You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: deny.toml
+3-8Lines changed: 3 additions & 8 deletions
Original file line number
Diff line number
Diff line change
@@ -70,15 +70,11 @@ ignore = [
70
70
#{ crate = "[email protected]", reason = "you can specify why you are ignoring the yanked crate" },
71
71
{ id = "RUSTSEC-2022-0061", reason = "Substrate Dependency deprecation. Eventually there will be an update. See https://github.com/paritytech/parity-wasm/pull/334 and https://github.com/paritytech/polkadot-sdk/issues/118" },
72
72
{ id = "RUSTSEC-2020-0168", reason = "There is no suitable replacement for mach and the mach2 crate has not been vetted." },
73
-
{ id = "RUSTSEC-2024-0336", reason = "Only use of [email protected] is in futures-rustls which does not use the effected code" },
74
73
{ id = "RUSTSEC-2024-0370", reason = "proc-macro-error is used by a few dependencies, and while unmaintained, is not currently an issue." },
75
-
{ id = "RUSTSEC-2024-0388", reason = "This is an inner dependency that would get updated when cumulus-primitives-core v0.7.0 is updated to a newer version"},
76
74
{ id = "RUSTSEC-2024-0384", reason = "This is an inner dependency that would get updated when libp2p v0.51.4 and wasm-timer v0.2.5 are updated to a newer version"},
77
-
{ id = "RUSTSEC-2024-0421", reason = "Vulnerable code is not used." },
78
-
{ id = "RUSTSEC-2025-0010", reason = "Unmaintained sub-dependency: ring, pending updates to those dependencies."},
79
-
{ id = "RUSTSEC-2025-0009", reason = "Unmaintained sub-dependency: ring, pending updates to dependencies."},
80
75
{ id = "RUSTSEC-2024-0436", reason = "Unmaintained sub-dependency: paste, pending updates to dependencies."},
81
-
{ id = "RUSTSEC-2025-0017", reason = "Renamed sub-dependency: trust-dns-proto -> hickory-proto, pending updates to dependencies."}
76
+
{ id = "RUSTSEC-2023-0091", reason = "This is an inner dependency of polkadot."},
77
+
{ id = "RUSTSEC-2024-0438", reason = "This is an inner dependency of polkadot."}
82
78
]
83
79
# If this is true, then cargo deny will use the git executable to fetch advisory database.
84
80
# If this is false, then it uses a built-in git library.
@@ -104,7 +100,6 @@ allow = [
104
100
"ISC",
105
101
"GPL-3.0",
106
102
"GPL-3.0 WITH Classpath-exception-2.0",
107
-
"OpenSSL",
108
103
"Zlib",
109
104
"Unicode-3.0",
110
105
"CDLA-Permissive-2.0",
@@ -245,7 +240,7 @@ unknown-git = "warn"
245
240
# if not specified. If it is specified but empty, no registries are allowed.
0 commit comments