deny.toml

# add whatever else we support.
targets = [
    { triple = "x86_64-unknown-linux-gnu" },
    { triple = "x86_64-unknown-linux-musl" },
    { triple = "x86_64-apple-darwin" },
    { triple = "x86_64-pc-windows-msvc" },
    { triple = "aarch64-linux-android" },
    { triple = "aarch64-unknown-linux-gnu" },
    { triple = "aarch64-unknown-linux-musl" },
    { triple = "aarch64-apple-ios" },
    { triple = "aarch64-apple-darwin" },
    { triple = "armv7-unknown-linux-gnueabihf" },
    { triple = "armv7-unknown-linux-musleabi" },
    { triple = "arm-unknown-linux-gnueabihf" },
    { triple = "wasm32-unknown-unknown" },
]

[advisories]
vulnerability = "deny"
unmaintained = "warn"
yanked = "deny"
ignore = []

[bans]
multiple-versions = "deny"
wildcards = "allow"
deny = [
    # List crates we don't want in our dependency tree here.
]

# Skip some multiple-versions checks, until they can be fixed.
skip = [
    { name = "num-bigint", version="<0.3.1" },  # ndarray-npy brings in a different version.
    { name = "itertools", version="<0.10.0" },  # ndarray/criterion brings in an older version.
    { name = "ansi_term", version="<0.12.1" },  # clap brings in an old one.
    { name = "miniz_oxide", version="<0.4" }, # ndarray-npy pulls in an old version of flate
    { name = "cfg-if", version="<1.0" }, # cascading from flate too
    { name = "rand", version="<0.8" }, # locked by proptest 0.7
    { name = "rand_core", version="<0.6" }, # and cascading
    { name = "rand_chacha", version="<0.3" }, # and cascading
    { name = "getrandom", version="<0.2" }, # and cascading
]

[sources]
# trusted git sources.
allow-git = [
]

[licenses]
allow = [
    "Apache-2.0",                     # https://tldrlegal.com/license/apache-license-2.0-(apache-2.0)
    "MIT",                            # https://tldrlegal.com/license/mit-license
    "Zlib",                           # https://tldrlegal.com/license/zlib-libpng-license-(zlib)
]