1[advisories] 2db-path = "~/.cargo/advisory-db" 3db-urls = ["https://github.com/rustsec/advisory-db"] 4vulnerability = "deny" 5unmaintained = "warn" 6notice = "warn" 7ignore = [ 8] 9 10[licenses] 11unlicensed = "deny" 12allow = [ 13 "Apache-2.0", 14] 15deny = [ 16 "GPL-1.0", 17 "GPL-2.0", 18 "GPL-3.0", 19 "AGPL-1.0", 20 "AGPL-3.0", 21] 22copyleft = "allow" 23allow-osi-fsf-free = "either" 24confidence-threshold = 0.8 25 26[bans] 27multiple-versions = "deny" 28highlight = "all" 29wildcards = "allow" 30 31# ignore duplicated deps because of mio-named-pipes via mio depending on old 32# miow 33# https://github.com/alexcrichton/mio-named-pipes/issues/7 34[[bans.skip]] 35name = "miow" 36version = "0.2" 37[[bans.skip]] 38name = "winapi" 39version = "0.2" 40 41# ignore duplicated deps because of chrono, cookie, cookie_store, hyper, 42# hyperx, reqwest depending on old time 43# https://github.com/chronotope/chrono/issues/400 44# https://github.com/pfernie/cookie_store/issues/11 45# https://github.com/hyperium/hyper/pull/2139 46# https://github.com/dekellum/hyperx/issues/21 47# https://github.com/seanmonstar/reqwest/issues/934 48[[bans.skip]] 49name = "time" 50version = "0.1" 51 52# ignore duplicated tokio dep because of gst-plugin-threadshare having its own 53# fork 54# https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/118 55[[bans.skip]] 56name = "tokio" 57version = "0.2.13" 58[[bans.skip]] 59name = "tokio-macros" 60 61# ignore duplicated textwrap dependency because clap depends on an old version 62# https://github.com/clap-rs/clap/pull/1994 63[[bans.skip]] 64name = "textwrap" 65version = "0.11" 66 67# ignore duplicated miniz_oxide dependency because png/tiff depend on an old version 68# https://github.com/image-rs/image-tiff/pull/76 69# https://github.com/image-rs/image-png/pull/235 70[[bans.skip]] 71name = "miniz_oxide" 72version = "0.3" 73 74# ignore duplicated cfg-if dependency because a few dozen dependencies still 75# pull in the old version 76[[bans.skip]] 77name = "cfg-if" 78version = "0.1" 79 80# ignore duplicated pin-project-lite dependency because many crates depend on an old version 81[[bans.skip]] 82name = "pin-project-lite" 83version = "0.1" 84 85# ignore duplicated nom dependency because cexpr depends on an old version 86# https://github.com/jethrogb/rust-cexpr/issues/26 87[[bans.skip]] 88name = "nom" 89version = "5" 90 91# ignore duplicated nom dependency because tokio v0.2 depends on an old version 92[[bans.skip]] 93name = "bytes" 94version = "0.5" 95[[bans.skip]] 96name = "mio" 97version = "0.6" 98 99# ignore duplicated rustc_version dependency because various crates depend on an old version 100[[bans.skip]] 101name = "rustc_version" 102version = "0.2" 103[[bans.skip]] 104name = "semver" 105version = "0.9" 106[[bans.skip]] 107name = "semver-parser" 108version = "0.7" 109 110# ignore duplicated rustc_version dependency because rav1e depends on an old version 111[[bans.skip]] 112name = "rustc_version" 113version = "0.3" 114[[bans.skip]] 115name = "semver" 116version = "0.11" 117 118# ignore duplicated num-rational dependency because image depends on an old version 119# https://github.com/image-rs/image/pull/1451 120[[bans.skip]] 121name = "num-rational" 122version = "0.3" 123 124# ignore duplicated ansi_term dependency because clap depends on an old version 125# https://github.com/clap-rs/clap/pull/2402 126[[bans.skip]] 127name = "ansi_term" 128version = "0.11" 129 130# ignore duplicated shlex dependency because rusoto_credentials depends on an old version 131# https://github.com/rusoto/rusoto/pull/1915 132[[bans.skip]] 133name = "shlex" 134version = "0.1" 135 136# ignore duplicated nom dependency because gst-plugin-flavors / flavors has to 137# be updated 138[[bans.skip]] 139name = "nom" 140version = "6" 141 142# ignore duplicated shlex dependency because rustfft 5 depends on an old version 143# https://github.com/ejmahler/RustFFT/commit/24140ef06e56c21debb7a47a37ca680717bb4414 144# rustfft 6 is released but nnnoiseless doesn't depend on it yet 145# https://github.com/jneem/nnnoiseless/pull/16 146[[bans.skip]] 147name = "num-complex" 148version = "0.3" 149 150[sources] 151unknown-registry = "deny" 152unknown-git = "deny" 153allow-git = [ 154 "https://gitlab.freedesktop.org/gstreamer/gstreamer-rs", 155 "https://github.com/gtk-rs/gtk-rs-core", 156 "https://github.com/fengalin/tokio", 157 "https://github.com/rust-av/flavors", 158] 159