deny.toml

all-features = true

[advisories]
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
vulnerability = "deny"
unmaintained = "deny"
yanked = "deny"
notice = "deny"
ignore = []

[licenses]
unlicensed = "deny"
copyleft = "deny"
default = "deny"
allow = [
  "MIT",
  "MIT-0",
  "Apache-2.0",
  "BSD-3-Clause",
  "ISC",
  "Zlib",
  "0BSD",
  "BSD-2-Clause",
  "CC0-1.0",
]
exceptions = [
  { name = "unicode-ident", allow = [
    "Unicode-DFS-2016",
  ] },
  { name = "symphonia-bundle-flac", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-bundle-mp3", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-codec-aac", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-codec-adpcm", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-codec-pcm", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-codec-vorbis", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-core", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-format-isomp4", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-format-wav", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-metadata", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia-utils-xiph", allow = [
    "MPL-2.0",
  ] },
  { name = "symphonia", allow = [
    "MPL-2.0",
  ] },
]

[bans]
multiple-versions = "warn"
wildcards = "deny"
# Certain crates that we don't want multiple versions of in the dependency tree
deny = [
  { name = "ahash", deny-multiple-versions = true },
  { name = "android-activity", deny-multiple-versions = true },
  { name = "glam", deny-multiple-versions = true },
  { name = "raw-window-handle", deny-multiple-versions = true },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []