deny.toml

[licenses]
version = 2

# We want really high confidence when inferring licenses from text
confidence-threshold = 0.93

# Licenses that are OK but currently unused are commented to prevent a warning
allow = [
    "Apache-2.0",
    #"BSD-2-Clause",
    "BSD-3-Clause",
    #"BSL-1.0",
    #"CC0-1.0",
    "ISC",
    "MIT",
    "OpenSSL",
    "Unicode-DFS-2016",
    "Unlicense",
    #"Zlib"
]

exceptions = [ { allow = [ "MPL-2.0" ], name = "webpki-roots" } ]

[bans]
multiple-versions = "deny"
wildcards = "deny"

skip = [
    # many crates still use syn v1
    "syn@1",

    # tabled uses an older version of heck
    "heck@0.4.1",
]

skip-tree = [
    { crate = "windows-sys" },
    # aws-smithy-runtime uses many older dependencies
    { crate = "aws-smithy-runtime@1.6.2" },
]

# https://github.com/hsivonen/encoding_rs The non-test code that isn't generated from the WHATWG data in this crate is
# under Apache-2.0 OR MIT. Test code is under CC0.
[[licenses.clarify]]
name = "encoding_rs"
version = "*"
expression = "(Apache-2.0 OR MIT) AND BSD-3-Clause"
license-files = [
    { path = "COPYRIGHT", hash = 0x39f8ad31 }
]

[[licenses.clarify]]
name = "webpki"
expression = "ISC"
license-files = [
    { path = "LICENSE", hash = 0x001c7e6c },
]

[[licenses.clarify]]
name = "rustls-webpki"
expression = "ISC"
license-files = [
    { path = "LICENSE", hash = 0x001c7e6c },
]

[[licenses.clarify]]
name = "ring"
expression = "MIT AND ISC AND OpenSSL"
license-files = [
    { path = "LICENSE", hash = 0xbd0eed23 },
]

[sources]
# Deny crates from unknown registries or git repositories.
unknown-registry = "deny"
unknown-git = "deny"