diff --git a/crates/oyster/Cargo.toml b/crates/oyster/Cargo.toml
index 9204084..1b34adb 100644
--- a/crates/oyster/Cargo.toml
+++ b/crates/oyster/Cargo.toml
@@ -5,6 +5,6 @@ edition = "2021"
 license.workspace = true
 
 [dependencies]
-oyster_lineedit = { path = "../oyster_lineedit" }
-oyster_parser = { path = "../oyster_parser" }
-oyster_runtime = { path = "../oyster_runtime" }
+oyster_lineedit = { version = "0.0.0", path = "../oyster_lineedit" }
+oyster_parser = { version = "0.0.0", path = "../oyster_parser" }
+oyster_runtime = { version = "0.0.0", path = "../oyster_runtime" }
diff --git a/crates/oyster_builtin_proc/Cargo.toml b/crates/oyster_builtin_proc/Cargo.toml
index ba620a9..e51c192 100644
--- a/crates/oyster_builtin_proc/Cargo.toml
+++ b/crates/oyster_builtin_proc/Cargo.toml
@@ -16,4 +16,4 @@ quote = { version = "^1.0.21", default-features = false }
 syn = { version = "^1.0.102", default-features = false, features = [ "full" ] }
 
 [dev-dependencies]
-oyster_runtime = { path = "../oyster_runtime" }
+oyster_runtime = { version = "0.0.0", path = "../oyster_runtime" }
diff --git a/crates/oyster_runtime/Cargo.toml b/crates/oyster_runtime/Cargo.toml
index bb8622a..65274f6 100644
--- a/crates/oyster_runtime/Cargo.toml
+++ b/crates/oyster_runtime/Cargo.toml
@@ -8,8 +8,8 @@ license.workspace = true
 doctest = false
 
 [dependencies]
-oyster_builtin_proc = { path = "../oyster_builtin_proc" }
-oyster_parser = { path = "../oyster_parser" }
+oyster_builtin_proc = { version = "0.0.0", path = "../oyster_builtin_proc" }
+oyster_parser = { version = "0.0.0", path = "../oyster_parser" }
 thiserror = "1.0.35"
 
 [dependencies.nix]
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 0000000..9b606db
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,27 @@
+[advisories]
+db-path = "~/.cargo/advisory-db"
+db-urls = ["https://github.com/rustsec/advisory-db"]
+vulnerability = "deny"
+unmaintained = "deny"
+yanked = "deny"
+notice = "deny"
+
+[licenses]
+unlicensed = "deny"
+copyleft = "deny"
+allow = [
+    "Apache-2.0",
+    "MIT",
+]
+default = "deny"
+
+[bans]
+multiple-versions = "deny"
+wildcards = "deny"
+highlight = "all"
+
+[sources]
+unknown-registry = "deny"
+unknown-git = "deny"
+allow-registry = ["https://github.com/rust-lang/crates.io-index"]
+allow-git = []
diff --git a/flake.nix b/flake.nix
index a455eca..e018063 100644
--- a/flake.nix
+++ b/flake.nix
@@ -47,6 +47,7 @@
 
         devShell = pkgs.mkShell {
           nativeBuildInputs = with pkgs; [
+            cargo-deny
             toolchain
           ];
         };