deny.toml

[graph]
targets = [
    "x86_64-unknown-linux-musl",
    "x86_64-unknown-linux-gnu",
    "aarch64-unknown-linux-musl",
    "aarch64-unknown-linux-gnu",
    "aarch64-apple-darwin",
    "x86_64-pc-windows-msvc",
]
all-features = true

[advisories]
yanked = "deny"
ignore = []

[licenses]
allow = [
    "MIT",
    "Apache-2.0",
    "MPL-2.0",
    "ISC",
    "BSD-3-Clause",
    "Unicode-3.0",
]
exceptions = [
    { allow = [
        "OpenSSL",
    ], name = "ring" },
]

[[licenses.clarify]]
name = "ring"
expression = "MIT AND ISC AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

[bans]
multiple-versions = "deny"
deny = [
    "openssl",
    # Unfortunately we can't ban this since some people want a curl client instead of reqwest
    #"curl", 
]
skip = [
    { crate = "hashbrown@0.14.5", reason = "gix uses this old version" },
    { crate = "core-foundation@0.9.4", reason = "system-configuration uses this old version" },
]
skip-tree = [
    # sigh
    "windows-sys@0.52.0",
    { crate = "thiserror@1.0.69", reason = "gix depends on both the 1.0 and 2.0 versions" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = []