deny.toml

[licenses]
version = 2
allow = [
    "Apache-2.0",
    "MIT",
    "BSD-2-Clause",
    "BSD-3-Clause", # BSD 3-Clause - used by subtle crate
    "ISC",          # ISC License - used by ring, rustls-webpki, untrusted
    "0BSD",         # BSD Zero Clause License - used by embassy-net dependencies
    "Unicode-3.0",
    "MPL-2.0",      # Mozilla Public License 2.0 - used by colored crate (CLI only)
    "OpenSSL",      # OpenSSL License - used by aws-lc-sys (transitive via rumqttc/rustls)
    "Zlib",         # Zlib License - used by foldhash (hashbrown default hasher)
]

confidence-threshold = 0.8

[bans]
multiple-versions = "warn"
wildcards = "allow"

[advisories]
version = 2
yanked = "warn"
# bare-metal is archived/deprecated and pulled transitively by cortex-m in the
# embedded stack; there is currently no drop-in replacement at this depth.
ignore = [
    "RUSTSEC-2026-0110", # bare-metal deprecated via cortex-m (embedded-only transitive)
]

[sources]
unknown-registry = "warn"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = [
    "https://github.com/embassy-rs/stm32-data-generated", # Required for embassy-stm32
]