cargo-unmaintained/Cargo.toml at main · trailofbits/cargo-unmaintained · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
[package]
name = "cargo-unmaintained"
version = "2.0.1"
authors = ["Samuel Moelius <sam@moeli.us>"]
description = "Find unmaintained packages in Rust projects"
edition = "2024"
license = "AGPL-3.0"
repository = "https://github.com/trailofbits/cargo-unmaintained"

[dependencies]
anyhow = { version = "1.0", features = ["backtrace"] }
cargo_metadata = "0.23"
chrono = "0.4"
clap = { version = "4.6", features = ["cargo", "derive", "wrap_help"] }
crates-index = { version = "3.14", features = [
    "git-https-reqwest",
], optional = true }
crates_io_api = "0.12.0"
curl = "0.4"
elaborate = "1.2"
env_logger = "0.11"
home = { version = "0.5", optional = true }
log = "0.4"
regex = "1.13"
remain = "0.2"
serde = "1.0"
serde_json = "1.0"
sha1_smol = { version = "1.0", features = ["std"] }
tame-index = { version = "0.26", features = ["sparse"], optional = true }
tempfile = "3.27"
termcolor = "1.4"
toml = "1.1"

# smoelius: Ensure `reqwest` 0.13 has TLS enabled. `reqwest`'s default features would enable TLS.
# However, `crates-index` uses `reqwest` via `gix` via `gix-transport`. And, as of this writing,
# `gix-transport` uses `reqwest` without default features.
reqwest = { version = "0.13", default-features = false, features = [
    "default-tls",
] }

[dev-dependencies]
assert_cmd = "2.2"
octocrab = "0.54"
predicates = "3.1"
rustls = { version = "0.23", default-features = false, features = [
    "aws_lc_rs",
] }
rustsec = "0.33"
similar-asserts = "2.0"
snapbox = "1.2"
strum = "0.28"
strum_macros = "0.28"
testing = { path = "testing" }
tokio = "1.52"

[build-dependencies]
elaborate = "1.2"

[features]
default = ["on-disk-cache", "crates-index"]
on-disk-cache = []
crates-index = ["dep:crates-index", "dep:home", "libc", "windows-sys"]
tame-index = ["dep:tame-index", "reqwest/blocking"]
__mock_github = []
__real_github = []

[lints]
workspace = true

[target.'cfg(unix)'.dependencies]
libc = { version = "0.2", optional = true }
xdg = { version = "3.0" }

[target.'cfg(windows)'.dependencies]
windows-sys = { version = "0.61", features = [
    "Win32_Storage_FileSystem",
    "Win32_Foundation",
    "Win32_System_IO",
], optional = true }

[workspace]
# smoelius: `mock_github` must not be a workspace member. If it were, it would enable the
# `__mock_github` feature for all workspace members.
exclude = ["fixtures", "mock_github"]
members = ["ci", "ei", "rustsec", "testing"]

[workspace.lints.rust.unexpected_cfgs]
level = "deny"
check-cfg = ["cfg(dylint_lib, values(any()))", "cfg(__warnings)"]

[workspace.lints.clippy]
pedantic = { level = "warn", priority = -1 }
format-collect = "allow"
format-push-string = "allow"
missing-errors-doc = "allow"
missing-panics-doc = "allow"

# smoelius: Enabling `__mock_github` causes `xdg` to appear unused.
[workspace.metadata.cargo-udeps.ignore]
normal = ["crates-index", "home", "reqwest", "xdg"]

[[workspace.metadata.dylint.libraries]]
git = "https://github.com/trailofbits/dylint"
pattern = [
    "examples/general",
    "examples/supplementary",
    "examples/restriction/inconsistent_qualification",
    "examples/restriction/misleading_variable_name",
    "examples/restriction/suboptimal_pattern",
    "examples/restriction/try_io_result",
]

[workspace.metadata.unmaintained]
ignore = [
    "dashmap",
    "ff",
    "foreign-types",
    "group",
    "lazy_static",
    "rand_chacha",
    "rand_core",
    "redox_syscall",
    "simple_asn1",
    "smol_str",
    "spin",
    "subtle",
    # https://github.com/alacritty/vte/pull/122#issuecomment-2579278540
    "utf8parse",
    "web-time",
]