1# Documentation for this configuration file can be found here 2# https://embarkstudios.github.io/cargo-deny/checks/cfg.html 3 4[graph] 5targets = [ 6 { triple = "x86_64-unknown-linux-gnu" }, 7 { triple = "x86_64-apple-darwin" }, 8 { triple = "x86_64-pc-windows-msvc" }, 9 { triple = "aarch64-linux-android" }, 10] 11 12# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html 13[licenses] 14allow = [ 15 "Apache-2.0 WITH LLVM-exception", 16 "Apache-2.0", 17 "BSD-3-Clause", 18 "ISC", 19 "MIT", 20 "MPL-2.0", 21 "Unicode-DFS-2016", 22 "Zlib", 23 "Unicode-3.0", 24] 25 26[[licenses.clarify]] 27name = "ring" 28expression = "MIT AND ISC AND OpenSSL" 29license-files = [ 30 { path = "LICENSE", hash = 0xbd0eed23 } 31] 32 33# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html 34[bans] 35multiple-versions = "deny" 36wildcards = "allow" 37deny = [] 38skip = [ 39 { name = "heck", reason = "wasm-compose uses an old version of `heck` and was updated in https://github.com/bytecodealliance/wasm-tools/pull/2359, but that hasn't released yet" }, 40] 41skip-tree = [ 42 # proptest depends on bitflags 1.x.x while other crates depend on 2.x.x so 43 # ignore its dependency tree until it updates. 44 { name = "proptest", depth = 20 }, 45 46 # This is maintained externally and we allow it to have duplicate 47 # dependencies relative to Wasmtime's main dependency tree. 48 { name = "witx", depth = 20 }, 49 50 # They want to publish version 2.0 to upgrade `hashbrown` so in the meantime 51 # it is duplicated for us. 52 { name = "indexmap", depth = 2 }, 53 54 # criterion is on old version, will update on next release. 55 { name = "itertools" }, 56 57 # backtrace currently using an older version of gimli/addr2line 58 { name = "backtrace" }, 59 60 # right now terminal_size pulls in an older version of io-lifetimes 61 { name = "io-lifetimes" }, 62 63 { name = "file-per-thread-logger", reason = "this uses an old version of env-logger; may be unmaintained?" } 64] 65