@@ -2348,6 +2348,23 @@ version = "0.8.0"
23482348notes = "This crates was written by Sentry and I've fully audited it as Firefox crash reporting machinery relies on it."
23492349aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
23502350
2351+ [[audits.mozilla.audits.deranged]]
2352+ who = "Alex Franchuk <afranchuk@mozilla.com>"
2353+ criteria = "safe-to-deploy"
2354+ version = "0.3.11"
2355+ notes = """
2356+ This crate contains a decent bit of `unsafe` code, however all internal
2357+ unsafety is verified with copious assertions (many are compile-time), and
2358+ otherwise the unsafety is documented and left to the caller to verify.
2359+ """
2360+ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
2361+
2362+ [[audits.mozilla.audits.deranged]]
2363+ who = "Lars Eggert <lars@eggert.org>"
2364+ criteria = "safe-to-deploy"
2365+ delta = "0.3.11 -> 0.4.0"
2366+ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
2367+
23512368[[audits.mozilla.audits.digest]]
23522369who = "Mike Hommey <mh+mozilla@glandium.org>"
23532370criteria = "safe-to-deploy"
@@ -2594,6 +2611,16 @@ criteria = "safe-to-deploy"
25942611delta = "0.26.2 -> 0.27.1"
25952612aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
25962613
2614+ [[audits.mozilla.audits.num-conv]]
2615+ who = "Alex Franchuk <afranchuk@mozilla.com>"
2616+ criteria = "safe-to-deploy"
2617+ version = "0.1.0"
2618+ notes = """
2619+ Very straightforward, simple crate. No dependencies, unsafe, extern,
2620+ side-effectful std functions, etc.
2621+ """
2622+ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
2623+
25972624[[audits.mozilla.audits.num-integer]]
25982625who = "Josh Stone <jistone@redhat.com>"
25992626criteria = "safe-to-deploy"
@@ -2654,6 +2681,16 @@ criteria = "safe-to-deploy"
26542681delta = "0.3.25 -> 0.3.26"
26552682aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
26562683
2684+ [[audits.mozilla.audits.powerfmt]]
2685+ who = "Alex Franchuk <afranchuk@mozilla.com>"
2686+ criteria = "safe-to-deploy"
2687+ version = "0.2.0"
2688+ notes = """
2689+ A tiny bit of unsafe code to implement functionality that isn't in stable rust
2690+ yet, but it's all valid. Otherwise it's a pretty simple crate.
2691+ """
2692+ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
2693+
26572694[[audits.mozilla.audits.rand_core]]
26582695who = "Mike Hommey <mh+mozilla@glandium.org>"
26592696criteria = "safe-to-deploy"
@@ -2820,12 +2857,47 @@ criteria = "safe-to-deploy"
28202857delta = "0.3.17 -> 0.3.23"
28212858aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
28222859
2860+ [[audits.mozilla.audits.time]]
2861+ who = "Alex Franchuk <afranchuk@mozilla.com>"
2862+ criteria = "safe-to-deploy"
2863+ delta = "0.3.23 -> 0.3.36"
2864+ notes = """
2865+ There's a bit of new unsafe code that is self-imposed because they now assert
2866+ that ordinals are non-zero. All unsafe code was checked to ensure that the
2867+ invariants claimed were true.
2868+ """
2869+ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
2870+
2871+ [[audits.mozilla.audits.time]]
2872+ who = "Lars Eggert <lars@eggert.org>"
2873+ criteria = "safe-to-deploy"
2874+ delta = "0.3.36 -> 0.3.41"
2875+ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
2876+
28232877[[audits.mozilla.audits.time-core]]
28242878who = "Kershaw Chang <kershaw@mozilla.com>"
28252879criteria = "safe-to-deploy"
28262880version = "0.1.0"
28272881aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
28282882
2883+ [[audits.mozilla.audits.time-core]]
2884+ who = "Kershaw Chang <kershaw@mozilla.com>"
2885+ criteria = "safe-to-deploy"
2886+ delta = "0.1.0 -> 0.1.1"
2887+ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
2888+
2889+ [[audits.mozilla.audits.time-core]]
2890+ who = "Alex Franchuk <afranchuk@mozilla.com>"
2891+ criteria = "safe-to-deploy"
2892+ delta = "0.1.1 -> 0.1.2"
2893+ aggregated-from = "https://hg.mozilla.org/mozilla-central/raw-file/tip/supply-chain/audits.toml"
2894+
2895+ [[audits.mozilla.audits.time-core]]
2896+ who = "Lars Eggert <lars@eggert.org>"
2897+ criteria = "safe-to-deploy"
2898+ delta = "0.1.2 -> 0.1.4"
2899+ aggregated-from = "https://raw.githubusercontent.com/mozilla/glean/main/supply-chain/audits.toml"
2900+
28292901[[audits.mozilla.audits.tinystr]]
28302902who = "Makoto Kato <m_kato@ga2.so-net.ne.jp>"
28312903criteria = "safe-to-deploy"
@@ -3414,12 +3486,6 @@ criteria = "safe-to-deploy"
34143486delta = "2.1.0 -> 2.2.0"
34153487aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
34163488
3417- [[audits.zcash.audits.time-core]]
3418- who = "Jack Grigg <jack@electriccoin.co>"
3419- criteria = "safe-to-deploy"
3420- delta = "0.1.0 -> 0.1.1"
3421- aggregated-from = "https://raw.githubusercontent.com/zcash/zcash/master/qa/supply-chain/audits.toml"
3422-
34233489[[audits.zcash.audits.universal-hash]]
34243490who = "Daira Hopwood <daira@jacaranda.org>"
34253491criteria = "safe-to-deploy"
0 commit comments