[licenses]
clarify = [
  { name = "near-chain", expression = "MIT OR Apache-2.0", license-files = [
  ] },
]
allow = [
  "Apache-2.0",
  "MIT",
  "BSD-3-Clause",
  "BSD-2-Clause",
  "MPL-2.0",
  "Zlib",
  "Apache-2.0 WITH LLVM-exception",
  "ISC",
  "Unicode-3.0",
  "CC0-1.0",
  "CDLA-Permissive-2.0",
  "CDDL-1.0",
]

[advisories]
ignore = [
  "RUSTSEC-2022-0054", # wee_alloc is unmaintained
  "RUSTSEC-2024-0370", # proc-macro-error is unmaintained
  "RUSTSEC-2026-0173", # proc-macro-error2 is unmaintained
  "RUSTSEC-2024-0436", # paste is unmaintained
  "RUSTSEC-2024-0384", # instant is unmaintained
  "RUSTSEC-2023-0089", # atomic-polyfill is unmaintained
]

[bans]
multiple-versions = "warn"
skip = [{ name = "windows-sys" }]
skip-tree = [
  { name = "axum" },
  { name = "dstack-sdk" },
  { name = "near-jsonrpc-client" },
  { name = "near-vm-runner" },
  { name = "pprof" },
  { name = "reqwest" },
  { name = "lru" },                 # TODO(#1730): Remove once nearcore updates to a fixed version
]

[sources]
unknown-git = "deny"
allow-git = [
  "https://github.com/near/nearcore",
  # TODO(#3008): drop this entry when swapping back to a crates.io `dcap-qvl`
  # release containing <https://github.com/Phala-Network/dcap-qvl/pull/153>.
  "https://github.com/Phala-Network/dcap-qvl",
]