nub/hawk.toml at main · nubjs/nub · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
# hawk (astral-sh/hawk) visibility-lint config.
# vendor/aube is NOT a workspace member (own workspace, path deps) so hawk
# treats it as external and never lints it — aube stays byte-for-byte untouched.
#
# BLIND SPOT hawk cannot see: two crates OUTSIDE this workspace consume
# workspace members — crates/nub-native (own workspace) uses nub-cache-key, and
# crates/nub-phantom (own workspace, the eval tool) uses nub-phantom-scan +
# nub-phantom-core. Items they need look dead/over-public to hawk; the
# [[override]] entries below pin them. Before applying any future `--fix`,
# verify both consumers still build:
#   cargo check --manifest-path crates/nub-phantom/Cargo.toml
#   cargo check --manifest-path crates/nub-native/Cargo.toml

[[production]]
package = "nub-cli"
bin = "nub"
reason = "the shipped nub CLI binary"

[[feature-profile]]
name = "all"
all-features = true

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_cache_key"
item = "cache_key"
level = "allow"
reason = "called by crates/nub-native (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_core"
item = "pm::shim::SHIM_NAMES"
level = "allow"
reason = "used by the Windows-only test pm_shim_windows.rs (not compiled on a non-Windows analysis host)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_core"
item = "pm::shim::install_shims_into"
level = "allow"
reason = "used by the Windows-only test pm_shim_windows.rs (not compiled on a non-Windows analysis host)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_core"
item = "pm::shim::InstalledShim::name"
level = "allow"
reason = "used by the Windows-only test pm_shim_windows.rs (not compiled on a non-Windows analysis host)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_core"
item = "pm::shim::InstalledShim::path"
level = "allow"
reason = "used by the Windows-only test pm_shim_windows.rs (not compiled on a non-Windows analysis host)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_core"
item = "extract::Occurrence::kind"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "classify::classify"
level = "allow"
reason = "called by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "classify::Finding::verdict"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "classify::Finding::package"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "classify::Finding::specifiers"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "classify::Finding::is_subpath_adapter"
level = "allow"
reason = "called by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "graph::walk"
level = "allow"
reason = "called by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "graph::Walk::references"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "graph::Walk::files_analyzed"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "graph::Walk::unresolved_relative"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "manifest::Manifest::name"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "manifest::Manifest::entry_points"
level = "allow"
reason = "read by crates/nub-phantom (separate workspace; invisible to hawk)"

[[override]]
lint = "hawk::unnecessary_public"
crate = "nub_phantom_scan"
item = "manifest::Manifest::parse"
level = "allow"
reason = "called by crates/nub-phantom (separate workspace; invisible to hawk)"