Merge pull request #178 from freedomofpress/vet-clarify

Clarify we need to review all the code in Rust crates
freedomofpress · Aug 8, 2024 · d4d8099 · d4d8099
2 parents 94b5943 + 796ecb1
commit d4d8099
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/docs/dependency_updates.rst b/docs/dependency_updates.rst
@@ -251,3 +251,6 @@ Exemptions can be specified in ``supply-chain/config.toml``:
     [policy.windows-sys]
     criteria = []
     notes = "Windows-only"
+
+Note that within crates do review, you should still review all the code, regardless of what
+platform it is targeting.