deny.toml

[graph]
all-features = true

[advisories]
ignore = [
	# `paste` is still used by the current Leptos ecosystem. There is no safe
	# upgrade for the crate itself.
	"RUSTSEC-2024-0436",
]

[licenses]
allow = [
	"0BSD",
	"Apache-2.0",
	"Apache-2.0 WITH LLVM-exception",
	"BSD-2-Clause",
	"BSD-3-Clause",
	"BlueOak-1.0.0",
	"BSL-1.0",
	"CC0-1.0",
	"CDLA-Permissive-2.0",
	"ISC",
	"MIT",
	"MPL-2.0",
	"Unicode-3.0",
	"Zlib",
]

[bans]
# The current web/backend graph pulls several duplicate transitive versions.
# Keep license/advisory/source checks blocking, but do not block CI on duplicate
# versions until the dependency graph has been intentionally consolidated.
multiple-versions = "allow"
wildcards = "allow"

[sources]
unknown-registry = "warn"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []