- Home
- Software Composition Analysis Software
- cargo-deny
On the recordRead 11 Oct 202622 facts
cargo-deny
On the record
- Advisories
- Its advisories check uses an advisory database to find known vulnerabilities, unmaintained crates, and crates yanked from their source registry.embarkstudios.github.io · read 4 Oct 2026
- Audience
- The project is intended for Rust projects whose dependencies are managed with Cargo.embarkstudios.github.io · read 11 Oct 2026
- CI integration
- The maker documents a GitHub Action for running cargo-deny in continuous integration.embarkstudios.github.io · read 4 Oct 2026
- Configuration
- The tool supports configurable checks, and `cargo deny check` runs all supported checks by default, using each check's default configuration when none is specified.embarkstudios.github.io · read 4 Oct 2026
- Dependency bans
- Its bans check can allow or deny specific crates and detect multiple versions of the same crate.embarkstudios.github.io · read 4 Oct 2026
- Dependency rules
- The bans check can allow or deny specific crates and detect multiple versions of a crate.embarkstudios.github.io · read 11 Oct 2026
- Disclaimer
- The repository says the makers take no responsibility for whether the tool functions correctly or meets a user's needs, and that it does not provide legal advice.github.com · read 4 Oct 2026
- Installation
- The repository documents installation with Cargo and, for Arch Linux users, with pacman.github.com · read 4 Oct 2026
- Install options
- The documentation describes installing from precompiled binaries, from crates.io, or from source; it says binaries are provided for major platforms on a best-effort basis.embarkstudios.github.io · read 11 Oct 2026
- Integrations
- The project documents a GitHub Action for running cargo-deny in continuous integration and a pre-commit hook.github.com · read 11 Oct 2026
- Legal limitation
- The project says cargo-deny does not constitute legal advice and its maintainers do not take responsibility for users’ use of the tool.github.com · read 11 Oct 2026
- Library API
- Although primarily intended as a Cargo plugin, most of cargo-deny’s functionality is in a library.embarkstudios.github.io · read 11 Oct 2026
- License
- The repository says cargo-deny is available under either the Apache License 2.0 or MIT license, at the user's option.github.com · read 4 Oct 2026
- License check limit
- The tool does not exhaustively search all crate source code for every license that could apply, and it assumes crates correctly define their license requirements.embarkstudios.github.io · read 4 Oct 2026
- License checks
- Its licenses check evaluates crate license requirements against configuration using SPDX license expressions.embarkstudios.github.io · read 11 Oct 2026
- License limitation
- The tool says it does not exhaustively search every crate’s source code for all licenses that could apply.embarkstudios.github.io · read 11 Oct 2026
- Linux example
- The CI usage page includes an x86_64 Linux musl binary download example.embarkstudios.github.io · read 11 Oct 2026
- Pre-commit integration
- The maker's repository documents using cargo-deny with pre-commit hooks.github.com · read 4 Oct 2026
