Don't specify explicit version for dev-dependencies (#258)
1[advisories]
2db-path = "~/.cargo/advisory-db"
3db-urls = ["https://github.com/rustsec/advisory-db"]
4vulnerability = "deny"
5unmaintained = "deny"
6yanked = "deny"
7notice = "deny"
8ignore = [
9 "RUSTSEC-2021-0145" # from criterion, used only for benchmarking
10]
11
12[licenses]
13unlicensed = "deny"
14copyleft = "deny"
15allow = [
16 "MIT",
17 "Unicode-DFS-2016",
18 "Apache-2.0",
19 "Zlib",
20]
21default = "deny"
22
23[bans]
24multiple-versions = "deny"
25wildcards = "deny"
26highlight = "all"
27# Certain crates/versions that will be skipped when doing duplicate detection.
28skip = [
29 # Bypass problems with wildcard dependencies for dev-dependncies.
30 # Proper fix requires https://github.com/EmbarkStudios/cargo-deny/issues/448
31 { name = "taffy" }
32]
33
34[sources]
35unknown-registry = "deny"
36unknown-git = "deny"
37allow-registry = ["https://github.com/rust-lang/crates.io-index"]
38allow-git = []