-
Notifications
You must be signed in to change notification settings - Fork 55
/
.deny.toml
51 lines (47 loc) · 1.37 KB
/
.deny.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
[advisories]
vulnerability = "deny"
unmaintained = "allow" # TODO
unsound = "deny"
yanked = "deny"
notice = "deny"
ignore = [
"RUSTSEC-2021-0145", # atty 0.2, transitively dep of structopt (via old clap)
"RUSTSEC-2021-0119", # nix 0.18/0.20, transitively dep of kiss3d (via old glutin)
"RUSTSEC-2022-0041", # crossbeam-utils 0.7, transitively dep of kiss3d (via old rusttype)
"RUSTSEC-2023-0045", # memoffset 0.5, transitively dep of kiss3d (via old rusttype)
]
# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
[bans]
multiple-versions = "allow" # TODO
wildcards = "allow" # https://github.com/EmbarkStudios/cargo-deny/issues/448
skip = []
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
[licenses]
default = "deny"
unlicensed = "deny"
copyleft = "deny"
unused-allowed-license = "deny"
private.ignore = true
allow = [
"Apache-2.0",
"MIT",
"Unicode-DFS-2016", # unicode-ident
"BSD-3-Clause",
"CC0-1.0",
"ISC",
"OpenSSL",
"Zlib",
"MPL-2.0", # webpki-roots
]
[[licenses.clarify]]
name = "ring"
expression = "MIT AND ISC AND OpenSSL"
license-files = [
{ path = "LICENSE", hash = 0xbd0eed23 }
]
# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = []