# `cargo-deny` configuration.

[output]
feature-depth = 1

[advisories]
db-urls = ["https://github.com/rustsec/advisory-db"]
yanked = "deny"

[licenses]
allow = [
  # Permissive open-source licenses
  "MIT",
  "Apache-2.0",
  "BSD-3-Clause",
  "Unicode-DFS-2016",
  "Zlib",
]
confidence-threshold = 0.8

[bans]
multiple-versions = "deny"
wildcards = "deny"
skip = [
  # Old `digest` version brought by `curve25519-dalek-ng`
  { name = "digest", version = "^0.9" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"