@bluejekyll @Gankra AFAIK cargo-deny evaluates bans on the final resolved dependency tree of the crate you applied it to, so if it's feature-flagged to not be present in your project the ban won't complain about the optional dependency in a library you use.