diff --git a/Cargo.lock b/Cargo.lock
index 67d08a5e..9b5937e2 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -359,9 +359,9 @@ dependencies = [
 
 [[package]]
 name = "esplugin"
-version = "6.1.3"
+version = "6.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c334f10e3dc2e21d45e208f5b6b232a6876ea6352130d90a42bdb05246f7fcc"
+checksum = "ea69d8e4b2b22ec62ac4a26ed8099be4eecd800e0e60b241c04a1ccaa181a287"
 dependencies = [
  "encoding_rs",
  "memchr",
diff --git a/supply-chain/config.toml b/supply-chain/config.toml
index 1e9553a0..67078168 100644
--- a/supply-chain/config.toml
+++ b/supply-chain/config.toml
@@ -127,10 +127,6 @@ criteria = "safe-to-run"
 suggest = false
 notes = "At time of review this was only built if targeting WASI, which is not an intended target."
 
-[[exemptions.esplugin]]
-version = "6.1.3"
-criteria = "safe-to-deploy"
-
 [[exemptions.fixedbitset]]
 version = "0.5.7"
 criteria = "safe-to-deploy"
diff --git a/supply-chain/imports.lock b/supply-chain/imports.lock
index db0947f0..9f79db79 100644
--- a/supply-chain/imports.lock
+++ b/supply-chain/imports.lock
@@ -944,6 +944,12 @@ who = "David Cook <dcook@divviup.org>"
 criteria = "safe-to-deploy"
 delta = "1.12.1 -> 1.13.0"
 
+[[audits.libloadorder.audits.esplugin]]
+who = "Oliver Hamlet <git@ortham.net>"
+criteria = "safe-to-deploy"
+version = "6.1.4"
+notes = "This is my own crate published using Trusted Publishing, but I can't mark it as trusted by cargo-vet because it doesn't support Trusted Publishing and just sees that the publisher is unknown."
+
 [[audits.libloadorder.audits.keyvalues-parser]]
 who = "Oliver Hamlet <git@ortham.net>"
 criteria = "safe-to-deploy"