Or even stronger

    #![forbid(unsafe_code)]

Then it can't be `#[allow()]`ed.

There's also things like `cargo gieger` that will tell you how much unsafe code your dependencies have.