1818# dependencies not shared by any other crates, would be ignored, as the target
1919# list here is effectively saying which targets you are building for.
2020targets = [
21-
22-
2321 # The triple can be any string, but only the target triples built in to
2422 # rustc (as of 1.40) can be checked against actual config expressions
2523 # { triple = "x86_64-unknown-linux-musl" },
@@ -48,13 +46,27 @@ ignore = [
4846 " RUSTSEC-2024-0370" ,
4947 # yaml-rust is unmaintained
5048 " RUSTSEC-2024-0320" ,
51- # difference is unmaintained
52- " RUSTSEC-2020-0095" ,
49+ # # difference is unmaintained
50+ # "RUSTSEC-2020-0095",
5351 # derivative is unmaintained
5452 " RUSTSEC-2024-0388" ,
5553 # instant is unmaintained
5654 " RUSTSEC-2024-0384" ,
55+ # paste is unmaintained
56+ " RUSTSEC-2024-0436" ,
57+ # backoff is unmaintained
58+ " RUSTSEC-2025-0012" ,
59+ # Logging user input may result in poisoning logs with ANSI escape sequences
60+ " RUSTSEC-2025-0055" ,
61+
62+ # these shall be fixed once we update the iota dependencies
63+ #
64+ # tokio: Broadcast channel calls clone in parallel, but does not require `Sync`
65+ " RUSTSEC-2025-0023" ,
66+ # protobuf: Crash due to uncontrolled recursion in protobuf crate
67+ " RUSTSEC-2024-0437"
5768]
69+
5870# Threshold for security vulnerabilities, any vulnerability with a CVSS score
5971# lower than the range specified will be ignored. Note that ignored advisories
6072# will still output a note when they are encountered.
@@ -159,8 +171,6 @@ ignore = false
159171# is only published to private registries, and ignore is true, the crate will
160172# not have its license(s) checked
161173registries = [
162-
163-
164174 # "https://sekretz.com/registry
165175]
166176
@@ -180,14 +190,10 @@ wildcards = "allow"
180190highlight = " all"
181191# List of crates that are allowed. Use with care!
182192allow = [
183-
184-
185193 # { name = "ansi_term", version = "=0.11.0" },
186194]
187195# List of crates to deny
188196deny = [
189-
190-
191197 # Each entry the name of a crate and a version range. If version is
192198 # not specified, all versions will be matched.
193199 # { name = "ansi_term", version = "=0.11.0" },
@@ -198,8 +204,6 @@ deny = [
198204]
199205# Certain crates/versions that will be skipped when doing duplicate detection.
200206skip = [
201-
202-
203207 # { name = "ansi_term", version = "=0.11.0" },
204208]
205209# Similarly to `skip` allows you to skip certain crates during duplicate
@@ -237,4 +241,4 @@ allow-git = [
237241 " https://github.com/bmwill/openapiv3.git" ,
238242]
239243
240- [sources .allow-org ]
244+ [sources .allow-org ]
0 commit comments