scxml 0.2.2

W3C SCXML statechart library — parse, validate, export, and simulate Harel statecharts. Framework-agnostic, WASM-ready, rkyv zero-copy.
Documentation
# cargo-deny configuration — CRA supply chain policy
#
# Run: cargo deny check
# CI:  cargo deny check advisories licenses sources

[graph]
all-features = true

[advisories]
# Deny any crate with a known security advisory
db-path = "~/.cargo/advisory-db"

[licenses]
# Permissive licenses only — no copyleft in the dependency tree
allow = [
    "MIT",
    "Apache-2.0",
    "Unicode-3.0",
]

[bans]
# No duplicate versions of critical crates
multiple-versions = "warn"
wildcards = "deny"

# Known-accepted transitive duplicates.
skip = [
    # serde_derive 1.0.229 and thiserror-impl 2.0.19 (proc-macros) started
    # pulling syn 3.0 while the rest of the tree stays on syn 2.0. Compile-time
    # only, not linked into runtime. Revisit when the older proc-macros catch
    # up to syn 3.
    { crate = "syn@3.0.0", reason = "proc-macro-only transitive from serde_derive/thiserror-impl; runtime tree stays on syn 2" },
]

[sources]
# Only allow crates from crates.io
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []