Switch from cargo-audit to cargo-deny

Apart from checking for security advisories it also checks licenses (we probably don't want to allow GPL without specifically allowing, for example), unmaintained crates, etc.

CC @gdesmott

https://github.com/EmbarkStudios/cargo-deny

changed the description

mentioned in commit slomo/gstreamer-rs@3e2b69d0

mentioned in merge request !411 (merged)

Nice tool!

Nice tool!

Indeed :) Watched a talk about it at FOSDEM. Now we only need to configure it correctly and get it running. Should help us to manage our dependencies a bit better and prevent weird things from sneaking in.

It doesn't replace cargo-oudated right? I have a branch to use it but I need this bug to be fixed first.

added Enhancement label

mentioned in commit gdesmott/gstreamer-rs@600c08cf

mentioned in commit slomo/gstreamer-rs@47d839e5

closed via merge request !411 (merged)