1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
[graph]
all-features = true
[advisories]
# cargo-deny 0.19+ removed `vulnerability` and `notice`; vulnerability advisories
# remain denied by default.
# `unmaintained` now uses scope values (`all|workspace|transitive|none`), so
# warning-only behavior is not available in this key.
# Keep unmaintained advisories non-blocking in CI while still surfacing yanked crates.
unmaintained = "none"
yanked = "warn"
ignore = []
[licenses]
confidence-threshold = 0.93
unused-allowed-license = "warn"
allow = [
"Apache-2.0",
"MIT",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Unicode-3.0",
]
[licenses.private]
ignore = true
[bans]
multiple-versions = "warn"
wildcards = "deny"
[sources]
unknown-git = "deny"
unknown-registry = "deny"
allow-registry = [
"https://github.com/rust-lang/crates.io-index",
"sparse+https://index.crates.io/",
]