Skip to content

Commit 2719201

Browse files
committed
cargo vets.
1 parent 9ee0fd6 commit 2719201

File tree

2 files changed

+81
-0
lines changed

2 files changed

+81
-0
lines changed

supply-chain/audits.toml

Lines changed: 69 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2051,6 +2051,12 @@ criteria = "safe-to-deploy"
20512051
version = "0.1.6"
20522052
notes = "Contains no unsafe code, no IO, no build.rs."
20532053

2054+
[[audits.ansi_term]]
2055+
who = "Chris Fallin <chris@cfallin.org>"
2056+
criteria = "safe-to-deploy"
2057+
version = "0.12.1"
2058+
notes = "Only unsafe code is to access the console on Windows."
2059+
20542060
[[audits.anyhow]]
20552061
who = "Alex Crichton <alex@alexcrichton.com>"
20562062
criteria = "safe-to-deploy"
@@ -2660,6 +2666,11 @@ criteria = "safe-to-deploy"
26602666
version = "0.4.4"
26612667
notes = "Most unsafe is hidden by `inout` dependency; only remaining unsafe is raw-splitting a slice and an unreachable hint. Older versions of this regularly reach ~150k daily downloads."
26622668

2669+
[[audits.clap]]
2670+
who = "Chris Fallin <chris@cfallin.org>"
2671+
criteria = "safe-to-deploy"
2672+
version = "2.34.0"
2673+
26632674
[[audits.cobs]]
26642675
who = "Alex Crichton <alex@alexcrichton.com>"
26652676
criteria = "safe-to-deploy"
@@ -3159,6 +3170,16 @@ who = "Pat Hickey <p.hickey@f5.com>"
31593170
criteria = "safe-to-deploy"
31603171
delta = "0.6.0 -> 0.8.1"
31613172

3173+
[[audits.gdbstub]]
3174+
who = "Chris Fallin <chris@cfallin.org>"
3175+
criteria = "safe-to-deploy"
3176+
version = "0.7.10"
3177+
3178+
[[audits.gdbstub_arch]]
3179+
who = "Chris Fallin <chris@cfallin.org>"
3180+
criteria = "safe-to-deploy"
3181+
version = "0.3.3"
3182+
31623183
[[audits.gimli]]
31633184
who = "Alex Crichton <alex@alexcrichton.com>"
31643185
criteria = "safe-to-deploy"
@@ -3253,12 +3274,22 @@ criteria = "safe-to-deploy"
32533274
version = "0.4.0"
32543275
notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
32553276

3277+
[[audits.heck]]
3278+
who = "Chris Fallin <chris@cfallin.org>"
3279+
criteria = "safe-to-deploy"
3280+
delta = "0.4.0 -> 0.3.3"
3281+
32563282
[[audits.heck]]
32573283
who = "Alex Crichton <alex@alexcrichton.com>"
32583284
criteria = "safe-to-deploy"
32593285
delta = "0.4.1 -> 0.5.0"
32603286
notes = "Minor changes for a `no_std` upgrade but otherwise everything looks as expected."
32613287

3288+
[[audits.hermit-abi]]
3289+
who = "Chris Fallin <chris@cfallin.org>"
3290+
criteria = "safe-to-deploy"
3291+
version = "0.1.19"
3292+
32623293
[[audits.hermit-abi]]
32633294
who = "Pat Hickey <phickey@fastly.com>"
32643295
criteria = "safe-to-deploy"
@@ -3744,6 +3775,12 @@ criteria = "safe-to-deploy"
37443775
delta = "0.4.1 -> 0.4.2"
37453776
notes = "It does unsafe FFI bindings, as expected. I didn't check the FFI bindings against the C headers."
37463777

3778+
[[audits.managed]]
3779+
who = "Chris Fallin <chris@cfallin.org>"
3780+
criteria = "safe-to-deploy"
3781+
version = "0.8.0"
3782+
notes = "No unsafe code."
3783+
37473784
[[audits.matchers]]
37483785
who = "Pat Hickey <phickey@fastly.com>"
37493786
criteria = "safe-to-deploy"
@@ -4143,6 +4180,12 @@ criteria = "safe-to-deploy"
41434180
version = "2.2.1"
41444181
notes = "forbid-unsafe crate with straightforward imports."
41454182

