EmbarkStudios / cargo-deny

❌ Cargo plugin for linting your dependencies 🦀
http://embark.rs
Apache License 2.0
1.63k stars 81 forks source link

Allowing a yanked crate #579

Closed jayvdb closed 4 months ago

jayvdb commented 7 months ago

Is your feature request related to a problem? Please describe. We are using yanked = "deny", and just today ran into a yanked crate without an advisory and without an immediate upgrade path. c.f. https://github.com/glademiller/openapiv3/issues/81#issuecomment-1853075165

Describe the solution you'd like An ability to specify that a yanked crate version is whitelisted.

Describe alternatives you've considered We would not like to be changing yanked = "warn" as that would ignore other yanked crates.

Additional context