# This file defines configuration for the cargo deny command
# Ref: https://github.com/EmbarkStudios/cargo-deny
targets = []

[advisories]
vulnerability = "deny"
unmaintained = "deny"
notice = "deny"
unsound = "deny"
ignore = []

[bans]
multiple-versions = "deny"
deny = []
skip = [
    { name = "bitflags", version = "=1.3.2" }, # old transitive dependency from cedar_policy_core
    { name = "darling", version = "=0.14.4" }, # old dependency from derive_builder
    { name = "darling_macro", version = "=0.14.4" }, # old dependency from derive_builder
    { name = "darling_core", version = "=0.14.4" }, # old dependency from derive_builder
    { name = "regex-syntax", version = "<=0.7.5" }, # old transitive dependency from cedar_policy_core
    { name = "itertools", version = "=0.11.0" }, # old transitive dependency from lalrpop and criterion
    { name = "syn", version = "=1.0.109" }, # old dependency from derive_builder
    { name = "http", version = "=0.2.12" }, # old dependency from aws-config
    { name = "windows_aarch64_gnullvm", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows_aarch64_msvc", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows_i686_msvc", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows_i686_gnu", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows-sys", version = "=0.48.0" }, # old dependency from chrono,lalrpop
    { name = "windows-targets", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows_x86_64_gnu", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows_x86_64_gnullvm", version = "=0.48.5" }, # old dependency from chrono,lalrpop
    { name = "windows_x86_64_msvc", version = "=0.48.5" }, # old dependency from chrono,lalrpop
]
skip-tree = []

[sources]
unknown-registry = "deny"
unknown-git = "deny"

[licenses]
unlicensed = "deny"
allow-osi-fsf-free = "neither"
copyleft = "deny"
confidence-threshold = 0.93
allow = [
    "Apache-2.0",
    "BSD-3-Clause",
    "CC0-1.0",
    "ISC", # simplified MIT
    "MIT",
    "OpenSSL",
    "Unicode-DFS-2016",
]
clarify = [
    # dependency from aws-config, ring has a non-standard license based on OpenSSL
    { name = "ring", expression = "OpenSSL", license-files = [ { path = "LICENSE", hash = 0xbd0eed23 } ] },
]
exceptions = []