1- # This template contains all of the possible sections and their default values
2- # More detailed descriptions of each section can be found here:
3- # https://embarkstudios.github.io/cargo-deny/checks/index.html
1+ # cargo-deny configuration
2+ # More info: https://embarkstudios.github.io/cargo-deny/
43
54[graph ]
6- # When creating the dependency graph used as the source of truth when checks are
7- # executed, this field can be used to prune crates from the graph, removing them
8- # from the view of cargo-deny
95targets = [
10- # Targets supported by the project
116 { triple = " x86_64-unknown-linux-gnu" },
127 { triple = " aarch64-unknown-linux-gnu" },
138 { triple = " x86_64-apple-darwin" },
@@ -16,19 +11,12 @@ targets = [
1611]
1712
1813[advisories ]
19- # The path where the advisory databases are cloned/fetched into
2014db-path = " ~/.cargo/advisory-db"
21- # The url(s) of the advisory databases to use
2215db-urls = [" https://github.com/rustsec/advisory-db" ]
23- # A list of advisory IDs to ignore. Note that ignored advisories will still output a
24- # note when they are encountered
25- ignore = [
26- # "RUSTSEC-0000-0000",
27- # { id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
28- ]
16+ ignore = []
2917
3018[licenses ]
31- # Allow only these licenses
19+ # List of allowed licenses
3220allow = [
3321 " MIT" ,
3422 " Apache-2.0" ,
@@ -42,67 +30,29 @@ allow = [
4230 " Unlicense" ,
4331]
4432
45- # List of explicitly disallowed licenses
46- deny = [
47- " GPL-2.0" ,
48- " GPL-3.0" ,
49- " AGPL-3.0" ,
50- " LGPL-2.0" ,
51- " LGPL-2.1" ,
52- " LGPL-3.0" ,
53- ]
54-
55- # Confidence threshold for detecting a license from license text.
5633confidence-threshold = 0.8
5734
58- # Allow licenses that cannot be determined
59- allow-osi-fsf-free = " both"
60-
61- # Clarify dual-licensed crates
6235[[licenses .clarify ]]
6336crate = " ring"
64- # The SPDX expression for the license requirements of the crate
6537expression = " MIT AND ISC AND OpenSSL"
66- # One or more files in the crate's source used as the "source of truth" for
67- # the license expression
6838license-files = [
6939 { path = " LICENSE" , hash = 0xbd0eed23 },
7040]
7141
7242[bans ]
73- # Lint level for when multiple versions of the same crate are detected
7443multiple-versions = " warn"
75- # Allow wildcard dependencies only for private/path dependencies
7644wildcards = " warn"
77- # Allow git dependencies
7845allow-wildcard-paths = false
79- # Highlight specific duplicate versions
8046highlight = " all"
81- # List of explicitly disallowed crates
82- deny = [
83- # Each entry can be just a crate name
84- # { crate = "ansi_term", use-instead = "yansi" },
85- ]
47+ deny = []
8648
87- # Skip certain crates when checking for duplicates
8849skip = [
89- # Windows-only crates on Unix will naturally be duplicated
9050 { crate = " windows-sys" },
9151 { crate = " windows-targets" },
92- { crate = " windows_*" },
93- ]
94-
95- # Similarly named crates that are allowed to coexist
96- allow = [
97- # { crate = "num-traits", version = "0.1" },
9852]
9953
10054[sources ]
101- # Lint level for what to happen when a crate from a crate registry that is not in the allow list is detected
10255unknown-registry = " warn"
103- # Lint level for what to happen when a crate from a git repository that is not in the allow list is detected
10456unknown-git = " warn"
105- # List of allowed crate registries
10657allow-registry = [" https://github.com/rust-lang/crates.io-index" ]
107- # List of allowed Git repositories
10858allow-git = []
0 commit comments