http-handle 0.0.5

A fast and lightweight Rust library for handling HTTP requests and responses.
Documentation
# cargo-deny policy for http-handle.
#
# Tightens the supply-chain audit at PR time. Run locally with:
#   cargo deny check
# Or scope to a single category:
#   cargo deny check {licenses,advisories,bans,sources}

[graph]
# Skip dev-dependencies for the bans/sources/duplicate checks — they
# pull a long tail (criterion, plotters, proptest, …) that we don't
# ship and don't want governing the policy.
all-features = true

[licenses]
# Permissive licenses we accept from dependencies, plus the crate's own
# AGPL-3.0-only (the project license, not a downstream dependency).
allow = [
    "AGPL-3.0-only",
    "Apache-2.0",
    "CC0-1.0",
    "ISC",
    "MIT",
    "Unicode-3.0",
    "Zlib",
]
confidence-threshold = 0.93

[advisories]
# Treat all unmaintained / yanked crates as warnings (don't fail PR
# entirely on transitives we can't pin), but fail on actual security
# advisories. Specific ignores can be added here with rationale.
yanked = "deny"
ignore = []

[bans]
multiple-versions = "warn"
highlight = "all"
# Crates we explicitly forbid (e.g. abandoned or known-bad).
deny = []
# Skip duplicate detection for these crates — useful when several
# transitives wedge us into multiple versions of a low-level dep.
skip = []
skip-tree = []

[sources]
# All crates must come from the official registry by default. Add
# allow-git / allow-registry entries here if a vetted git source is
# ever required.
unknown-registry = "deny"
unknown-git = "deny"