deny.toml

[graph]
targets = [
    "x86_64-unknown-linux-gnu",
]

[advisories]
ignore = [
    { id = "RUSTSEC-2024-0436", reason = "paste is pulled in through rtnetlink as a compile-time macro dependency; revisit by 2026-09-01" },
]

[licenses]
allow = [
    "Apache-2.0",
    "MIT",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Unicode-3.0",
]
confidence-threshold = 0.8
# `tun` is a Linux TAP/TUN wrapper used by m80-net-outbound. Keep this
# exception crate-local rather than allowing WTFPL workspace-wide.
exceptions = [
    { crate = "tun", allow = ["WTFPL"] },
]

[bans]
multiple-versions = "warn"
deny = [
    { crate = "openssl", reason = "m80 uses rustls-preferred dependency paths" },
]