[]
# One upstream advisory is accepted and documented: `unsafe-libyaml` is
# unmaintained, pulled in by active-core 1.4.0 through serde_yaml. It is not in
# our parsing path (we never deserialize YAML); see ADR-0008.
= ["RUSTSEC-2024-0449"]
[]
= ["MIT", "Apache-2.0", "Apache-2.0 WITH LLVM-exception", "BSD-3-Clause", "ISC", "Unicode-3.0", "Zlib", "CC0-1.0"]
[]
= "allow"
= "deny"
= [
# A second hashing implementation would silently break content identity.
{ = "md5" },
{ = "sha1" },
]
[]
= "deny"
= "deny"
= ["https://github.com/rust-lang/crates.io-index"]