[advisories]
ignore = [
  # paste crate flagged as unmaintained (RUSTSEC-2024-0436) — transitive dep via rmcp/schemars.
  # No action needed: paste is feature-complete (proc macro for token pasting), widely used, no CVE.
  "RUSTSEC-2024-0436",
]
yanked = "warn"

[licenses]
allow = [
  "Apache-2.0",
  "Apache-2.0 WITH LLVM-exception",
  "MIT",
  "BSD-2-Clause",
  "BSD-3-Clause",
  "ISC",
  "Unicode-3.0",
  "Zlib",
  "CC0-1.0",
]

[bans]
multiple-versions = "warn"
