deny.toml

[graph]
targets = [
    "x86_64-unknown-linux-gnu",
    "x86_64-apple-darwin",
    "x86_64-pc-windows-msvc",
    "x86_64-pc-windows-gnu",
]
all-features = true

[advisories]
version = 2
ignore = [
    { id = "RUSTSEC-2023-0071", reason = "we're decrypting public data with publicly available keys" },
]

[licenses]
version = 2
allow = [
    "0BSD",
    "Apache-2.0",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "MIT",
    "Unlicense",
    "Zlib",
    "ISC",
    "MPL-2.0"
]

exceptions = [{ name = "unicode-ident", allow = ["Unicode-DFS-2016"] }]

[bans]
multiple-versions = "deny"
wildcards = "deny"

# Certain crates that we don't want multiple versions of in the dependency tree
deny = [
    { name = "bevy", deny-multiple-versions = true },
]

skip-tree = [
    { crate = "windows-sys@0.48.0", reason = "a foundational crate for many that bumps far too frequently to ever have a shared version" },
]

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = ["https://github.com/tremwil/utf16string.git"]