deny.toml

[advisories]
ignore = [
    { id = "RUSTSEC-2024-0370", reason = "Pulled in transitively through ckb-tx-pool -> multi_index_map; no safe upgrade is available in the current ckb 1.x dependency line." },
    { id = "RUSTSEC-2024-0437", reason = "Pulled in transitively through ckb-network -> ckb-metrics -> prometheus; prometheus 0.13 pins protobuf 2.x and the current ckb 1.x dependency line does not expose a compatible upgrade." },
    { id = "RUSTSEC-2024-0436", reason = "Pulled in transitively through ckb-types and other ckb 1.x crates; no safe upgrade is available in the current dependency line." },
    { id = "RUSTSEC-2024-0384", reason = "Pulled in transitively through jsonrpc-http-server and ckb-shared -> sled; no safe upgrade is available in the current dependency line." },
    { id = "RUSTSEC-2020-0016", reason = "Pulled in transitively through jsonrpc-http-server 18; no safe upgrade is available without replacing the RPC server dependency." },
    { id = "RUSTSEC-2025-0057", reason = "Pulled in transitively through ckb-shared -> sled; no safe upgrade is available in the current ckb 1.x dependency line." },
    { id = "RUSTSEC-2025-0119", reason = "Pulled in transitively through ckb-db-migration -> indicatif 0.16; no safe upgrade is available in the current ckb 1.x dependency line." },
    { id = "RUSTSEC-2025-0141", reason = "bincode 1.3 is used directly and transitively by the current serialization format; no safe drop-in upgrade is available." },
]

[licenses]
allow = [
    "0BSD",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "BSL-1.0",
    "CC0-1.0",
    "ISC",
    "MIT",
    "MPL-2.0",
    "Unicode-3.0",
    "Zlib",
]
confidence-threshold = 0.8

[bans]
multiple-versions = "warn"
wildcards = "allow"

[sources]
unknown-registry = "warn"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]