1  # Note that all fields that take a lint level have these possible values:
  2  # * deny - An error will be produced and the check will fail
  3  # * warn - A warning will be produced, but the check will not fail
  4  # * allow - No warning or error will be produced
  5  
  6  
  7  # The graph table configures how the dependency graph is constructed and thus
  8  # which crates the checks are performed against
  9  [graph]
 10  targets = []
 11  # If true, metadata will be collected with `--all-features`. Note that this can't
 12  # be toggled off if true, if you want to conditionally enable `--all-features` it
 13  # is recommended to pass `--all-features` on the cmd line instead
 14  all-features = false
 15  # If true, metadata will be collected with `--no-default-features`. The same
 16  # caveat with `all-features` applies
 17  no-default-features = false
 18  
 19  # The output table provides options for how/if diagnostics are outputted
 20  [output]
 21  # When outputting inclusion graphs in diagnostics that include features, this
 22  # option can be used to specify the depth at which feature edges will be added.
 23  # This option is included since the graphs can be quite large and the addition
 24  # of features from the crate(s) to all of the graph roots can be far too verbose.
 25  # This option can be overridden via `--feature-depth` on the cmd line
 26  feature-depth = 1
 27  
 28  # This section is considered when running `cargo deny check advisories`
 29  [advisories]
 30  # Opt into new defaults since cargo deny 0.14.12 (2024-02-23)
 31  version = 2
 32  # The path where the advisory database is cloned/fetched into
 33  db-path = "~/.cargo/advisory-db"
 34  # The url(s) of the advisory databases to use
 35  db-urls = ["https://github.com/rustsec/advisory-db"]
 36  # The lint level for crates that have been yanked from their source registry.
 37  yanked = "warn"
 38  # A list of advisory IDs to ignore. Note that ignored advisories will still
 39  # output a note when they are encountered.
 40  ignore = []
 41  
 42  # This section is considered when running `cargo deny check licenses`
 43  [licenses]
 44  # Opt into new defaults since cargo deny 0.14.12 (2024-02-23)
 45  version = 2
 46  # List of explicitly allowed licenses
 47  allow = [
 48      "MIT",
 49      "Apache-2.0",
 50      "Unlicense",
 51      "Unicode-DFS-2016",
 52      "Unicode-3.0",
 53      "BSD-3-Clause",
 54      "MPL-2.0",
 55      "Zlib",
 56  ]
 57  # The confidence threshold for detecting a license from license text.
 58  confidence-threshold = 0.8
 59  # Allow 1 or more licenses on a per-crate basis, so that particular licenses
 60  # aren't accepted for every possible crate as with the normal allow list
 61  exceptions = []
 62  
 63  [licenses.private]
 64  # If true, ignores workspace crates that aren't published, or are only
 65  # published to private registries.
 66  ignore = false
 67  registries = []
 68  
 69  # This section is considered when running `cargo deny check bans`.
 70  [bans]
 71  # Lint level for when multiple versions of the same crate are detected
 72  multiple-versions = "warn"
 73  # Lint level for when a crate version requirement is `*`
 74  wildcards = "allow"
 75  # The graph highlighting used when creating dotgraphs for crates
 76  # with multiple versions
 77  # * lowest-version - The path to the lowest versioned duplicate is highlighted
 78  # * simplest-path - The path to the version with the fewest edges is highlighted
 79  # * all - Both lowest-version and simplest-path are used
 80  highlight = "all"
 81  # The default lint level for `default` features for crates that are members of
 82  # the workspace that is being checked. This can be overridden by allowing/denying
 83  # `default` on a crate-by-crate basis if desired.
 84  workspace-default-features = "allow"
 85  # The default lint level for `default` features for external crates that are not
 86  # members of the workspace. This can be overridden by allowing/denying `default`
 87  # on a crate-by-crate basis if desired.
 88  external-default-features = "allow"
 89  # List of crates that are allowed. Use with care!
 90  allow = []
 91  # List of crates to deny
 92  deny = []
 93  
 94  # Certain crates/versions that will be skipped when doing duplicate detection.
 95  skip = []
 96  # Similarly to `skip` allows you to skip certain crates during duplicate
 97  # detection. Unlike skip, it also includes the entire tree of transitive
 98  # dependencies starting at the specified crate, up to a certain depth, which is
 99  # by default infinite.
100  skip-tree = []
101  
102  # This section is considered when running `cargo deny check sources`.
103  [sources]
104  # Lint level for what to happen when a crate from a crate registry that is not
105  # in the allow list is encountered
106  unknown-registry = "warn"
107  # Lint level for what to happen when a crate from a git repository that is not
108  # in the allow list is encountered
109  unknown-git = "warn"
110  # List of URLs for allowed crate registries. Defaults to the crates.io index
111  # if not specified. If it is specified but empty, no registries are allowed.
112  allow-registry = ["https://github.com/rust-lang/crates.io-index"]
113  # List of URLs for allowed Git repositories
114  allow-git = []
115  
116  [sources.allow-org]
117  # 1 or more github.com organizations to allow git sources for
118  github = []
119  # 1 or more gitlab.com organizations to allow git sources for
120  gitlab = []
121  # 1 or more bitbucket.org organizations to allow git sources for
122  bitbucket = []