# cargo-deny configuration
# See https://embarkstudios.github.io/cargo-deny/ for details

[advisories]
vulnerability = "deny"
unmaintained = "warn"
notice = "warn"
# Ignore advisories that have been reviewed and accepted
ignore = []
# CRATES.io advisory database
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]

[licenses]
unlicensed = "deny"
allow-osi-fsf-free = "neither"
# Only allow these licenses
allow = [
    "MIT",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Zlib",
    "Unicode-3.0",
    "CC0-1.0",
    "OpenSSL",
]
deny = [
    "GPL-2.0",
    "GPL-3.0",
    "AGPL-3.0",
    "LGPL-3.0",
]
# Skip these crates for license checking (internal crates)
skip = [
    { name = "justapi-core" },
    { name = "justapi-py" },
    { name = "justapi-cli" },
    { name = "justapi-bench" },
]

[bans]
multiple-versions = "warn"
wildcards = "allow"
highlight = "all"
deny = []
skip = []
skip-tree = []

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = []