1010# when any section or field is not specified in your own configuration
1111
1212# Root options
13-
13+ [ graph ]
1414# If 1 or more target triples (and optionally, target_features) are specified,
1515# only the specified targets will be checked when running `cargo deny check`.
1616# This means, if a particular package is only ever used as a target specific
@@ -61,16 +61,10 @@ feature-depth = 1
6161db-path = " ~/.cargo/advisory-db"
6262# The url(s) of the advisory databases to use
6363db-urls = [" https://github.com/rustsec/advisory-db" ]
64- # The lint level for security vulnerabilities
65- vulnerability = " deny"
6664# The lint level for unmaintained crates
6765unmaintained = " workspace"
6866# The lint level for crates that have been yanked from their source registry
6967yanked = " warn"
70- # The lint level for crates with security notices. Note that as of
71- # 2019-12-17 there are no security notice advisories in
72- # https://github.com/rustsec/advisory-db
73- notice = " warn"
7468# A list of advisory IDs to ignore. Note that ignored advisories will still
7569# output a note when they are encountered.
7670ignore = [
@@ -98,8 +92,6 @@ ignore = [
9892# More documentation for the licenses section can be found here:
9993# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
10094[licenses ]
101- # The lint level for crates which do not have a detectable license
102- unlicensed = " deny"
10395# List of explicitly allowed licenses
10496# See https://spdx.org/licenses/ for list of possible licenses
10597# [possible values: any SPDX 3.11 short identifier (+ optional exception)].
@@ -113,26 +105,6 @@ allow = [
113105 # Considered Copyleft, but permitted in this project
114106 " MPL-2.0" ,
115107]
116- # List of explicitly disallowed licenses
117- # See https://spdx.org/licenses/ for list of possible licenses
118- # [possible values: any SPDX 3.11 short identifier (+ optional exception)].
119- deny = [
120- # "Nokia",
121- ]
122- # Lint level for licenses considered copyleft
123- copyleft = " warn"
124- # Blanket approval or denial for OSI-approved or FSF Free/Libre licenses
125- # * both - The license will be approved if it is both OSI-approved *AND* FSF
126- # * either - The license will be approved if it is either OSI-approved *OR* FSF
127- # * osi-only - The license will be approved if is OSI-approved *AND NOT* FSF
128- # * fsf-only - The license will be approved if is FSF *AND NOT* OSI-approved
129- # * neither - This predicate is ignored and the default lint level is used
130- allow-osi-fsf-free = " neither"
131- # Lint level used when no other predicates are matched
132- # 1. License isn't in the allow or deny lists
133- # 2. License isn't copyleft
134- # 3. License isn't OSI/FSF, or allow-osi-fsf-free = "neither"
135- default = " deny"
136108# The confidence threshold for detecting a license from license text.
137109# The higher the value, the more closely the license text must be to the
138110# canonical license text of a valid SPDX license file.
0 commit comments