1[advisories]
2db-path = "~/.cargo/advisory-db"
3db-urls = ["https://github.com/rustsec/advisory-db"]
4vulnerability = "deny"
5unmaintained = "deny"
6yanked = "deny"
7notice = "deny"
8ignore = [
9 "RUSTSEC-2021-0145" # from criterion, used only for benchmarking
10]
11
12[licenses]
13unlicensed = "deny"
14copyleft = "deny"
15allow = [
16 "MIT",
17 "Unicode-DFS-2016",
18 "Apache-2.0",
19 "Zlib",
20]
21default = "deny"
22
23[bans]
24multiple-versions = "deny"
25wildcards = "deny"
26highlight = "all"
27# Certain crates/versions that will be skipped when doing duplicate detection.
28skip = [
29 # Bypass problems with wildcard dependencies for dev-dependncies.
30 # Proper fix requires https://github.com/EmbarkStudios/cargo-deny/issues/448
31 { name = "taffy" },
32
33 # This dependency won't actually end up in the final binary anyway as it a sub-dependency
34 # of num-cpus and atty only when targetted the hermit unikernel OS
35 # (https://github.com/hermitcore/rusty-hermit)
36 { name = "hermit-abi" }
37]
38
39[sources]
40unknown-registry = "deny"
41unknown-git = "deny"
42allow-registry = ["https://github.com/rust-lang/crates.io-index"]
43allow-git = []