Repository: cloudflare/boringtun (language: rust)

Issue:
Project maintainership status.
Is it maintained? Is it recommended for real usage or only for testing?

> NOTE: This crate is still undergoing review for security concerns. Therefore, we recommend that you take caution before using it in a production application.

Is the review still going on, abandoned or complete? What is the result?


Discussion / hints:
The project is very much maintained, it is used exclusively by our deployment of the Warp app both server side, as well as on [Android](https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone&hl=en_US) and [iOS](https://apps.apple.com/us/app/1-1-1-1-faster-internet/id1423538627).

While we just launched, it is probably already the largest WireGuard deployment in the world. As we finish the post lunch polish, further improvements will be made, but it is 100% usable as is.

The internal review is complete, and all notable issues were fixed. Minor issues with no real security impact remain, the are tracked with the "security review" tag. In addition we plan to have an external audit of the project too.
Then maybe it's time for BoringTun v1.0.0?
Haha, that's a big commitment in the Rust world 
It's commitment to bump version to 2.0.0 in case of incompatible changes. Also indication that the crate is ready to be used for real.
So how should we take the warning note in the README?
> :warning: NOTE: This crate is still undergoing review for security concerns. Therefore, we recommend that you take caution before using it in a production application.

From previous comments, I understand we should have a look at issues tagged with `security-review` and decide for ourselves if we'll live with it, and otherwise we can consider it ready to use (knowing the other few bugs in the issues). Do you agree with that view?
@Lekensteyn can you address this question?
Yes, I think that the note can be removed. The worst known issue at the moment is probably #53, but it does not cause security issues on itself.
Any plans to release/tag a new version soon (not necessarily a 1.0.0), with the latest commits?

Fix patch:
diff --git a/README.md b/README.md
index 12ef6083..f5333a1f 100644
--- a/README.md
+++ b/README.md
@@ -6,13 +6,13 @@
 
 **BoringTun** is an implementation of the [WireGuard<sup>®</sup>](https://www.wireguard.com/) protocol designed for portability and speed.
 
+**BoringTun** is successfully deployed on millions of [iOS](https://apps.apple.com/us/app/1-1-1-1-faster-internet/id1423538627) and [Android](https://play.google.com/store/apps/details?id=com.cloudflare.onedotonedotonedotone&hl=en_US) consumer devices as well as thousands of Cloudflare Linux servers. 
+
 The project consists of two parts:
 
 * The executable `boringtun`, a [userspace WireGuard](https://www.wireguard.com/xplatform/) implementation for Linux and macOS.
 * The library `boringtun` that can be used to implement fast and efficient WireGuard client apps on various platforms, including iOS and Android. It implements the underlying WireGuard protocol, without the network or tunnel stacks, those can be implemented in a platform idiomatic way.
 
-⚠️ **NOTE:** This crate is still undergoing review for security concerns. Therefore, we recommend that you take caution before using it in a production application.
-
 ### Installation
 
 You can install this project using `cargo`:


Test patch: