Prepare for 0.3.9 release (#398)
1[advisories]
2db-path = "~/.cargo/advisory-db"
3db-urls = ["https://github.com/rustsec/advisory-db"]
4vulnerability = "deny"
5unmaintained = "deny"
6yanked = "deny"
7notice = "deny"
8ignore = [
9 "RUSTSEC-2021-0145" # from criterion, used only for benchmarking
10]
11
12[licenses]
13unlicensed = "deny"
14copyleft = "deny"
15allow = [
16 "MIT",
17 "Unicode-DFS-2016",
18 "Apache-2.0",
19 "Zlib",
20 "ISC",
21 "BSD-3-Clause"
22]
23default = "deny"
24
25[bans]
26multiple-versions = "deny"
27wildcards = "deny"
28highlight = "all"
29# Certain crates/versions that will be skipped when doing duplicate detection.
30skip = [
31 # Bypass problems with wildcard dependencies for dev-dependncies.
32 # Proper fix requires https://github.com/EmbarkStudios/cargo-deny/issues/448
33 { name = "taffy" },
34
35 # This dependency won't actually end up in the final binary anyway as it a sub-dependency
36 # of num-cpus and atty only when targetting the hermit unikernel OS
37 # (https://github.com/hermitcore/rusty-hermit)
38 { name = "hermit-abi" },
39
40 # Long-term we'll want to re-ban this. However it's going to take a while for the ecosystem to
41 # transition over to syn 2 and we don't want to block Taffy releases in the meantime.
42 { name = "syn" },
43]
44
45[sources]
46unknown-registry = "deny"
47unknown-git = "deny"
48allow-registry = ["https://github.com/rust-lang/crates.io-index"]
49allow-git = []