1[advisories]
2db-path = "~/.cargo/advisory-db"
3db-urls = ["https://github.com/rustsec/advisory-db"]
4vulnerability = "deny"
5unmaintained = "warn"
6notice = "warn"
7ignore = [
8]
9
10[licenses]
11unlicensed = "deny"
12allow = [
13  "Apache-2.0",
14]
15deny = [
16  "GPL-1.0",
17  "GPL-2.0",
18  "GPL-3.0",
19  "AGPL-1.0",
20  "AGPL-3.0",
21]
22copyleft = "allow"
23allow-osi-fsf-free = "either"
24confidence-threshold = 0.8
25
26[bans]
27multiple-versions = "deny"
28highlight = "all"
29wildcards = "allow"
30
31# ignore duplicated deps because of mio-named-pipes via mio depending on old
32# miow
33# https://github.com/alexcrichton/mio-named-pipes/issues/7
34[[bans.skip]]
35name = "miow"
36version = "0.2"
37[[bans.skip]]
38name = "winapi"
39version = "0.2"
40
41# ignore duplicated deps because of chrono, cookie, cookie_store, hyper,
42# hyperx, reqwest depending on old time
43# https://github.com/chronotope/chrono/issues/400
44# https://github.com/pfernie/cookie_store/issues/11
45# https://github.com/hyperium/hyper/pull/2139
46# https://github.com/dekellum/hyperx/issues/21
47# https://github.com/seanmonstar/reqwest/issues/934
48[[bans.skip]]
49name = "time"
50version = "0.1"
51
52# ignore duplicated tokio dep because of gst-plugin-threadshare having its own
53# fork
54# https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/118
55[[bans.skip]]
56name = "tokio"
57version = "0.2.13"
58[[bans.skip]]
59name = "tokio-macros"
60
61# ignore duplicated textwrap dependency because clap depends on an old version
62# https://github.com/clap-rs/clap/pull/1994
63[[bans.skip]]
64name = "textwrap"
65version = "0.11"
66
67# ignore duplicated miniz_oxide dependency because png/tiff depend on an old version
68# https://github.com/image-rs/image-tiff/pull/76
69# https://github.com/image-rs/image-png/pull/235
70[[bans.skip]]
71name = "miniz_oxide"
72version = "0.3"
73
74# ignore duplicated cfg-if dependency because a few dozen dependencies still
75# pull in the old version
76[[bans.skip]]
77name = "cfg-if"
78version = "0.1"
79
80# ignore duplicated pin-project-lite dependency because many crates depend on an old version
81[[bans.skip]]
82name = "pin-project-lite"
83version = "0.1"
84
85# ignore duplicated nom dependency because cexpr depends on an old version
86# https://github.com/jethrogb/rust-cexpr/issues/26
87[[bans.skip]]
88name = "nom"
89version = "5"
90
91# ignore duplicated nom dependency because tokio v0.2 depends on an old version
92[[bans.skip]]
93name = "bytes"
94version = "0.5"
95[[bans.skip]]
96name = "mio"
97version = "0.6"
98
99# ignore duplicated rustc_version dependency because various crates depend on an old version
100[[bans.skip]]
101name = "rustc_version"
102version = "0.2"
103[[bans.skip]]
104name = "semver"
105version = "0.9"
106[[bans.skip]]
107name = "semver-parser"
108version = "0.7"
109
110# ignore duplicated rustc_version dependency because rav1e depends on an old version
111[[bans.skip]]
112name = "rustc_version"
113version = "0.3"
114[[bans.skip]]
115name = "semver"
116version = "0.11"
117
118# ignore duplicated num-rational dependency because image depends on an old version
119# https://github.com/image-rs/image/pull/1451
120[[bans.skip]]
121name = "num-rational"
122version = "0.3"
123
124# ignore duplicated ansi_term dependency because clap depends on an old version
125# https://github.com/clap-rs/clap/pull/2402
126[[bans.skip]]
127name = "ansi_term"
128version = "0.11"
129
130# ignore duplicated shlex dependency because rusoto_credentials depends on an old version
131# https://github.com/rusoto/rusoto/pull/1915
132[[bans.skip]]
133name = "shlex"
134version = "0.1"
135
136# ignore duplicated nom dependency because gst-plugin-flavors / flavors has to
137# be updated
138[[bans.skip]]
139name = "nom"
140version = "6"
141
142# ignore duplicated shlex dependency because rustfft 5 depends on an old version
143# https://github.com/ejmahler/RustFFT/commit/24140ef06e56c21debb7a47a37ca680717bb4414
144# rustfft 6 is released but nnnoiseless doesn't depend on it yet
145# https://github.com/jneem/nnnoiseless/pull/16
146[[bans.skip]]
147name = "num-complex"
148version = "0.3"
149
150[sources]
151unknown-registry = "deny"
152unknown-git = "deny"
153allow-git = [
154  "https://gitlab.freedesktop.org/gstreamer/gstreamer-rs",
155  "https://github.com/gtk-rs/gtk-rs-core",
156  "https://github.com/fengalin/tokio",
157  "https://github.com/rust-av/flavors",
158]
159