1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
# cargo-deny configuration. Run `cargo deny check` locally; CI runs it too.
# https://embarkstudios.github.io/cargo-deny/
[]
# diffier ships POSIX targets only. Restricting the graph keeps Windows-only
# crates out of the license and advisory reports for platforms we do not build.
= [
"aarch64-apple-darwin",
"x86_64-apple-darwin",
"x86_64-unknown-linux-gnu",
"x86_64-unknown-linux-musl",
"aarch64-unknown-linux-gnu",
]
= true
[]
= 2
= "deny"
# Only flag unmaintained crates we depend on directly. A transitively
# unmaintained crate is not something a pull request can act on.
= "workspace"
= []
[]
= 2
= 0.9
# Entries below cover licenses not currently in the graph but likely to arrive
# with a new dependency. Do not warn about the ones that go unused.
= "allow"
= [
"MIT",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Unlicense",
"Zlib", # foldhash
"BSL-1.0", # ryu, as an alternative to Apache-2.0
"Unicode-3.0", # unicode-ident
"Unicode-DFS-2016", # finl_unicode, wezterm-bidi
"MPL-2.0", # option-ext (via dirs); file-level copyleft, unmodified
"WTFPL", # terminfo (via ratatui)
]
[]
# Duplicate versions come in transitively and are not usually actionable in the
# pull request that surfaces them, so warn rather than fail the build.
= "warn"
= "deny"
[]
= "deny"
= "deny"