| 1 | # https://embarkstudios.github.io/cargo-deny/checks/cfg.html |
| 2 | [graph] |
| 3 | all-features = true |
| 4 | exclude = [ |
| 5 | # dev only dependency |
| 6 | "criterion" |
| 7 | ] |
| 8 | |
| 9 | [advisories] |
| 10 | version = 2 |
| 11 | ignore = [ |
| 12 | { id = "RUSTSEC-2024-0388", reason = "Unmaintained derivative crate, not a direct dependency" }, |
| 13 | ] |
| 14 | |
| 15 | [licenses] |
| 16 | version = 2 |
| 17 | allow = [ |
| 18 | "Apache-2.0", |
| 19 | "Apache-2.0 WITH LLVM-exception", |
| 20 | "CDLA-Permissive-2.0", |
| 21 | "BSD-2-Clause", |
| 22 | "BSD-3-Clause", |
| 23 | "BSL-1.0", |
| 24 | "ISC", |
| 25 | "MIT", |
| 26 | "MPL-2.0", |
| 27 | "Unicode-3.0", |
| 28 | "Zlib", |
| 29 | ] |
| 30 | |
| 31 | [bans] |
| 32 | # We should disallow this, but it's currently a PITA. |
| 33 | multiple-versions = "allow" |
| 34 | wildcards = "allow" |
| 35 | |
| 36 | [sources] |
| 37 | unknown-registry = "deny" |
| 38 | unknown-git = "deny" |
| 39 | |
| 40 | allow-git = [ |
| 41 | # A patch override for the bindings fixing a bug for Android before upstream |
| 42 | # releases a new version. |
| 43 | "https://github.com/tokio-rs/tracing.git", |
| 44 | # Well, it's Ruma. |
| 45 | "https://github.com/ruma/ruma", |
| 46 | # A patch override for the bindings: https://github.com/rodrimati1992/const_panic/pull/10 |
| 47 | "https://github.com/jplatte/const_panic", |
| 48 | # A patch override for the bindings: https://github.com/smol-rs/async-compat/pull/22 |
| 49 | "https://github.com/element-hq/async-compat", |
| 50 | # We can release vodozemac whenever we need but let's not block development |
| 51 | # on releases. |
| 52 | "https://github.com/matrix-org/vodozemac", |
| 53 | ] |