Repository navigation
Expand file tree
/
Copy pathdeny.toml
More file actions
49 lines (45 loc) · 1.34 KB
/
Copy pathdeny.toml
File metadata and controls
49 lines (45 loc) · 1.34 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
# cargo-deny policy for Minigraf dependencies (#395).
# Run locally with: cargo deny check bans licenses sources
# Advisories are covered by cargo-audit.yml and osv-scanner.yml.
[graph]
# Check the native targets plus the browser WASM target, so the
# wasm-bindgen / web-sys dependency tree is covered too.
targets = [
"x86_64-unknown-linux-gnu",
"aarch64-apple-darwin",
"x86_64-pc-windows-msvc",
"wasm32-unknown-unknown",
]
all-features = true
[licenses]
# Permissive licenses compatible with Minigraf's MIT OR Apache-2.0.
allow = [
"MIT",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Zlib",
"Unicode-3.0",
"Unlicense",
"CC0-1.0",
]
confidence-threshold = 0.9
# Keep the list stable as dependencies come and go.
unused-allowed-license = "allow"
[bans]
# Two versions of the same crate bloat the binary (PHILOSOPHY.md §4).
# If an upstream crate forces a duplicate, list it under `skip` with a
# comment explaining why, e.g.
# skip = [{ crate = "foo@1.2.3", reason = "bar still depends on foo 1.x" }]
multiple-versions = "deny"
skip = []
wildcards = "deny"
allow-wildcard-paths = true
[sources]
# Every crate must come from crates.io.
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []