# cargo-deny configuration
# See https://embarkstudios.github.io/cargo-deny/ for details
[advisories]
vulnerability = "deny"
unmaintained = "warn"
notice = "warn"
# Ignore advisories that have been reviewed and accepted
ignore = []
# CRATES.io advisory database
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
[licenses]
unlicensed = "deny"
allow-osi-fsf-free = "neither"
# Only allow these licenses
allow = [
"MIT",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Zlib",
"Unicode-3.0",
"CC0-1.0",
"OpenSSL",
]
deny = [
"GPL-2.0",
"GPL-3.0",
"AGPL-3.0",
"LGPL-3.0",
]
# Skip these crates for license checking (internal crates)
skip = [
{ name = "justapi-core" },
{ name = "justapi-py" },
{ name = "justapi-cli" },
{ name = "justapi-bench" },
]
[bans]
multiple-versions = "warn"
wildcards = "allow"
highlight = "all"
deny = []
skip = []
skip-tree = []
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = []