subsume/deny.toml at main · arclabs561/subsume · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
## cargo-deny configuration for subsume
#
# Run: cargo deny check

[advisories]
ignore = [
    # paste: unmaintained, transitive via candle->gemm. No replacement available.
    "RUSTSEC-2024-0436",
    # bincode: unmaintained, transitive via burn. No replacement available.
    "RUSTSEC-2025-0141",
]

[licenses]
# Zlib: foldhash (transitive via candle). ISC: libloading (transitive via candle).
# MPL-2.0: burn transitive deps (half, cblas-sys, etc). CC0-1.0: burn transitive deps.
allow = ["MIT", "Apache-2.0", "BSD-2-Clause", "BSD-3-Clause", "Unicode-3.0", "Unlicense", "Zlib", "ISC", "MPL-2.0", "CC0-1.0", "CDLA-Permissive-2.0"]
confidence-threshold = 0.8

[licenses.private]
ignore = false
registries = []

[bans]
multiple-versions = "warn"
wildcards = "warn"
highlight = "all"
workspace-default-features = "allow"
external-default-features = "allow"

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []