EmbarkStudios / cargo-deny

❌ Cargo plugin for linting your dependencies 🦀

Home Page:http://embark.rs

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Allowing a yanked crate

jayvdb opened this issue · comments

Is your feature request related to a problem? Please describe.
We are using yanked = "deny", and just today ran into a yanked crate without an advisory and without an immediate upgrade path. c.f. glademiller/openapiv3#81 (comment)

Describe the solution you'd like
An ability to specify that a yanked crate version is whitelisted.

Describe alternatives you've considered
We would not like to be changing yanked = "warn" as that would ignore other yanked crates.

Additional context