Deny dependencies that don't pin an exact version #698
Open
Description
Is your feature request related to a problem? Please describe.
It would be great if cargo deny could be configured to disallow dependencies that aren't pinned to an exact version (e.g. =1.0.0
) for specific dependency groups.
Describe the solution you'd like
I'd like to be able to configure cargo-deny
to disallow non exact version specifiers for dev dependencies.