe block."
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.proc-macro-error2]]
|
||||
who = "Kagami Sascha Rosylight <saschanaz@outlook.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
version = "2.0.1"
|
||||
notes = "No unsafe block with a lovely `#![forbid(unsafe_code)]`."
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.proc-macro2]]
|
||||
who = "Jan-Erik Rediger <jrediger@mozilla.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.94 -> 1.0.106"
|
||||
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.quote]]
|
||||
who = "Jan-Erik Rediger <jrediger@mozilla.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.0.40 -> 1.0.45"
|
||||
aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.rand]]
|
||||
who = "Henrik Skupin <mail@hskupin.info>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -1929,12 +1663,6 @@ feature. No new dependencies or unsafe code.
|
||||
"""
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.regex]]
|
||||
who = "Benjamin VanderSloot <bvandersloot@mozilla.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.11.1 -> 1.12.3"
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.regex-automata]]
|
||||
who = "Benjamin VanderSloot <bvandersloot@mozilla.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -1989,6 +1717,12 @@ criteria = "safe-to-deploy"
|
||||
delta = "1.14.0 -> 1.15.1"
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.smallvec]]
|
||||
who = "Mike Hommey <mh+mozilla@glandium.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.15.1 -> 1.15.2"
|
||||
aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
|
||||
|
||||
[[audits.mozilla.audits.strsim]]
|
||||
who = "Ben Dean-Kawamura <bdk@mozilla.com>"
|
||||
criteria = "safe-to-deploy"
|
||||
@@ -2077,19 +1811,6 @@ delta = "0.10.3 -> 0.10.4"
|
||||
notes = "Adds panics to prevent a block size of zero from causing unsoundness."
|
||||
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||||
|
||||
[[audits.zcash.audits.bytes]]
|
||||
who = "Jack Grigg <jack@electriccoin.co>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.7.1 -> 1.7.2"
|
||||
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||||
|
||||
[[audits.zcash.audits.bytes]]
|
||||
who = "Daira-Emma Hopwood <daira@jacaranda.org>"
|
||||
criteria = "safe-to-deploy"
|
||||
delta = "1.7.2 -> 1.11.1"
|
||||
notes = "New/changed uses of unsafe are documented and seem plausible."
|
||||
aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
|
||||
|
||||
[[audits.zcash.audits.crossbeam-utils]]
|
||||
who = "Jack Grigg <jack@electriccoin.co>"
|
||||
criteria = "safe-to-deploy"
|
||||
|
||||
Reference in New Issue
Block a user