audits.toml (988B)
1 2 # cargo-vet audits file 3 4 [criteria.build-execution-reviewed] 5 description = "The package's build-time process execution, generated inputs, environment handling, filesystem writes, and output paths were reviewed for hermetic, bounded operation." 6 implies = "safe-to-deploy" 7 8 [criteria.crypto-reviewed] 9 description = "The package's cryptographic algorithms, key material handling, randomness, constant-time expectations, and protocol composition were reviewed for the Radroots use case." 10 implies = "safe-to-deploy" 11 12 [criteria.network-parser-reviewed] 13 description = "The package's untrusted network parsing, canonicalization, size limits, recursion limits, and malformed-input behavior were reviewed for fail-closed operation." 14 implies = "safe-to-deploy" 15 16 [criteria.secret-handling-reviewed] 17 description = "The package's secret lifecycle, redaction, zeroization, persistence, keyring boundary, and error behavior were reviewed for the Radroots use case." 18 implies = "safe-to-deploy" 19 20 [audits]