- deny.toml: add [graph].targets to limit metadata to native+wasm32 (avoid Android/iOS edition-2024 deps that fail rustc 1.82 cargo metadata) - deny.toml: [bans] allow-wildcard-paths = true for workspace path deps - crates/*/Cargo.toml: add explicit version="0.1.0" alongside path = "..." (cargo-deny rejects wildcard-path deps for publishable crates) cargo-deny 0.16.4 hits a CVSS 4.0 parse error AND lacks edition-2024 cargo metadata support; bumped to 0.18.9 (installed via stable toolchain). Run cargo-deny with RUSTUP_TOOLCHAIN=stable so it uses cargo 1.95 for metadata parsing while project itself still builds on 1.82. Verified: advisories ok, bans ok, licenses ok, sources ok (exit 0) on both native and wasm32-unknown-unknown targets. |
||
|---|---|---|
| .. | ||
| src | ||
| Cargo.toml | ||