[package]
name = "uv-audit"
version = "0.0.43"
description = "This is an internal component crate of uv"
edition.workspace = true
rust-version.workspace = true
homepage.workspace = true
repository.workspace = true
authors.workspace = true
license.workspace = true

[lib]
doctest = false

[lints]
workspace = true

[dependencies]
uv-client = { workspace = true }
uv-configuration = { workspace = true }
uv-distribution-types = { workspace = true }
uv-pep440 = { workspace = true }
uv-normalize = { workspace = true }
uv-pypi-types = { workspace = true }
uv-redacted = { workspace = true }
uv-small-str = { workspace = true }

clap = { workspace = true, optional = true }
futures = { workspace = true }
jiff = { workspace = true }
reqwest-middleware = { workspace = true, features = ["json"] }
rkyv = { workspace = true }
rustc-hash = { workspace = true }
serde = { workspace = true, features = ["derive"] }
thiserror = { workspace = true }
tokio = { workspace = true }
tracing = { workspace = true }

[dev-dependencies]
insta = { workspace = true }
reqwest = { workspace = true, default-features = false, features = [
  "rustls",
] }
serde_json = { workspace = true }
tokio = { workspace = true }
wiremock = { workspace = true }

[features]
default = ["test-osv"]

# Introduces a testing dependency on osv.dev.
test-osv = []

[package.metadata.cargo-shear]
# NOTE: reqwest is a dependency of reqwest-middleware, but we don't use it directly.
# However, we *do* need to explicitly declare it as a dev-dependency to ensure
# the right TLS features are enabled. `cargo shear` can't see that, hence the ignore.
ignored = ["reqwest"]
