[advisories]
ignore = [
    # title: Potential segfault in the time crate
    # why needed: used by `chrono`
    # upstream issue: https://github.com/chronotope/chrono/issues/553
    "RUSTSEC-2020-0071",

    # title: Potential segfault in `localtime_r` invocations
    # why needed: bug in `chrono`
    # upstream issue: https://github.com/chronotope/chrono/issues/499
    "RUSTSEC-2020-0159",

    # title: memmap is unmaintained
    # why needed: used by `symbolic` which is used by `pprof`
    # upstream issue: https://github.com/getsentry/symbolic/issues/304
    "RUSTSEC-2020-0077",

    # title: difference is unmaintained
    # why needed: used by `mockito`
    # upstream issue: https://github.com/lipanski/mockito/issues/132
    "RUSTSEC-2020-0095",

    # title: Generated code can read and write out of bounds in safe code
    # why needed: part of `arrow`
    # upstream issue: https://github.com/google/flatbuffers/issues/6627
    "RUSTSEC-2021-0122",

    # title: serde_cbor is unmaintained
    # why needed: used by `criterion`
    # upstream issue: https://github.com/bheisler/criterion.rs/issues/534
    "RUSTSEC-2021-0127",
]

[output]
deny = [
    "unmaintained",
    "unsound",
    "yanked",
]
quiet = false

[yanked]
# interaction of workspace-local crates and crates.io is currently broken (e.g. for `query`)
# see https://github.com/rustsec/rustsec/issues/232
enabled = false

# currently broken on CircleCI due to https://github.com/rustsec/rustsec/issues/292
update_index = false