deny.toml

# Configuration documentation:
#   https://embarkstudios.github.io/cargo-deny/index.html

[advisories]
version = 2
yanked = "deny"
# Empty ignore list — add entries only when a real transitive dep requires it,
# with a justification comment.
ignore = []

[licenses]
version = 2
unused-allowed-license = "warn"
allow = [
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "MIT",
    "Unicode-3.0",
    "Unicode-DFS-2016",
    "Zlib",
]
exceptions = [
    # pep508_rs → pep440_rs → version-ranges is MPL-2.0 (weak file-level
    # copyleft). Acceptable: we depend on it unmodified. Matches influxdb_pro's
    # pattern of per-crate exceptions for MPL-2.0 transitives.
    { name = "version-ranges", allow = ["MPL-2.0"] },
]

[bans]
multiple-versions = "allow"
deny = [
    # The SDK is network-unaware. Ban every HTTP client crate so transitive
    # additions fail the audit step.
    { name = "reqwest" },
    { name = "hyper" },
    { name = "hyper-util" },
    { name = "ureq" },
    { name = "isahc" },
    { name = "curl" },
    { name = "awc" },
    { name = "surf" },
    # Team baseline bans from influxdb_pro:
    { name = "openssl-sys", reason = "we use rustls when TLS is needed" },
    { name = "atty", reason = "use std::io::IsTerminal from stdlib" },
    { name = "chrono-english", reason = "use humantime instead" },
]