From 62c1b26b860fe4724623a141a2a8d8c12878afe7 Mon Sep 17 00:00:00 2001 From: Giang Minh Date: Fri, 20 Dec 2024 16:48:03 +0700 Subject: [PATCH] fix deny --- deny.toml | 63 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 deny.toml diff --git a/deny.toml b/deny.toml new file mode 100644 index 0000000..49ce9e2 --- /dev/null +++ b/deny.toml @@ -0,0 +1,63 @@ +# https://github.com/EmbarkStudios/cargo-deny +# +# cargo-deny checks our dependency tree for copy-left licenses, +# duplicate dependencies, and rustsec advisories (https://rustsec.org/advisories). +# +# Install: `cargo install cargo-deny` +# Check: `cargo deny check` or run `cargo_deny.sh`. + +# Note: running just `cargo deny check` without a `--target` can result in +# false positives due to https://github.com/EmbarkStudios/cargo-deny/issues/324 +targets = [ + { triple = "x86_64-unknown-linux-gnu" }, + { triple = "x86_64-unknown-linux-musl" }, + { triple = "aarch64-unknown-linux-gnu" }, + { triple = "arm-unknown-linux-gnueabihf" }, + { triple = "armv7-unknown-linux-gnueabihf" }, + { triple = "mips-unknown-linux-gnu" }, + { triple = "mips64-unknown-linux-gnuabi64" }, + { triple = "mips64el-unknown-linux-gnuabi64" }, + { triple = "mipsel-unknown-linux-gnu" }, + { triple = "aarch64-unknown-linux-musl" }, + { triple = "x86_64-apple-darwin" }, + { triple = "aarch64-apple-darwin" }, + { triple = "x86_64-pc-windows-gnu" }, + { triple = "x86_64-pc-windows-msvc" } +] + +[advisories] +vulnerability = "deny" +unmaintained = "warn" +yanked = "deny" +ignore = [ +] + +[bans] +multiple-versions = "allow" +wildcards = "allow" # at least until https://github.com/EmbarkStudios/cargo-deny/issues/241 is fixed +deny = [] + +skip = [] +skip-tree = [] + + +[licenses] +private = { ignore = true } +unlicensed = "allow" +allow-osi-fsf-free = "neither" +confidence-threshold = 0.92 # We want really high confidence when inferring licenses from text +copyleft = "deny" +allow = [ + "Apache-2.0 WITH LLVM-exception", # https://spdx.org/licenses/LLVM-exception.html + "Apache-2.0", # https://tldrlegal.com/license/apache-license-2.0-(apache-2.0) + "BSD-2-Clause", # https://tldrlegal.com/license/bsd-2-clause-license-(freebsd) + "BSD-3-Clause", # https://tldrlegal.com/license/bsd-3-clause-license-(revised) + "BSL-1.0", # https://tldrlegal.com/license/boost-software-license-1.0-explained + "CC0-1.0", # https://creativecommons.org/publicdomain/zero/1.0/ + "ISC", # https://tldrlegal.com/license/-isc-license + "MIT-0", # https://choosealicense.com/licenses/mit-0/ + "MIT", # https://tldrlegal.com/license/mit-license + "OpenSSL", # https://www.openssl.org/source/license.html - used on Linux + "Unicode-3.0", # https://spdx.org/licenses/Unicode-3.0.html + "Zlib", # https://tldrlegal.com/license/zlib-libpng-license-(zlib) +] \ No newline at end of file