diff --git a/deny.toml b/deny.toml index 87ca099..143c1c9 100644 --- a/deny.toml +++ b/deny.toml @@ -11,7 +11,6 @@ multiple-versions = "allow" # We want really high confidence when inferring licenses from text confidence-threshold = 0.93 allow = [ - "Apache-1.1", "Apache-2.0", "BSL-1.0", "BSD-1-Clause", @@ -19,39 +18,41 @@ allow = [ "BSD-3-Clause", "0BSD", "CC0-1.0", - "WTFPL", - "Fair", - "Intel", "ISC", "MIT-0", "MIT", - "MIT-Modern-Variant", - "MulanPSL-2.0", - "Multics", - "Naumen", - "PHP-3.01", - "PostgreSQL", - "Python-2.0", - "OFL-1.1", - "MirOS", "Unlicense", "Unicode-DFS-2016", - "UPL-1.0", - "NCSA", "Zlib", - "AFL-2.1", - "OpenSSL", - "ISC", - "W3C-20150513", +# As stated here https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html#spdx-identifiers +# 3.11 versions of SPDX License List was used and below licenses are not included there. +# They are commented to avoid "[license-not-encountered]" warnings. +# "Apache-1.1", +# "WTFPL", +# "Fair", +# "Intel", +# "MIT-Modern-Variant", +# "MulanPSL-2.0", +# "Multics", +# "Naumen", +# "PHP-3.01", +# "PostgreSQL", +# "Python-2.0", +# "OFL-1.1", +# "MirOS", +# "UPL-1.0", +# "NCSA", +# "AFL-2.1", ] exceptions = [ { allow = ["OpenSSL"], crate = "ring" }, - { allow = ["CC-BY-SA-3.0"], crate = "ssi-contexts" }, + { allow = ["OpenSSL"], crate = "aws-lc-sys" }, { allow = ["MPL-2.0"], crate = "bitmaps" }, - { allow = ["MPL-2.0"], crate = "webpki-roots" }, - { allow = ["MPL-2.0"], crate = "sized-chunks" }, + { allow = ["MPL-2.0", "W3C-20150513", "CC-BY-SA-3.0"], crate = "ssi-contexts" }, { allow = ["MPL-2.0"], crate = "im" }, + { allow = ["MPL-2.0"], crate = "webpki-roots" }, + { allow = ["CC-BY-SA-3.0", "MPL-2.0"], crate = "sized-chunks" }, ] # Sigh