minuit2 0.4.2

Pure Rust port of CERN Minuit2 parameter optimization engine
Documentation
# cargo-deny configuration
# https://embarkstudios.github.io/cargo-deny/
#
# Three independent gates:
#   advisories - blocks dependencies with known security advisories or yanked
#                versions (complements `cargo audit`, but checked against the
#                entire graph including transitive git deps).
#   licenses   - restricts the set of acceptable SPDX license expressions.
#   bans       - policy on duplicate versions, wildcard requirements, and
#                unknown registries/git sources.

[graph]
all-features = true

[advisories]
version = 2
yanked = "deny"
ignore = [
  # paste 1.0.15 is unmaintained (upstream archived). Pulled in transitively
  # via nalgebra -> simba -> paste; no safe upgrade path exists until nalgebra
  # switches to a maintained fork (e.g. `pastey`). This is a maintenance risk,
  # not an exploit, and `paste` is a proc-macro used only at compile time — it
  # does not ship in the final binary. Revisit on every nalgebra upgrade.
  "RUSTSEC-2024-0436",
]

[licenses]
version = 2
confidence-threshold = 0.8
allow = [
  "Apache-2.0",
  "Apache-2.0 WITH LLVM-exception",
  "BSD-2-Clause",
  "BSD-3-Clause",
  "CC0-1.0",
  "ISC",
  "MIT",
  "MPL-2.0",
  "Unicode-3.0",
  "Unlicense",
  "Zlib",
]

[bans]
multiple-versions = "warn"
wildcards = "deny"
highlight = "all"

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]