[licenses]
confidence-threshold = 0.8
allow = [
"Unicode-3.0",
"MPL-2.0",
"MIT",
"Apache-2.0",
"ISC",
"BSD-3-Clause",
]
exceptions = [
{ allow = ["CDLA-Permissive-2.0"], crate = "webpki-roots" },
{ allow = ["LGPL-3.0"], crate = "colog" },
{ allow = ["Zlib"], crate = "nanorand" },
{ allow = ["GPL-3.0"], crate = "auto_generate_cdp" },
]
[[licenses.clarify]]
crate = "ring"
expression = "MIT AND ISC AND OpenSSL"
license-files = [
{ path = "LICENSE", hash = 0xbd0eed23 }
]
[advisories]
ignore = [
{ id = "RUSTSEC-2024-0384", reason = "Not maintained, but no upgrade option" },
{ id = "RUSTSEC-2025-0010", reason = "ring 0.16.20 was released over 4 years ago and isn't maintained" },
{ id = "RUSTSEC-2025-0009", reason = "ring::aead::quic::HeaderProtectionKey::new_mask() may panic when overflow checking is enabled" },
{ id = "RUSTSEC-2025-0014", reason = "Latest humantime crates.io release is four years old and GitHub repository has not seen commits in four years" },
]