rbitcoin/deny.toml at master · reardencode/rbitcoin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# Supply-chain gate (Q-20). CI: `cargo deny check`.
# Exceptions need a one-line reason in this file.

[graph]
all-features = false
no-default-features = false

[advisories]
yanked = "deny"
ignore = []

[licenses]
confidence-threshold = 0.8
allow = [
    "MIT",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Zlib",
    "Unicode-3.0",
    "Unicode-DFS-2016",
    "CC0-1.0",           # rust-bitcoin / hashes
    "MITNFA",            # hex_lit via bitcoin 0.32
    "BSL-1.0",
    "OpenSSL",           # ring / rustls stack
    "CDLA-Permissive-2.0",
]

[bans]
multiple-versions = "deny"
# cargo-deny 0.20.2 `bans.wildcards = "deny"` reports
# `error[wildcard]` on every `workspace = true` line
# (`rbitcoin-primitives = { workspace = true }` is "wildcard dependency").
# The tree has no `version = "*"`. Leave this allow until that diagnostic changes.
wildcards = "allow"
deny = []
skip = [
    # noise_sv2 aes/chacha still use cpufeatures 0.2. sha3 0.12 uses 0.3.
    { name = "cpufeatures", version = "=0.2.17" },
    # Same split: noise_sv2 aead/cipher vs digest 0.11 (sha3).
    { name = "crypto-common", version = "=0.1.7" },
    # noise_sv2 2.0.0 still pins secp256k1 0.28. bitcoin and bip324 use 0.29.
    { name = "secp256k1", version = "=0.28.2" },
    # Follows the noise_sv2 secp256k1 0.28 pin (sys 0.9). bitcoin uses 0.10.
    { name = "secp256k1-sys", version = "=0.9.2" },
    # secp256k1 0.28 pulls hashes 0.13. bitcoin is 0.14. bip324 is 0.16.
    { name = "bitcoin_hashes", version = "=0.13.1" },
    { name = "bitcoin_hashes", version = "=0.14.101" },
    # Each hashes line above carries its own hex-conservative. 1.x stays checked.
    { name = "hex-conservative", version = "=0.1.2" },
    { name = "hex-conservative", version = "=0.2.3" },
    { name = "hex-conservative", version = "=0.3.2" },
    # rand 0.8 (via noise_sv2) still needs getrandom 0.2. Direct deps are 0.4.
    { name = "getrandom", version = "=0.2.17" },
    # shuttle's corosensei still uses windows-sys 0.59. The rest of the tree is 0.61.
    { name = "windows-sys", version = "=0.59.0" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []