# cargo-deny configuration. CI runs `cargo deny check licenses` only:
# advisories are already covered by the `cargo audit` job, and bans /
# duplicate-version policing is not a goal of this project.
#
# The allow-list is deliberately narrow -- exactly the licences present in
# the current graph. A dependency introducing a new licence fails CI so the
# licence is reviewed (and, if accepted, added here together with the notice
# regenerated by scripts/generate-third-party-licenses.sh) rather than
# shipped unnoticed inside a statically linked binary.
[]
= true
[]
# Every crate reachable from the manifest, dev- and build-dependencies
# included: the notice file covers the shipped subset, this gate covers the
# whole graph so a copyleft dependency cannot slip into the tree unnoticed.
= [
"Apache-2.0",
"BSD-2-Clause",
"BSD-3-Clause",
"MIT",
"Unicode-3.0",
"Unicode-DFS-2016",
"Unlicense",
"Zlib",
]
[]
# This crate is MIT-licensed and published from this repository; it does not
# need to satisfy its own allow-list.
= true