diff --git a/.cargo/audit.toml b/.cargo/audit.toml new file mode 100644 index 0000000000..cc904ee1a1 --- /dev/null +++ b/.cargo/audit.toml @@ -0,0 +1,16 @@ +[advisories] +ignore = [ + # Unmaintained advisory for the `net2` crate. + # + # We ignore this, because `net2` is a transitive dependency of older + # versions of `mio`, which we depend on via `tokio` 0.1. `tokio` 0.1 won't + # be updated, so as long as `tracing-futures` supports tokio 0.1, we can't + # really get rid of the `net2` dependency. + # + # So, just ignore the warning. It only effects users who are using + # compatibility features for *other* unmaintained libraries, anyway. + # + # TODO: when `tracing-futures` drops support for `tokio` 0.1, we can remove + # the `ignore` for this warning, as we will no longer pull `net2`. + "RUSTSEC-2020-0016" +] \ No newline at end of file