1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
# cargo-about configuration. Drives generation of
# THIRD-PARTY-LICENSES.md at release time. See
# https://embarkstudios.github.io/cargo-about/.
#
# Keep `accepted` aligned with `deny.toml` `[licenses].allow` — if a
# dependency arrives with a license not listed here, `cargo about
# generate` (invoked at release-build time) fails, forcing an explicit
# human decision before the dep can ship in our binary.
# License allowlist. Every transitive dependency of
# `git-remote-object-store-cli` must resolve to at least one license in
# this set. `AND`-joined licenses (e.g. `Apache-2.0 AND ISC` for ring)
# require every component to be accepted; `OR`-joined licenses require
# at least one.
= [
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-3-Clause",
"BSL-1.0",
"CC0-1.0",
# OSI-style permissive data license used by `webpki-root-certs` to
# cover the bundled certificate data (the crate code itself is
# Apache-2.0/MIT). Attribution-only; broadly compatible with
# Apache-2.0.
"CDLA-Permissive-2.0",
"ISC",
"MIT",
"MPL-2.0",
"Unicode-3.0",
"Zlib",
]
# Do not pull in build-script-only or dev-only deps; they do not ship
# in the binary we redistribute, so their attributions are not
# required.
= true
= true
# Every target we build release binaries for. cargo-about walks the
# dependency graph per target, so a Linux-only or Windows-only dep is
# still captured. Keep this in sync with the `build` matrix in
# .github/workflows/release.yml.
= [
"x86_64-unknown-linux-gnu",
"aarch64-unknown-linux-gnu",
"x86_64-unknown-linux-musl",
"aarch64-unknown-linux-musl",
"x86_64-unknown-freebsd",
"aarch64-apple-darwin",
"x86_64-pc-windows-msvc",
"aarch64-pc-windows-msvc",
]