Google has released the audit results of 389 crate packages used in ChromiumOS and Fuchsia projects that support development in Rust. A file for dependency verification using the cargo vet command has been provided for checking compliance with security, correctness, and testing requirements.
Using 'cargo vet' ensures that only verified dependencies that meet predefined conditions are used in the project. The file for connecting to the cargo package manager reflects the approved versions of packages and tags assigned during the audit, such as safe usage confirmation, encryption support presence/absence, the existence of unsafe blocks in the code, and various levels of risk associated with the use of existing unsafe blocks.
Source: opennet.ru
