# cargo-deny configuration. Run in CI via `cargo deny check`.
#
# For this system supply-chain policy is a control, not hygiene: the privacy
# argument — the rendezvous plane can never see content — is a statement about
# the whole dependency graph, and a new transitive dependency is a change to
# that argument.
[graph]
all-features = true
[advisories]
version = 2
yanked = "deny"
[bans]
multiple-versions = "warn"
wildcards = "deny"
# The planes communicate through explicitly injected ports, never ambiently.
deny = [
{ name = "openssl-sys", reason = "use rustls; no C TLS stack anywhere near the registry adapter" },
]
[licenses]
version = 2
allow = ["MIT", "Apache-2.0", "Apache-2.0 WITH LLVM-exception", "BSD-2-Clause", "BSD-3-Clause", "ISC", "Unicode-3.0", "CC0-1.0", "Zlib"]
confidence-threshold = 0.93
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]