deny.toml

[advisories]
version = 2
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
yanked = "warn"
ignore = [
  { id = "RUSTSEC-2024-0387", reason = "opentelemetry_api crate is only used in test-related dependencies" }
]

[bans]
multiple-versions = "allow"

[licenses]
version = 2
allow = [
  "0BSD",
  "Apache-2.0",
  "BSD-2-Clause",
  "BSD-3-Clause",
  "BSL-1.0",
  "CC0-1.0",
  "ISC",
  "MIT",
  "OpenSSL",
  "Unicode-3.0",
  "Unicode-DFS-2016",
  "Zlib"
]

[[licenses.clarify]]
name = "ring"
version = "*"
expression = "MIT AND ISC AND OpenSSL"
license-files = [
    { path = "LICENSE", hash = 0xbd0eed23 }
]

[sources]
allow-git = [
    # Git dependency for `lading_payload`, which isn't published on crates.io. We use a tagged version, though, so this
    # is reasonable from our perspective... especially considering the fact that we're the ones who own the repository.
    "https://github.com/DataDog/lading",
]