# Supply-chain policy, enforced in CI and at release by `cargo deny check` (advisories, bans,
# licenses). See https://embarkstudios.github.io/cargo-deny/
[advisories]
version = 2
# Vulnerabilities fail at any depth (the default). Unmaintained crates only fail for our own direct
# dependencies: a transitive one going unmaintained is upstream's to replace.
unmaintained = "workspace"
yanked = "warn"
[licenses]
version = 2
allow = [
"MIT",
"Apache-2.0",
"Unicode-3.0",
]
[bans]
multiple-versions = "allow"