4183+
[[audits.pastey]]
4184+
who = "Chris Fallin <chris@cfallin.org>"
4185+
criteria = "safe-to-deploy"
4186+
version = "0.2.1"
4187+
notes = "No unsafe code."
4188+
41464189
[[audits.peeking_take_while]]
41474190
who = "Nick Fitzgerald <fitzgen@gmail.com>"
41484191
criteria = "safe-to-deploy"
@@ -4217,6 +4260,11 @@ criteria = "safe-to-deploy"
42174260
delta = "0.4.0 -> 0.5.0"
42184261
notes = "This is a minor update which bumps the `env_logger` dependency and has other formatting, no major changes."
42194262

4263+
[[audits.proc-macro-error]]
4264+
who = "Chris Fallin <chris@cfallin.org>"
4265+
criteria = "safe-to-deploy"
4266+
version = "1.0.4"
4267+
42204268
[[audits.proc-macro2]]
42214269
who = "Pat Hickey <phickey@fastly.com>"
42224270
criteria = "safe-to-deploy"
@@ -4603,6 +4651,21 @@ criteria = "safe-to-deploy"
46034651
version = "1.1.0"
46044652
notes = "No dependencies and completely a compile-time crate as advertised. Uses `unsafe` in one module as a compile-time check only: `mem::transmute` and `ptr::write` are wrapped in an impossible-to-run closure."
46054653

4654+
[[audits.strsim]]
4655+
who = "Chris Fallin <chris@cfallin.org>"
4656+
criteria = "safe-to-deploy"
4657+
delta = "0.10.0 -> 0.8.0"
4658+
4659+
[[audits.structopt]]
4660+
who = "Chris Fallin <chris@cfallin.org>"
4661+
criteria = "safe-to-deploy"
4662+
version = "0.3.26"
4663+
4664+
[[audits.structopt-derive]]
4665+
who = "Chris Fallin <chris@cfallin.org>"
4666+
criteria = "safe-to-deploy"
4667+
version = "0.4.18"
4668+
46064669
[[audits.syn]]
46074670
who = "Pat Hickey <phickey@fastly.com>"
46084671
criteria = "safe-to-deploy"
@@ -4726,6 +4789,12 @@ criteria = "safe-to-run"
47264789
delta = "0.2.16 -> 0.2.18"
47274790
notes = "Standard macro changes, nothing out of place"
47284791

4792+
[[audits.textwrap]]
4793+
who = "Chris Fallin <chris@cfallin.org>"
4794+
criteria = "safe-to-deploy"
4795+
version = "0.11.0"
4796+
notes = "No unsafe code."
4797+
47294798
[[audits.thread_local]]
47304799
who = "Pat Hickey <phickey@fastly.com>"
47314800
criteria = "safe-to-deploy"

supply-chain/imports.lock

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2266,6 +2266,12 @@ criteria = "safe-to-deploy"
22662266
version = "0.1.0"
22672267
notes = "No unsafe usage or ambient capabilities, sane build script"
22682268

2269+
[[audits.embark-studios.audits.vec_map]]
2270+
who = "Johan Andersson <opensource@embark-studios.com>"
2271+
criteria = "safe-to-deploy"
2272+
version = "0.8.2"
2273+
notes = "No unsafe usage or ambient capabilities"
2274+
22692275
[[audits.google.audits.addr2line]]
22702276
who = "George Burgess IV <gbiv@google.com>"
22712277
criteria = "safe-to-run"
@@ -2357,6 +2363,12 @@ delta = "0.2.9 -> 0.2.13"
23572363
notes = "Audited at https://fxrev.dev/946396"
23582364
aggregated-from = "https://fuchsia.googlesource.com/fuchsia/+/refs/heads/main/third_party/rust_crates/supply-chain/audits.toml?format=TEXT"
23592365

2366+
[[audits.google.audits.proc-macro-error-attr]]
2367+
who = "George Burgess IV <gbiv@google.com>"
2368+
criteria = "safe-to-deploy"
2369+
version = "1.0.4"
2370+
aggregated-from = "https://chromium.googlesource.com/chromiumos/third_party/rust_crates/+/refs/heads/main/cargo-vet/audits.toml?format=TEXT"
2371+
23602372
[[audits.google.audits.rand]]
23612373
who = "Lukasz Anforowicz <lukasza@chromium.org>"
23622374
criteria = "safe-to-deploy"

0 commit comments

Comments
 (0)