1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
# cargo-deny configuration for the fiscal-rs workspace.
# Run: cargo deny check
[]
# Licenses verified against Cargo.lock as of workspace snapshot.
# Key crates and their licenses:
# MIT/Apache-2.0 dual: serde, chrono, thiserror, quick-xml, sha1, base64,
# openssl (crate), rand, regex, bitflags, hashbrown,
# indexmap, memchr, libc, once_cell, syn, proc-macro2,
# quote, tempfile, rustix, semver, anyhow, log, ...
# MIT only: heck, insta, similar, diff, yansi, console, anstyle,
# clap, divan, proptest, rstest, pretty_assertions, ...
# Apache-2.0 only: unicode-ident (dual Apache-2.0/MIT-0; covered below)
# BSD-2-Clause: zerocopy, zerocopy-derive
# BSD-3-Clause: (none currently, kept for future transitive deps)
# ISC: (none currently, kept for future transitive deps)
# Unicode-3.0: unicode-ident (Unicode License Agreement v3)
# Unicode-DFS-2016: unicode-ident (Unicode data files)
# OpenSSL: openssl-sys (links against system libssl/libcrypto)
= [
"MIT",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Unicode-3.0",
"OpenSSL",
# MIT-0 is used by some unicode crates as a permissive fallback
"MIT-0",
# Zlib is used by several compression/utility crates
"Zlib",
# CDLA-Permissive-2.0 is used by webpki-root-certs (CA root certificates)
"CDLA-Permissive-2.0",
]
# Minimum confidence threshold for license detection. A score below this
# causes cargo-deny to treat the detection as uncertain and emit a warning.
= 0.8
[]
# Warn (not deny) when multiple versions of the same crate are resolved.
# This workspace currently has legitimate duplicates (e.g. windows-sys
# 0.59/0.60/0.61, getrandom 0.3/0.4) pulled in by transitive deps.
= "warn"
# Deny wildcard (`*`) version requirements in direct dependencies.
= "deny"
# Deny crates that are explicitly prohibited workspace-wide.
= []
[]
= ["https://github.com/rustsec/advisory-db"]
# Scope for unmaintained crate advisories: check workspace deps only.
= "workspace"
# Scope for unsound crate advisories: check all deps.
= "all"
# Warn on yanked crates.
= "warn"
[]
# Allow packages from crates.io and path-based workspace members only.
= "deny"
= "deny"
= ["https://github.com/rust-lang/crates.io-index"]
= []