1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
[]
= []
= false
= false
# features = []
# The output table provides options for how/if diagnostics are outputted
[]
= 1
# This section is considered when running `cargo deny check advisories`
[]
# db-path = "$CARGO_HOME/advisory-dbs"
# db-urls = ["https://github.com/rustsec/advisory-db"]
# A list of advisory IDs to ignore. Note that ignored advisories will still
# output a note when they are encountered.
= [
# "RUSTSEC-0000-0000",
# { id = "RUSTSEC-0000-0000", reason = "you can specify a reason the advisory is ignored" },
# "a-crate-that-is-yanked@0.1.1", # you can also ignore yanked crate versions if you wish
# { crate = "a-crate-that-is-yanked@0.1.1", reason = "you can specify why you are ignoring the yanked crate" },
]
# git-fetch-with-cli = true
# This section is considered when running `cargo deny check licenses`
[]
# List of explicitly allowed licenses
= ["Apache-2.0", "Apache-2.0 WITH LLVM-exception", "BSD-3-Clause", "CC0-1.0", "ISC", "MIT", "Unicode-3.0"]
= 0.8
= [
# webpki-roots is required by reqwest
{ = ["CDLA-Permissive-2.0"], = "webpki-root-certs" },
# bzip2 is from the library bind that enables support for bzip2 in compression
{ = ["bzip2-1.0.6"], = "libbz2-rs-sys" },
]
# [[licenses.clarify]]
# crate = "ring"
# expression = "MIT AND ISC AND OpenSSL"
# license-files = [
# { path = "LICENSE", hash = 0xbd0eed23 }
# ]
[]
= false
= [
# "https://sekretz.com/registry
]
# This section is considered when running `cargo deny check bans`.
[]
= "warn"
= "deny"
= "all"
= "allow"
= "allow"
# List of crates that are allowed. Use with care!
= [
# "ansi_term@0.11.0",
# { crate = "ansi_term@0.11.0", reason = "you can specify a reason it is allowed" },
]
# List of crates to deny
= [
# "ansi_term@0.11.0",
# { crate = "ansi_term@0.11.0", reason = "you can specify a reason it is banned" },
# { crate = "ansi_term@0.11.0", wrappers = ["this-crate-directly-depends-on-ansi_term"] },
]
# [[bans.features]]
# crate = "reqwest"
# deny = ["json"]
# allow = [
# "rustls",
# "__rustls",
# "__tls",
# "hyper-rustls",
# "rustls",
# "rustls-pemfile",
# "rustls-tls-webpki-roots",
# "tokio-rustls",
# "webpki-roots",
# ]
# exact = true
# Certain crates/versions that will be skipped when doing duplicate detection.
= [
{ = "base64", = "aws-sdk crates still on old version" },
{ = "core-foundation", = "Multiple copies brought in by keyring + aws-*" },
{ = "http", = "Multiple copies brought in by aws-sdk" },
{ = "http-body", = "Multiple copies brought in by aws-sdk" },
{ = "syn", = "Multiple copies brought in as ecosystem moves from 2 -> 3" },
]
= [
# "ansi_term@0.11.0", # will be skipped along with _all_ of its direct and transitive dependencies
# { crate = "ansi_term@0.11.0", depth = 20 },
]
# This section is considered when running `cargo deny check sources`.
[]
= "warn"
= "deny"
= ["https://github.com/rust-lang/crates.io-index"]
= []
[]
= []
= []
= []