Use cargo-vet to track our dependencies over time.
Cargo-vet is a tool to track which crates have been audited by whom. It'd be neat to use it. We won't be able to audit everything ourselves, but we can use upstream audits from folks at Google, Mozilla, and other sources.