deny.toml

[advisories]
ignore = [
    # RUSTSEC-2023-0089 (atomic-polyfill): unmaintained transitive build dependency via phonenumber -> postcard -> heapless; no safe upgrade is available; revisit after phonenumber moves off heapless 0.7 or by 2026-07-29.
    "RUSTSEC-2023-0089",
    # RUSTSEC-2024-0436 (paste): unmaintained transitive dependency via tokenizers/macro_rules_attribute; no safe upgrade is available; revisit after tokenizers drops paste or by 2026-07-29.
    "RUSTSEC-2024-0436",
    # RUSTSEC-2026-0194/RUSTSEC-2026-0195 (quick-xml): build-dependency via phonenumber; phonenumber constrains quick-xml to <=0.38 so the safe >=0.41 upgrade is not resolvable. The path parses bundled libphonenumber metadata at build time, not runtime user XML. Revisit after phonenumber supports quick-xml >=0.41 or by 2026-10-02.
    "RUSTSEC-2026-0194",
    "RUSTSEC-2026-0195",
    # RUSTSEC-2026-0192 (ttf-parser): dev-only document fixture/rendering path through imageproc -> ab_glyph; no safe upgrade is available. Revisit after imageproc/ab_glyph moves to a maintained font parser or by 2026-10-02.
    "RUSTSEC-2026-0192",
]

[licenses]
allow = [
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    # webpki-roots ships Mozilla's root store under the permissive Community Data License.
    "CDLA-Permissive-2.0",
    "ISC",
    "MIT",
    "Unicode-3.0",
    "Zlib",
]

# MPL-2.0 is allowed only for `option-ext`, a tiny transitive helper pulled in by
# dirs-sys -> dirs -> gaze-proxy for platform data/config path resolution. Keep
# this bounded to the exact crate and revisit after replacing `dirs`, after
# dirs-sys drops option-ext, or by 2026-12-10.
exceptions = [
    { allow = ["MPL-2.0"], crate = "option-ext" },
]

private = { ignore = true }

[bans]
workspace-default-features = "allow"

# Safety-net dependency bans are graph-scoped in
# `cargo run -p xtask -- cargo-metadata-audit-isolation`.
# cargo-deny's package bans are intentionally not used for the Phase 0
# `reqwest`/`hyper`/`tokio`/`ureq` safety-net rules because global bans would
# also hit the existing v0.5 NER graph. xtask is the authoritative gate;
# cargo-deny remains secondary belt-and-suspenders for feature policy.