CRAB has been deprecated, and all third-party crate auditing is now done through cargo-vet . To run cargo-vet locally, please try ../scripts/cargo-vet.py.
For more information about cargo-vet within ChromeOS, check out the README.
If you have existing CRAB audits that you would like to use, the following keys correspond exactly between CRAB and cargo-vet:
code_is_not_malicious = true is cargo-vet's safe-to-run (if the code is malicious, please don't check it in or run it ;) )implements_crypto = false is cargo-vet's does-not-implement-cryptoimplements_crypto = true requires either review or verification by a crypto expert. Please reach out to allenwebb@, gbiv@, and palmer@ for more information.Any other questions about how to migrate your review? gbiv@ can hopefully help - email him. :)