Initialize cargo vet and manually review some dependencies

supply-chain/audits.toml

@@ -0,0 +1,19 @@
+
+# cargo-vet audits file
+
+[[audits.autocfg]]
+who = "Ryan Zoeller <rtzoeller@rtzoeller.com>"
+criteria = "safe-to-deploy"
+version = "1.1.0"
+notes = "Some potential for build-time abuse if woefully misconfigured, but for reasonable configurations it is well behaved. A potential footgun, not a violation in itself."
+
+[[audits.linux-futex]]
+who = "Ryan Zoeller <rtzoeller@rtzoeller.com>"
+criteria = "safe-to-deploy"
+version = "0.2.0"
+notes = "Minimal wrapper around Linux kernel futex API."
+
+[[audits.scopeguard]]
+who = "Ryan Zoeller <rtzoeller@rtzoeller.com>"
+criteria = "safe-to-deploy"
+version = "1.2.0"

supply-chain/config.toml

@@ -0,0 +1,96 @@
+
+# cargo-vet config file
+
+[cargo-vet]
+version = "0.9"
+
+[policy.priority-inheriting-lock]
+audit-as-crates-io = true
+
+[[exemptions.bitflags]]
+version = "2.4.2"
+criteria = "safe-to-run"
+
+[[exemptions.cfg-if]]
+version = "1.0.0"
+criteria = "safe-to-run"
+
+[[exemptions.errno]]
+version = "0.3.8"
+criteria = "safe-to-run"
+
+[[exemptions.hex]]
+version = "0.4.3"
+criteria = "safe-to-run"
+
+[[exemptions.lazy_static]]
+version = "1.4.0"
+criteria = "safe-to-run"
+
+[[exemptions.libc]]
+version = "0.2.153"
+criteria = "safe-to-deploy"
+
+[[exemptions.linux-raw-sys]]
+version = "0.4.13"
+criteria = "safe-to-run"
+
+[[exemptions.lock_api]]
+version = "0.4.11"
+criteria = "safe-to-deploy"
+
+[[exemptions.nix]]
+version = "0.27.1"
+criteria = "safe-to-run"
+
+[[exemptions.priority-inheriting-lock]]
+version = "0.3.0"
+criteria = "safe-to-deploy"
+
+[[exemptions.procfs]]
+version = "0.16.0"
+criteria = "safe-to-run"
+
+[[exemptions.procfs-core]]
+version = "0.16.0"
+criteria = "safe-to-run"
+
+[[exemptions.rustix]]
+version = "0.38.31"
+criteria = "safe-to-run"
+
+[[exemptions.windows-sys]]
+version = "0.52.0"
+criteria = "safe-to-run"
+
+[[exemptions.windows-targets]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_aarch64_gnullvm]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_aarch64_msvc]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_i686_gnu]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_i686_msvc]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_x86_64_gnu]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_x86_64_gnullvm]]
+version = "0.52.3"
+criteria = "safe-to-run"
+
+[[exemptions.windows_x86_64_msvc]]
+version = "0.52.3"
+criteria = "safe-to-run"

supply-chain/imports.lock

@@ -0,0 +1,2 @@
+
+# cargo-vet imports lock