# cargo-deny configuration: the dependency-graph half of the security gate.
# Checks RustSec advisories, license compatibility, duplicate versions, and
# registry sources. Run locally with `just deny`.
[]
= true
# Gate the published surface, not the dev tooling: dev-dependencies and their
# transitive trees are the test harness's concern, not the shipped crate's.
= true
[]
= "deny"
[]
# Apache-2.0/MIT-compatible permissive licenses only.
= [
"Apache-2.0",
"MIT",
# unicode-ident is (MIT OR Apache-2.0) AND Unicode-3.0; the Unicode license
# only covers the embedded character tables and is permissive.
"Unicode-3.0",
]
[]
# clippy::cargo warns on duplicates; this is the enforcing counterpart. Known
# unavoidable duplicates get a targeted skip with the chain that pulls them in.
= "deny"
[]
= "deny"
= "deny"