Ignore derivative in Cargo deny (#3708)

qinheping · web-flow · commit 59ef4df6debb · 2024-11-11T19:23:43.000Z
`derivative` is marked as unmaintained by RUSTSEC but still used in Charon. We exclude it from the deny check until `derivative` is replaced in Charon (AeneasVerif/charon#459). By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 and MIT licenses.
diff --git a/deny.toml b/deny.toml
@@ -1,6 +1,12 @@
 # Copyright Kani Contributors
 # SPDX-License-Identifier: Apache-2.0 OR MIT
 
+[graph]
+# derivative is marked as unmaintained by RUSTSEC but still used in
+# Charon. We exclude it from the deny check until derivative is replaced
+# from Charon (https://github.com/AeneasVerif/charon/pull/459).
+exclude = ["derivative"]
+
 # This section is considered when running `cargo deny check advisories`
 # More documentation for the advisories section can be found here:
 # https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
