deny.toml

# SPDX-FileCopyrightText: 2025 Joost van der Laan <joost@fashionunited.com>
#
# SPDX-License-Identifier: AGPL-3.0-only

# This template contains all of the possible sections and their default values

# If 1 or more target triples (and optionally, target_features) are specified,
# only the specified targets will be checked when running `cargo deny check`.
[graph]
targets = [
    # The triple can be any string, but only the target triples built in to
    # rustc (as of 1.40) can be checked against actual config expressions
    #{ triple = "x86_64-unknown-linux-musl" },
    # You can also specify which target_features you promise are enabled for a
    # particular target. target_features are currently not validated against
    # the actual valid features supported by the target architecture.
    #{ triple = "wasm32-unknown-unknown", features = ["atomics"] },
]

# This section is considered when running `cargo deny check advisories`
# More documentation for the advisories section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
[advisories]
version = 2
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
git-fetch-with-cli = true
disable-yank-checking = false
maximum-db-staleness = "P7D"

# A list of advisory IDs to ignore
ignore = []

# This section is considered when running `cargo deny check licenses`
# More documentation for the licenses section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
[licenses]
# Confidence threshold for license detection (0.0 to 1.0)
confidence-threshold = 0.8

# List of explicitly allowed licenses
allow = [
    "MIT",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSL-1.0",
    "BSD-3-Clause",
    "MPL-2.0",
    "Unicode-3.0",
    "ISC"
]

[licenses.private]
ignore = false
registries = []

# Allow 1 or more licenses on a per-crate basis
[[licenses.clarify]]
name = "rug"
version = "*"
expression = "GPL-3.0 OR LGPL-3.0"
license-files = []

[[licenses.clarify]]
name = "gmp-mpfr-sys"
version = "*"
expression = "GPL-3.0 OR LGPL-3.0"
license-files = []

[[licenses.clarify]]
name = "strand"
version = "*"
expression = "AGPL-3.0"
license-files = []

# This section is considered when running `cargo deny check bans`.
[bans]
multiple-versions = "warn"
wildcards = "allow"
highlight = "all"
allow = []
deny = []
skip = []
skip-tree = []

# This section is considered when running `cargo deny check sources`.
[sources]
unknown-registry = "warn"
unknown-git = "warn"