cargo-deny

Cargo plugin to lint your project's dependency graph (licenses, advisories, bans, sources)

cargo-deny is a cargo plugin from Embark Studios that lints your project's dependency graph. It checks crate licenses against an allow/deny list, scans for security advisories (RustSec), bans specific or duplicate crates, and restricts the sources crates may be fetched from. It is commonly run in CI to enforce supply-chain policies across large Rust workspaces.

homepage ↗ github: EmbarkStudios/cargo-deny cargo: cargo-deny