Files
loot-condition-interpreter/supply-chain/config.toml
T
Oliver Hamlet 176c4184ba Update criterion to v0.8.1
The new transitive dependency on cc is intentionally set to v1.2.5 in the lockfile because that's the newest version that already has an audit.
2026-01-01 02:26:02 +00:00

148 lines
4.1 KiB
TOML

# cargo-vet config file
[cargo-vet]
version = "0.10"
[imports.bytecode-alliance]
url = "https://raw.githubusercontent.com/bytecodealliance/wasmtime/main/supply-chain/audits.toml"
[imports.esplugin]
url = "https://raw.githubusercontent.com/Ortham/esplugin/refs/heads/master/supply-chain/audits.toml"
[imports.google]
url = "https://raw.githubusercontent.com/google/supply-chain/main/audits.toml"
[imports.isrg]
url = "https://raw.githubusercontent.com/divviup/libprio-rs/main/supply-chain/audits.toml"
[imports.mozilla]
url = "https://raw.githubusercontent.com/mozilla/supply-chain/main/audits.toml"
[policy.loot-condition-interpreter]
audit-as-crates-io = false
[[exemptions.aho-corasick]]
version = "1.1.3"
criteria = "safe-to-deploy"
[[exemptions.crc32fast]]
version = "1.5.0"
criteria = "safe-to-deploy"
[[exemptions.criterion]]
version = "0.7.0"
criteria = "safe-to-run"
[[exemptions.errno]]
version = "0.3.14"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.js-sys]]
version = "0.3.77"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.linux-raw-sys]]
version = "0.11.0"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.memchr]]
version = "2.7.4"
criteria = "safe-to-deploy"
[[exemptions.nom]]
version = "8.0.0"
criteria = "safe-to-deploy"
[[exemptions.plotters]]
version = "0.3.7"
criteria = "safe-to-run"
[[exemptions.plotters-backend]]
version = "0.3.7"
criteria = "safe-to-run"
[[exemptions.plotters-svg]]
version = "0.3.7"
criteria = "safe-to-run"
[[exemptions.r-efi]]
version = "5.2.0"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.regex]]
version = "1.11.2"
criteria = "safe-to-deploy"
[[exemptions.regex-automata]]
version = "0.4.9"
criteria = "safe-to-deploy"
[[exemptions.rustix]]
version = "1.1.2"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.wasi]]
version = "0.14.2+wasi-0.2.4"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.wasm-bindgen]]
version = "0.2.100"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.wasm-bindgen-backend]]
version = "0.2.100"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.wasm-bindgen-macro]]
version = "0.2.100"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.wasm-bindgen-macro-support]]
version = "0.2.100"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.wasm-bindgen-shared]]
version = "0.2.100"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.web-sys]]
version = "0.3.77"
criteria = "safe-to-run"
suggest = false
notes = "At time of review this was only built if targeting WASM, which is not an intended target."
[[exemptions.winapi-i686-pc-windows-gnu]]
version = "0.4.0"
criteria = "safe-to-run"
suggest = false
notes = "It's a collection of static library binaries and a build script that configures Cargo to use them, so it's not really reviewable."
[[exemptions.winapi-x86_64-pc-windows-gnu]]
version = "0.4.0"
criteria = "safe-to-run"
suggest = false
notes = "It's a collection of static library binaries and a build script that configures Cargo to use them, so it's not really reviewable."