A deny.toml without an [advisories] section will still check the RustSec when running cargo deny check advisories. This is great and the correct behaviour imo, but it would be good to document the default value for all configuration option and afaict it is not.

Thanks! :)