ColdVox/deny.toml at main · Coldaine/ColdVox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
[licenses]
# List of explicitly allowed licenses (anything not listed is denied)
# See https://spdx.org/licenses/ for list of possible licenses
allow = [
    "MIT",
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Unicode-3.0",
    "Zlib",
    "BSL-1.0",
    "CC0-1.0",
    "0BSD",
    "MPL-2.0",
    "CDLA-Permissive-2.0",
]
confidence-threshold = 0.8
# Ignore workspace crates (they're not published)
[licenses.private]
ignore = true

[bans]
multiple-versions = "warn"
wildcards = "allow"
highlight = "all"
# Note: openssl/native-tls come from ort-sys build deps - acceptable for build-time use
deny = []
skip = []  # Add crates to skip if needed

[advisories]
# Use default advisory database location
ignore = [
    # paste is unmaintained but widely used and stable; no security impact
    { id = "RUSTSEC-2024-0436", reason = "paste is unmaintained but stable, no security concern" },
    # proc-macro-error is unmaintained; transitive dep from gtk3-macros via Tauri/wry; no security impact
    { id = "RUSTSEC-2024-0370", reason = "proc-macro-error unmaintained; transitive dep from gtk3-rs via Tauri; no safe upgrade" },
    # gtk-rs GTK3 bindings are unmaintained (all 0.18.x crates); transitive deps from Tauri/wry on Linux; no safe upgrade
    { id = "RUSTSEC-2024-0413", reason = "gtk-rs GTK3 (atk) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0416", reason = "gtk-rs GTK3 (atk-sys) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0412", reason = "gtk-rs GTK3 (gdk) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0418", reason = "gtk-rs GTK3 (gdk-sys) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0411", reason = "gtk-rs GTK3 (gdkwayland-sys) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0417", reason = "gtk-rs GTK3 (gdkx11) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0414", reason = "gtk-rs GTK3 (gdkx11-sys) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0415", reason = "gtk-rs GTK3 (gtk) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0420", reason = "gtk-rs GTK3 (gtk-sys) unmaintained; transitive dep from Tauri; no safe upgrade" },
    { id = "RUSTSEC-2024-0419", reason = "gtk-rs GTK3 (gtk3-macros) unmaintained; transitive dep from Tauri; no safe upgrade" },
    # fxhash is unmaintained; transitive dep from kuchikiki in tauri-utils; no safe upgrade
    { id = "RUSTSEC-2025-0057", reason = "fxhash unmaintained; transitive dep from tauri-utils via kuchikiki; no safe upgrade" },
    # unic-* unicode crates are unmaintained; transitive deps from tauri-utils via urlpattern; no safe upgrade
    { id = "RUSTSEC-2025-0081", reason = "unic-char-property unmaintained; transitive dep from tauri-utils; no safe upgrade" },
    { id = "RUSTSEC-2025-0075", reason = "unic-char-range unmaintained; transitive dep from tauri-utils; no safe upgrade" },
    { id = "RUSTSEC-2025-0080", reason = "unic-common unmaintained; transitive dep from tauri-utils; no safe upgrade" },
    { id = "RUSTSEC-2025-0100", reason = "unic-ucd-ident unmaintained; transitive dep from tauri-utils; no safe upgrade" },
    { id = "RUSTSEC-2025-0098", reason = "unic-ucd-version unmaintained; transitive dep from tauri-utils; no safe upgrade" },
]

[sources]
unknown-registry = "warn"
unknown-git = "warn"