deny.toml

targets = [
  { triple = "x86_64-unknown-linux-gnu" },
  { triple = "x86_64-unknown-linux-musl" },
  { triple = "aarch64-apple-darwin" },
  { triple = "x86_64-apple-darwin" },
  { triple = "x86_64-pc-windows-msvc" },
]

[advisories]
  db-path = "~/.cargo/advisory-db"
  db-urls = ["https://github.com/rustsec/advisory-db"]
  vulnerability = "deny"
  unmaintained = "deny"
  yanked = "deny"
  notice = "deny"
  severity-threshold = "medium"

[licenses]
  default = "allow"
  copyleft = "deny"
  private = { ignore = true }

  [[licenses.clarify]]
    name = "ring"
    version = "*"
    expression = "MIT AND ISC AND OpenSSL"
    license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

  [[licenses.exceptions]]
    name = "webpki-roots"
    version = "*"
    allow = ["MPL-2.0"]

  [[licenses.exceptions]]
    name = "option-ext"
    version = "*"
    allow = ["MPL-2.0"]

[bans]
  multiple-versions = "warn"
  wildcards = "allow"
  highlight = "all"

  # Windows uses openssl now, should still not be on other platforms
  # [[bans.deny]]
  # name = "openssl"

  # this is mistaken for tempfile sometimes
  [[bans.deny]]
    name = "tempdir"

[sources]
  unknown-registry = "deny"
  unknown-git = "deny"
  allow-registry = ["https://github.com/rust-lang/crates.io-index"]
  allow-git = ["https://github.com/katoahq/buildkit-rs"]