deny.toml

# Configuration used for dependency checking with cargo-deny.
#
# For further details on all configuration options see:
# https://embarkstudios.github.io/cargo-deny/checks/cfg.html
targets = [{ triple = "x86_64-unknown-linux-musl" }]

# Deny all advisories unless explicitly ignored.
[advisories]
vulnerability = "deny"
unmaintained = "deny"
yanked = "deny"
notice = "deny"
ignore = [
  # TODO(#2353): Remove once chrono is updated.
  "RUSTSEC-2020-0159",
  "RUSTSEC-2020-0071",
  # TODO(#2421): Remove when no longer required.
  "RUSTSEC-2021-0127",
  # TODO(#2652): Remove when Wizer is updated.
  "RUSTSEC-2022-0016",
]

# Deny multiple versions unless explicitly skipped.
[bans]
multiple-versions = "allow"
wildcards = "allow"

# List of allowed licenses.
# For more detailed information see http://go/thirdpartylicenses.
[licenses]
allow = [
  "Apache-2.0",
  "Apache-2.0 WITH LLVM-exception",
  "BSD-3-Clause",
  "CC0-1.0",
  "ISC",
  "MIT",
  "MPL-2.0",
  "OpenSSL",
  "Zlib"
]
copyleft = "deny"

[[licenses.clarify]]
name = "ring"
expression = "MIT AND ISC AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 3171872035 }]

# See https://github.com/hsivonen/encoding_rs#licensing
[[licenses.clarify]]
name = "encoding_rs"
version = "*"
expression = "(Apache-2.0 OR MIT) AND BSD-3-Clause"
license-files = [{ path = "COPYRIGHT", hash = 972598577 }]

# See https://github.com/johannesvollmer/exrs/blob/c2f89e85af3f15477c2da52e08b6d71a2577ec0f/LICENSE.md
[[licenses.clarify]]
name = "exr"
version = "*"
expression = "BSD-3-Clause"
license-files = [{ path = "LICENSE.md", hash = 4032825156 }]