зеркало из https://github.com/mozilla/gecko-dev.git
332 строки
11 KiB
Plaintext
332 строки
11 KiB
Plaintext
|
|
# cargo-vet imports lock
|
|
|
|
[[audits.bytecodealliance.audits.arbitrary]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.1.0"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.arbitrary]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.1.4"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.arrayvec]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.7.2"
|
|
notes = """
|
|
Well documented invariants, good assertions for those invariants in unsafe code,
|
|
and tested with MIRI to boot. LGTM.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.atty]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.2.14"
|
|
notes = """
|
|
Contains only unsafe code for what this crate's purpose is and only accesses
|
|
the environment's terminal information when asked. Does its stated purpose and
|
|
no more.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.bumpalo]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "3.9.1"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.bumpalo]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "3.11.1"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.cc]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.0.73"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.cfg-if]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.0.0"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.codespan-reporting]]
|
|
who = "Jamey Sharp <jsharp@fastly.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.11.1"
|
|
notes = "This library uses `forbid(unsafe_code)` and has no filesystem or network I/O."
|
|
|
|
[[audits.bytecodealliance.audits.crypto-common]]
|
|
who = "Benjamin Bouvier <public@benj.me>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.1.3"
|
|
|
|
[[audits.bytecodealliance.audits.derive_arbitrary]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.1.0"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.derive_arbitrary]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.1.4"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.form_urlencoded]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.1.0"
|
|
notes = """
|
|
This is a small crate for working with url-encoded forms which doesn't have any
|
|
more than what it says on the tin. Contains one `unsafe` block related to
|
|
performance around utf-8 validation which is fairly easy to verify as correct.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.heck]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.4.0"
|
|
notes = "Contains `forbid_unsafe` and only uses `std::fmt` from the standard library. Otherwise only contains string manipulation."
|
|
|
|
[[audits.bytecodealliance.audits.id-arena]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "2.2.1"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.leb128]]
|
|
who = "Nick Fitzgerald <fitzgen@gmail.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.2.5"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.percent-encoding]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "2.2.0"
|
|
notes = """
|
|
This crate is a single-file crate that does what it says on the tin. There are
|
|
a few `unsafe` blocks related to utf-8 validation which are locally verifiable
|
|
as correct and otherwise this crate is good to go.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.rustc-demangle]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.1.21"
|
|
notes = "I am the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.unicase]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "2.6.0"
|
|
notes = """
|
|
This crate contains no `unsafe` code and no unnecessary use of the standard
|
|
library.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.unicode-bidi]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.3.8"
|
|
notes = """
|
|
This crate has no unsafe code and does not use `std::*`. Skimming the crate it
|
|
does not attempt to out of the bounds of what it's already supposed to be doing.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.unicode-normalization]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.1.19"
|
|
notes = """
|
|
This crate contains one usage of `unsafe` which I have manually checked to see
|
|
it as correct. This crate's size comes in large part due to the generated
|
|
unicode tables that it contains. This crate is additionally widely used
|
|
throughout the ecosystem and skimming the crate shows no usage of `std::*` APIs
|
|
and nothing suspicious.
|
|
"""
|
|
|
|
[[audits.bytecodealliance.audits.wasm-encoder]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.14.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-encoder]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.15.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-encoder]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.16.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-encoder]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.17.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-encoder]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.18.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-encoder]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.19.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-smith]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.11.2"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-smith]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.11.3"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-smith]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.11.4"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-smith]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.11.5"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-smith]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.11.6"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasm-smith]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-run"
|
|
version = "0.11.7"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.87.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.88.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.89.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.89.1"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.91.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.92.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wasmparser]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.93.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "35.0.2"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "44.0.0"
|
|
notes = "The Bytecode Alliance is the author of this crate"
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "45.0.0"
|
|
notes = "The Bytecode Alliance is the author of this crate"
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "46.0.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "47.0.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "47.0.1"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.bytecodealliance.audits.wast]]
|
|
who = "Alex Crichton <alex@alexcrichton.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "48.0.0"
|
|
notes = "The Bytecode Alliance is the author of this crate."
|
|
|
|
[[audits.embark.audits.anyhow]]
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "1.0.58"
|
|
|
|
[[audits.embark.audits.cty]]
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
|
criteria = "safe-to-deploy"
|
|
version = "0.2.2"
|
|
notes = "Inspected it and is a tiny crate with just type definitions"
|
|
|
|
[[audits.embark.audits.serial_test]]
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
|
criteria = "safe-to-run"
|
|
version = "0.6.0"
|
|
|
|
[[audits.embark.audits.serial_test_derive]]
|
|
who = "Johan Andersson <opensource@embark-studios.com>"
|
|
criteria = "safe-to-run"
|
|
version = "0.6.0"
|