Audit · windows-sys@0.61.2

cargo : windows-sys @ 0.61.2

PE Patrick Elsen signed 2026-05-28 published 2026-05-28

`.cargo_vcs_info.json`

6 lines · json

.cargo_vcs_info.json records commit 32c3144490c016fe496a0aed769bce60987a2e9d at path_in_vcs = "crates/libs/sys". The VCS workspace is the microsoft/windows-rs repository, currently checked out at HEAD (2269e0512, post-0.62.0). The publish commit is not present in the checked-out history (the repo has 2,647 commits, none matching 32c314), so byte-level equivalence between contents/ and a known-good VCS tree at the publish commit could not be verified by diff.

A diff against the current VCS HEAD (crates/libs/sys/) shows two categories of difference: (1) the VCS HEAD contains additional constant definitions not present in 0.61.2 (additive, consistent with ongoing bindgen output), and (2) ERROR_INVALID_CONFIG_VALUE has value 479u32 in the published crate and 519u32 in VCS HEAD, with a new ERROR_MEMORY_DECOMPRESSION_FAILURE = 479u32 added in HEAD -- consistent with a bugfix that corrected a constant value and added a new one. These differences match expected evolution between a patch release and a later development HEAD; there is no pattern suggesting tampering.

{  "git": {    "sha1": "32c3144490c016fe496a0aed769bce60987a2e9d"  },  "path_in_vcs": "crates/libs/sys"}