shadow/deny.toml

# spell-checker:ignore rustsec

[advisories]
version = 2
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
yanked = "warn"

[licenses]
version = 2
allow = [
    "MIT",
    "Apache-2.0",
    "ISC",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "CC0-1.0",
    "Unicode-3.0",
    "Zlib",
    "MPL-2.0",
]
confidence-threshold = 0.8

[bans]
multiple-versions = "deny"
wildcards = "allow"
highlight = "all"

# Known duplicate dependencies from transitive deps.
# Update this list when bumping clap/uucore.
skip = [
    # clap -> terminal_size (0.60) vs clap -> anstyle-query (0.61)
    { crate = "windows-sys@0.60", reason = "transitive clap dep, Linux-only project" },
]

[sources]
unknown-registry = "warn"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []