1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
# cargo-deny configuration for vfa-tui
# Verified in CI via `cargo deny check` (see .github/workflows/vfa-tui-ci.yml).
# Schema: version 2 (the per-severity advisory keys `vulnerability`,
# `unmaintained`, and `notice` were removed by cargo-deny; vulnerabilities are
# always denied and other advisories surface as warnings unless ignored below).
[]
= [
"x86_64-unknown-linux-gnu",
"aarch64-unknown-linux-gnu",
"x86_64-apple-darwin",
"aarch64-apple-darwin",
"x86_64-unknown-linux-musl",
]
[]
= 2
# Keep a curated allow-list even if a given license isn't currently pulled in by
# any dependency — don't fail the gate just because an allowance is unused.
= "allow"
= [
"MIT",
"Apache-2.0",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Unicode-3.0",
"Unicode-DFS-2016",
"Zlib",
"BSL-1.0",
"CC0-1.0",
"OpenSSL",
# Weak (per-file) copyleft, used only by `nucleo-matcher` (the fuzzy-search
# engine). vfa-tui consumes it unmodified, so MPL-2.0 imposes no source
# obligation on this crate; allowing it is the standard, compliant choice.
"MPL-2.0",
]
= 0.8
[[]]
= "ring"
= "MIT AND ISC AND OpenSSL"
= [{ = "LICENSE", = 0xbd0eed23 }]
[]
= "warn"
= "allow"
[]
= 2
= "deny"
= []
[]
= "deny"
= "deny"
= []