Signed-off-by: NotAShelf <raf@notashelf.dev> Change-Id: I1e2ff34d322e80fbedbd46e0d1b971b76a6a6964
46 lines
1.7 KiB
TOML
46 lines
1.7 KiB
TOML
# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
|
|
[bans]
|
|
multiple-versions = "allow" # TODO
|
|
wildcards = "allow"
|
|
skip = []
|
|
|
|
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
|
|
[advisories]
|
|
yanked = "deny"
|
|
unmaintained = "none"
|
|
ignore = [
|
|
# Dioxus pulls a whole bunch of GTK3 dependencies that are all deprecated and
|
|
# marked insecure. Unfortunately, there doesn't seem to be a GTK4 migration
|
|
# in sight, so we'll have to ignore them for now.
|
|
{ id = "RUSTSEC-2024-0370", reason = "Used by GTK3 and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0411", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0412", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0413", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0415", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0416", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0418", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0419", reason = "Used by Dioxus and there is no alternative!" },
|
|
{ id = "RUSTSEC-2024-0420", reason = "Used by Dioxus and there is no alternative!" },
|
|
]
|
|
|
|
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
|
|
[licenses]
|
|
unused-allowed-license = "deny"
|
|
private.ignore = true
|
|
allow = [
|
|
"Apache-2.0 WITH LLVM-exception",
|
|
"Apache-2.0",
|
|
"MIT",
|
|
"MPL-2.0",
|
|
"Zlib",
|
|
"ISC",
|
|
"GPL-3.0-only",
|
|
"Unicode-3.0",
|
|
"BSD-2-Clause",
|
|
]
|
|
|
|
# <https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html>
|
|
[sources]
|
|
unknown-registry = "deny"
|
|
unknown-git = "deny"
|
|
allow-git = []
|