| 1 | # cargo-deny configuration for CodeWhale |
| 2 | # https://embarkstudios.github.io/cargo-deny/ |
| 3 | |
| 4 | [graph] |
| 5 | # Scan all workspace members with all features |
| 6 | all-features = true |
| 7 | |
| 8 | [advisories] |
| 9 | # Deny unmaintained and unsound crates |
| 10 | unmaintained = "all" |
| 11 | unsound = "all" |
| 12 | # Ignore specific advisories (known issues in dependencies) |
| 13 | ignore = [ |
| 14 | "RUSTSEC-2024-0436", # paste unmaintained - no safe upgrade |
| 15 | "RUSTSEC-2026-0192", # ttf-parser unmaintained - no safe upgrade |
| 16 | "RUSTSEC-2024-0388", # derivative unmaintained - transitive via starlark |
| 17 | "RUSTSEC-2025-0057", # fxhash unmaintained - transitive via starlark |
| 18 | "RUSTSEC-2025-0141", # bincode unmaintained - transitive via syntect, no safe upgrade (syntect 5.3.0 is latest) |
| 19 | "RUSTSEC-2024-0320", # yaml-rust unmaintained - transitive via syntect, no safe upgrade (syntect 5.3.0 is latest) |
| 20 | ] |
| 21 | |
| 22 | [bans] |
| 23 | # Deny multiple versions of the same crate |
| 24 | multiple-versions = "warn" |
| 25 | # Deny wildcard version requirements |
| 26 | wildcards = "deny" |
| 27 | |
| 28 | [sources] |
| 29 | # Deny unknown registries and git sources |
| 30 | unknown-registry = "deny" |
| 31 | unknown-git = "deny" |
| 32 | # Allow only crates.io |
| 33 | allow-registry = ["https://github.com/rust-lang/crates.io-index"] |
| 34 | # Allow git sources used by the project (add as needed) |
| 35 | allow-git = [] |
| 36 | |
| 37 | [licenses] |
| 38 | # Confidence threshold for license inference from text |
| 39 | confidence-threshold = 0.93 |
| 40 | # Allowed licenses (MIT for CodeWhale, plus common transitive deps) |
| 41 | allow = [ |
| 42 | "MIT", |
| 43 | "MIT-0", |
| 44 | "Apache-2.0", |
| 45 | "Apache-2.0 WITH LLVM-exception", |
| 46 | "ISC", |
| 47 | "Unicode-3.0", |
| 48 | "Unicode-DFS-2016", |
| 49 | "Zlib", |
| 50 | "BSD-2-Clause", |
| 51 | "BSD-3-Clause", |
| 52 | "0BSD", |
| 53 | "MPL-2.0", |
| 54 | "CC0-1.0", |
| 55 | "BSL-1.0", |
| 56 | "CDLA-Permissive-2.0", |
| 57 | ] |
| 58 | # License exceptions for specific crates if needed |
| 59 | exceptions = [] |
| 60 |