[advisories] db-path = "~/.cargo/advisory-db" db-urls = ["https://github.com/rustsec/advisory-db"] vulnerability = "deny" unmaintained = "deny" yanked = "deny" notice = "deny" [licenses] unlicensed = "deny" # See https://spdx.org/licenses/ for list of possible licenses allow = [ "MIT", "Apache-2.0", ] default = "deny" confidence-threshold = 1.0 # Allow 1 or more licenses on a per-crate basis, so that particular licenses # aren't accepted for every possible crate as with the normal allow list exceptions = [ # Each entry is the crate and version constraint, and its specific allow # list #{ allow = ["Zlib"], name = "adler32", version = "*" }, ] [sources] unknown-registry = "deny" unknown-git = "deny" allow-registry = ["https://github.com/rust-lang/crates.io-index"] allow-git = [] [sources.allow-org] github = [] gitlab = [] bitbucket = []