46 lines
1.3 KiB
TOML
46 lines
1.3 KiB
TOML
# cargo-deny configuration. See https://embarkstudios.github.io/cargo-deny/
|
|
# Run locally with: cargo deny check
|
|
|
|
[advisories]
|
|
# Fail on any security advisory affecting the dependency tree.
|
|
yanked = "deny"
|
|
ignore = []
|
|
|
|
[bans]
|
|
# Flag multiple versions of the same crate so duplicate trees are visible.
|
|
multiple-versions = "deny"
|
|
wildcards = "deny"
|
|
|
|
# These versions are required by incompatible upstream dependency lines:
|
|
# - pem/rcgen/wtransport still use base64 0.22.
|
|
# - ring and wasm-bindgen still use getrandom 0.2.
|
|
# - current displaydoc/serde/thiserror/tokio and wasm-bindgen trees span syn 2
|
|
# and syn 3.
|
|
# - ring still uses windows-sys 0.52 while the Tokio/QUIC tree uses 0.61.
|
|
# Keep the duplicate-version policy strict for every other crate/version.
|
|
skip = [
|
|
{ name = "base64", version = "0.22.1" },
|
|
{ name = "getrandom", version = "0.2.17" },
|
|
{ name = "syn", version = "2.0.119" },
|
|
{ name = "windows-sys", version = "0.52.0" },
|
|
]
|
|
|
|
[licenses]
|
|
# Allowlist of licenses acceptable for this project's dependencies.
|
|
allow = [
|
|
"MIT",
|
|
"Apache-2.0",
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"BSD-2-Clause",
|
|
"BSD-3-Clause",
|
|
"ISC",
|
|
"Unicode-3.0",
|
|
"Zlib",
|
|
"MPL-2.0",
|
|
]
|
|
confidence-threshold = 0.8
|
|
|
|
[sources]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
|