wallet/deny.toml at main · tempoxyz/wallet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
[advisories]
yanked = "warn"
ignore = [
  # paste is archived; retained via upstream dependency graph
  "RUSTSEC-2024-0436",
  # bincode is marked unmaintained; retained via syntect
  "RUSTSEC-2025-0141",
  # yaml-rust is unmaintained; retained via syntect
  "RUSTSEC-2024-0320",
  # rustls-pemfile is unmaintained; retained via reqwest 0.11 in posthog-rs
  "RUSTSEC-2025-0134",
]

[bans]
multiple-versions = "warn"
wildcards = "allow"
highlight = "all"
deny = [{ name = "openssl", wrappers = ["native-tls"] }]
skip = []
skip-tree = []

[licenses]
version = 2
confidence-threshold = 0.8
private = { ignore = true }
unused-allowed-license = "warn"
allow = [
  "MIT",
  "MIT-0",
  "Apache-2.0",
  "Apache-2.0 WITH LLVM-exception",
  "BSD-2-Clause",
  "BSD-3-Clause",
  "BSL-1.0",
  "0BSD",
  "CC0-1.0",
  "ISC",
  "Unlicense",
  "Unicode-3.0",
  "Zlib",
  "LicenseRef-rustls-webpki",
  "CDLA-Permissive-2.0",
  "OpenSSL",
]

exceptions = [
  # MPL-2.0 transitives currently required by dependency graph.
  { allow = ["MPL-2.0"], name = "colored" },
  { allow = ["MPL-2.0"], name = "option-ext" },
  { allow = ["MPL-2.0"], name = "webpki-roots" },
]

[[licenses.clarify]]
name = "rustls-webpki"
expression = "LicenseRef-rustls-webpki"
license-files = [{ path = "LICENSE", hash = 0x001c7e6c }]

[sources]
unknown-registry = "warn"
unknown-git = "deny"
allow-git = [
  "https://github.com/paradigmxyz/reth",
  "https://github.com/tempoxyz/mpp-rs.git",
  "https://github.com/tempoxyz/tempo.git",
  "https://github.com/tempoxyz/tempo",
]