sequoia-sq/deny.toml

[advisories]
ignore = [
  "RUSTSEC-2020-0071", # chrono not affected by time 0.1 issue
  # fehler is unmaintained.
  #
  # fehler is used by subplot and thus an indirect dependency.  Remove
  # when a new version subplot is released without fehler.  See
  # https://gitlab.com/subplot/subplot/-/issues/340.
  "RUSTSEC-2023-0067",
]
unmaintained = "deny"
yanked = "deny"

[bans]
multiple-versions = "allow"
deny = [
  # does not have responsible disclosure policy:
  # https://github.com/briansmith/ring#bug-reporting
  {name = "ring"},
]

[licenses]
allow = [
  "Apache-2.0",
  "BSD-3-Clause",
  "BSL-1.0",
  "CC0-1.0",
  "GPL-2.0",
  "GPL-3.0",
  "ISC",
  "LGPL-2.0",
  "LGPL-3.0",
  "MIT",
  "MIT-0",
  "MPL-2.0",
  "Unicode-DFS-2016",
]
Add cargo-deny integration - Add `deny.toml` for `cargo deny` with advisory error for `RUSTSEC- 2020-0071` disabled as it does not affect chrono (or us for that matter). Allow multiple versions as there is not much we can do about those anyways and it clutters the output immensely. Add all currently used licenses to allow list. Deny the use of `ring` as it does not have a responsible disclosure policy: https://github.com/briansmith/ring#bug-reporting - Run `cargo deny` as further `test` step in GitLab CI, so that it is among the last things that may fail in a merge request. 2023-05-17 18:21:57 +02:00			`[advisories]`
			`ignore = [`
			`"RUSTSEC-2020-0071", # chrono not affected by time 0.1 issue`
ci: Allow fehler - RUSTSEC-2023-0067 was published to encourage projects to move from `fehler` to culpa. `fehler` is an indirect dependency. Allow it for now. 2023-10-17 14:50:55 +02:00			`# fehler is unmaintained.`
			`#`
			`# fehler is used by subplot and thus an indirect dependency. Remove`
			`# when a new version subplot is released without fehler. See`
			`# https://gitlab.com/subplot/subplot/-/issues/340.`
			`"RUSTSEC-2023-0067",`
Add cargo-deny integration - Add `deny.toml` for `cargo deny` with advisory error for `RUSTSEC- 2020-0071` disabled as it does not affect chrono (or us for that matter). Allow multiple versions as there is not much we can do about those anyways and it clutters the output immensely. Add all currently used licenses to allow list. Deny the use of `ring` as it does not have a responsible disclosure policy: https://github.com/briansmith/ring#bug-reporting - Run `cargo deny` as further `test` step in GitLab CI, so that it is among the last things that may fail in a merge request. 2023-05-17 18:21:57 +02:00			`]`
			`unmaintained = "deny"`
			`yanked = "deny"`

			`[bans]`
			`multiple-versions = "allow"`
			`deny = [`
			`# does not have responsible disclosure policy:`
			`# https://github.com/briansmith/ring#bug-reporting`
			`{name = "ring"},`
			`]`

			`[licenses]`
			`allow = [`
			`"Apache-2.0",`
			`"BSD-3-Clause",`
			`"BSL-1.0",`
			`"CC0-1.0",`
			`"GPL-2.0",`
			`"GPL-3.0",`
			`"ISC",`
			`"LGPL-2.0",`
			`"LGPL-3.0",`
			`"MIT",`
			`"MIT-0",`
			`"MPL-2.0",`
			`"Unicode-DFS-2016",`
			`]`