[advisories]
ignore = [
    # title: Potential segfault in the time crate
    # why needed: used by `chrono`
    # upstream issue: https://github.com/chronotope/chrono/issues/553
    "RUSTSEC-2020-0071",

    # title: Potential segfault in `localtime_r` invocations
    # why needed: bug in `chrono`
    # upstream issue: https://github.com/chronotope/chrono/issues/499
    "RUSTSEC-2020-0159",

    # title: memmap is unmaintained
    # why needed: used by `symbolic` which is used by `pprof`
    # upstream issue: https://github.com/getsentry/symbolic/issues/304
    "RUSTSEC-2020-0077",

    # title: difference is unmaintained
    # why needed: used by `mockito`
    # upstream issue: https://github.com/lipanski/mockito/issues/132
    "RUSTSEC-2020-0095",

    # title: BinaryArray does not perform bound checks on reading values and offsets
    # why needed: part of `arrow`
    # upstream issue: https://github.com/apache/arrow-rs/issues/772
    "RUSTSEC-2021-0116",

    # title: DecimalArray does not perform bound checks on accessing values and offsets
    # why needed: part of `arrow`
    # upstream issue: https://github.com/apache/arrow-rs/issues/775
    "RUSTSEC-2021-0117",

    # title: FixedSizeBinaryArray does not perform bound checks on accessing values and offsets
    # why needed: part of `arrow`
    # upstream issue: https://github.com/apache/arrow-rs/issues/774
    "RUSTSEC-2021-0118",

]

[output]
deny = [
    "unmaintained",
    "unsound",
    "yanked",
]
quiet = false

[yanked]
# interaction of workspace-local crates and crates.io is currently broken (e.g. for `query`)
# see https://github.com/rustsec/rustsec/issues/232
enabled = false

# currently broken on CircleCI due to https://github.com/rustsec/rustsec/issues/292
update_index = false