gst-plugins-rs/deny.toml

160 lines
4.1 KiB
TOML
Raw Normal View History

[advisories]
db-path = "~/.cargo/advisory-db"
2020-11-20 08:03:52 +00:00
db-urls = ["https://github.com/rustsec/advisory-db"]
vulnerability = "deny"
unmaintained = "warn"
notice = "warn"
2020-06-05 09:33:13 +00:00
ignore = [
]
[licenses]
unlicensed = "deny"
allow = [
"Apache-2.0",
]
deny = [
"GPL-1.0",
"GPL-2.0",
"GPL-3.0",
"AGPL-1.0",
"AGPL-3.0",
]
copyleft = "allow"
allow-osi-fsf-free = "either"
confidence-threshold = 0.8
[bans]
multiple-versions = "deny"
highlight = "all"
2020-08-10 06:51:52 +00:00
wildcards = "allow"
# ignore duplicated deps because of dav1d-sys via metadeps depending on old
# error-chain and toml
# https://github.com/rust-av/dav1d-rs/issues/26
# https://github.com/joshtriplett/metadeps/pull/12
# https://github.com/joshtriplett/metadeps/pull/4
[[bans.skip]]
name = "error-chain"
version = "0.10"
[[bans.skip]]
name = "toml"
version = "0.2"
# ignore duplicated deps because of mio-named-pipes via mio depending on old
# miow
# https://github.com/alexcrichton/mio-named-pipes/issues/7
[[bans.skip]]
name = "miow"
version = "0.2"
[[bans.skip]]
name = "winapi"
version = "0.2"
# ignore duplicated deps because of chrono, cookie, cookie_store, hyper,
# hyperx, reqwest depending on old time
# https://github.com/chronotope/chrono/issues/400
# https://github.com/pfernie/cookie_store/issues/11
# https://github.com/hyperium/hyper/pull/2139
# https://github.com/dekellum/hyperx/issues/21
# https://github.com/seanmonstar/reqwest/issues/934
[[bans.skip]]
name = "time"
version = "0.1"
# ignore duplicated tokio dep because of gst-plugin-threadshare having its own
# fork
# https://gitlab.freedesktop.org/gstreamer/gst-plugins-rs/-/issues/118
[[bans.skip]]
name = "tokio"
version = "0.2.13"
[[bans.skip]]
name = "tokio-macros"
# ignore duplicated textwrap dependency because clap depends on an old version
# https://github.com/clap-rs/clap/pull/1994
[[bans.skip]]
name = "textwrap"
version = "0.11"
# ignore duplicated miniz_oxide dependency because png/tiff depend on an old version
# https://github.com/image-rs/image-tiff/pull/76
# https://github.com/image-rs/image-png/pull/235
[[bans.skip]]
name = "miniz_oxide"
version = "0.3"
2020-10-10 08:17:56 +00:00
# ignore duplicated cfg-if dependency because a few dozen dependencies still
# pull in the old version
[[bans.skip]]
name = "cfg-if"
version = "0.1"
2020-10-18 06:47:36 +00:00
# ignore duplicated pin-project dependency because a futures, hyper and rusoto
# still depend on the old version
# https://github.com/rust-lang/futures-rs/commit/8a65340675fdf0ba16997cf507ee6bb27d1dcd15
# https://github.com/hyperium/hyper/commit/02732bef0c1accb441b9b14c07cb2c494234a682
# https://github.com/rusoto/rusoto/pull/1847
[[bans.skip]]
name = "pin-project"
version = "0.4"
[[bans.skip]]
name = "pin-project-internal"
version = "0.4"
# ignore duplicated tinyvec dependency because lewton depends on an old version
# https://github.com/RustAudio/lewton/commit/b8d72804db89db358b99784e1ad9d7a22534743c
[[bans.skip]]
name = "tinyvec"
version = "0.3"
2020-11-20 08:03:52 +00:00
# ignore duplicated pin-project-lite dependency because many crates depend on an old version
[[bans.skip]]
name = "pin-project-lite"
version = "0.1"
# ignore duplicated nom dependency because cexpr depends on an old version
# https://github.com/jethrogb/rust-cexpr/issues/26
[[bans.skip]]
name = "nom"
version = "5"
2021-01-09 10:46:09 +00:00
# ignore duplicated nom dependency because tokio v0.2 depends on an old version
[[bans.skip]]
name = "bytes"
version = "0.5"
[[bans.skip]]
name = "mio"
version = "0.6"
2021-01-16 08:19:51 +00:00
# ignore duplicated redox_syscall dependency because parking_lot/dirs-next depends on an old version
2021-01-09 10:46:09 +00:00
[[bans.skip]]
2021-01-16 08:19:51 +00:00
name = "redox_syscall"
version = "0.1"
# ignore duplicated itertools dependency because glib-macros depends on an old version
# https://github.com/gtk-rs/gtk-rs/pull/264
2021-01-09 10:46:09 +00:00
[[bans.skip]]
2021-01-16 08:19:51 +00:00
name = "itertools"
version = "0.9"
# ignore duplicated rustc_version dependency because various crates depend on an old version
2021-01-09 10:46:09 +00:00
[[bans.skip]]
2021-01-16 08:19:51 +00:00
name = "rustc_version"
2021-01-09 10:46:09 +00:00
version = "0.2"
[[bans.skip]]
2021-01-16 08:19:51 +00:00
name = "semver"
version = "0.9"
2021-01-09 10:46:09 +00:00
[[bans.skip]]
2021-01-16 08:19:51 +00:00
name = "semver-parser"
version = "0.7"
2021-01-09 10:46:09 +00:00
[sources]
unknown-registry = "deny"
unknown-git = "deny"
allow-git = [
"https://gitlab.freedesktop.org/gstreamer/gstreamer-rs",
"https://github.com/gtk-rs/gtk-rs",
"https://github.com/fengalin/tokio",
"https://github.com/rust-av/flavors",
]