[advisories]
# Package: paste 1.0.15 (proc-macro), transitive via netstat2 -> netlink-packet-utils.
# Reachability: build-time proc macro only; Mercury does not expose paste as a runtime parser, command, or input boundary.
# Reviewed: 2026-05-23 with `cargo tree --target all -i paste`.
# Upgrade/follow-up: remove this ignore when netstat2's dependency chain no longer requires paste, or when a maintained upstream replacement is available.
ignore = ["RUSTSEC-2024-0436"]

[bans]
multiple-versions = "allow"

[licenses]
allow = [
    "Apache-2.0",
    "BSD-2-Clause",
    "CC0-1.0",
    "BSD-3-Clause",
    "BSL-1.0",
    "CDLA-Permissive-2.0",
    "ISC",
    "MIT",
    "NCSA",
    "Unicode-3.0",
    "Unlicense",
    "Zlib",
]
confidence-threshold = 0.93