deny.toml

[advisories]
ignore = [
    # paste is a transitive dep from alloy-primitives
    "RUSTSEC-2024-0436",
    # ark-relations 0.5.1 enables tracing-subscriber 0.2 through its std
    # feature, and commonware-cryptography 2026.5.0 currently depends on that
    # arkworks line. Remove this once commonware can move to ark-relations >=0.6.
    "RUSTSEC-2025-0055",
]

[licenses]
allow = [
    "MIT",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Unicode-3.0",
    "Unlicense",
    "Zlib",
    "CC0-1.0",
    "BSL-1.0",
]
confidence-threshold = 0.8

[bans]
multiple-versions = "allow"
wildcards = "allow"
skip = [
    "getrandom",
    "windows-link",
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"