content: [advisories]
  version = 2
  yanked = "warn"
  ignore = [
      # https://rustsec.org/advisories/RUSTSEC-2024-0436
      "RUSTSEC-2024-0436",
  ]
  
  [bans]
  multiple-versions = "warn"
  wildcards = "deny"
  highlight = "all"
  
  [licenses]
  version = 2
  confidence-threshold = 0.8
  
  allow = [
      "MIT",
      "Apache-2.0",
      "Apache-2.0 WITH LLVM-exception",
      "BSD-3-Clause",
      "BSD-2-Clause",
      "0BSD",
      "ISC",
      "Unicode-3.0",
      "Unlicense",
      "MPL-2.0",
      "Zlib",
  ]
  
  exceptions = [
      # CC0 is a permissive license but somewhat unclear status for source code
      # so we prefer to not have dependencies using it
      # https://tldrlegal.com/license/creative-commons-cc0-1.0-universal
      { allow = ["CC0-1.0"], name = "tiny-keccak" },
      { allow = ["BSD-2-Clause"], name = "zerocopy" },
  ]
  
  [[licenses.clarify]]
  name = "ring"
  expression = "LicenseRef-ring"
  license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
  
  [[licenses.clarify]]
  name = "webpki"
  expression = "LicenseRef-webpki"
  license-files = [{ path = "LICENSE", hash = 0x001c7e6c }]
  
  [sources]
  unknown-registry = "deny"
  unknown-git = "deny"
  