oximg 0.9.0

High-performance image compression: library, CLI, and self-hostable server (PoC).
Documentation
# cargo-about config. Generates THIRD-PARTY-LICENSES.md — the attribution
# bundle shipped with the binary/crate to satisfy the BSD/MIT/Apache/IJG
# "reproduce the copyright notice and license text" obligation.
#
#   cargo about generate about.hbs -o THIRD-PARTY-LICENSES.md

# Licenses we accept in the shipped artifact. Mirrors deny.toml's allow-list
# plus IJG (mozjpeg / libjpeg-turbo decode path), which must be accepted here
# so its text is rendered rather than treated as an error.
accepted = [
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "MIT",
    "MIT-0",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Zlib",
    "BSL-1.0",
    "Unicode-3.0",
    "CC0-1.0",
    "Unlicense",
    "IJG",
    "MPL-2.0",
    "CDLA-Permissive-2.0",
]

# Dev-dependencies are not part of the shipped artifact.
ignore-dev-dependencies = true

# jpegli-sys vendors the whole libjxl tree, which carries its own
# LICENSE files (libjxl, vendored highway); which one cargo-about's
# scan happens to pick for the crate varies by environment, so the
# generated bundle flapped between runs (the scheduled CI check failed
# on a file that regenerated byte-identical locally). Pin the crate to
# its own root LICENSE — the text the committed bundle has always
# carried. The checksum is the crates.io tarball's file, so a crate
# update that changes the license fails loudly here instead of
# silently swapping text.
[jpegli-sys.clarify]
license = "BSD-3-Clause"

[[jpegli-sys.clarify.files]]
path = "LICENSE"
license = "BSD-3-Clause"
checksum = "2fbf612cf8db413c570f11b875cf96d89266c275b4712902e76d7375a1902624"