[graph]
targets = []
all-features = false

[advisories]
version = 2
ignore = [
	# rsa timing side-channel — no fix available, transitive via sqlx-mysql + jsonwebtoken
	"RUSTSEC-2023-0071",
	# bincode unmaintained — transitive via surrealdb-core
	"RUSTSEC-2025-0141",
	# paste unmaintained — transitive via wasmtime + arrow-flight
	"RUSTSEC-2024-0436",
]

[licenses]
version = 2
allow = [
	"MIT",
	"Apache-2.0",
	"Apache-2.0 WITH LLVM-exception",
	"BSD-2-Clause",
	"BSD-3-Clause",
	"ISC",
	"Unicode-3.0",
	"Unicode-DFS-2016",
	"Zlib",
	"CC0-1.0",
	"OpenSSL",
	"BSL-1.0",
	"MPL-2.0",
	"Unlicense",
	"BUSL-1.1",
	"CDLA-Permissive-2.0",
]
confidence-threshold = 0.8

[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
