# cargo-deny configuration # https://embarkstudios.github.io/cargo-deny/ [licenses] # Only allow permissive licenses - no copyleft! version = 2 allow = [ "MIT", "Apache-2.0", ] confidence-threshold = 0.8 [bans] # Deny multiple versions of the same crate multiple-versions = "warn" # Deny wildcard dependencies wildcards = "allow" # Highlight when a dependency is about to be yanked highlight = "all" [advisories] # Check for security vulnerabilities db-path = "~/.cargo/advisory-db" db-urls = ["https://github.com/rustsec/advisory-db"] ignore = [] [sources] # Deny crates from unknown registries unknown-registry = "deny" unknown-git = "deny" allow-registry = ["https://github.com/rust-lang/crates.io-index"]