coreutils/deny.toml at main · uutils/coreutils · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
# spell-checker:ignore SSLeay RUSTSEC

# This section is considered when running `cargo deny check advisories`
# More documentation for the advisories section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
[advisories]
db-path = "~/.cargo/advisory-db"
db-urls = ["https://github.com/rustsec/advisory-db"]
version = 2
yanked = "warn"
ignore = [
  #"RUSTSEC-0000-0000",
]

# This section is considered when running `cargo deny check licenses`
# More documentation for the licenses section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
[licenses]
version = 2
allow = [
  "MIT",
  "Apache-2.0",
  "ISC",
  "BSD-2-Clause",
  "BSD-3-Clause",
  "CC0-1.0",
  "Unicode-3.0",
  "Zlib",
  "MPL-2.0",
]
confidence-threshold = 0.8

[[licenses.clarify]]
name = "ring"
# SPDX considers OpenSSL to encompass both the OpenSSL and SSLeay licenses
# https://spdx.org/licenses/OpenSSL.html
# ISC - Both BoringSSL and ring use this for their new files
# MIT - "Files in third_party/ have their own licenses, as described therein. The MIT
# license, for third_party/fiat, which, unlike other third_party directories, is
# compiled into non-test libraries, is included below."
# OpenSSL - Obviously
expression = "ISC AND MIT AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

# This section is considered when running `cargo deny check bans`.
# More documentation about the 'bans' section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
[bans]
multiple-versions = "deny"
wildcards = "allow"
highlight = "all"

# For each duplicate dependency, indicate the name of the dependency which
# introduces it.
# spell-checker: disable
skip = [
  # various crates
  { name = "windows-sys", version = "0.59.0" },
  # various crates
  { name = "windows-sys", version = "0.60.2" },
  # parking_lot_core
  { name = "windows-targets", version = "0.52.6" },
  # windows-targets
  { name = "windows_aarch64_gnullvm", version = "0.52.6" },
  # windows-targets
  { name = "windows_aarch64_msvc", version = "0.52.6" },
  # windows-targets
  { name = "windows_i686_gnu", version = "0.52.6" },
  # windows-targets
  { name = "windows_i686_gnullvm", version = "0.52.6" },
  # windows-targets
  { name = "windows_i686_msvc", version = "0.52.6" },
  # windows-targets
  { name = "windows_x86_64_gnu", version = "0.52.6" },
  # windows-targets
  { name = "windows_x86_64_gnullvm", version = "0.52.6" },
  # windows-targets
  { name = "windows_x86_64_msvc", version = "0.52.6" },
  # kqueue-sys, onig
  { name = "bitflags", version = "1.3.2" },
  # ansi-width
  { name = "unicode-width", version = "0.1.13" },
  # filedescriptor, utmp-classic
  { name = "thiserror", version = "1.0.69" },
  # thiserror
  { name = "thiserror-impl", version = "1.0.69" },
  # bindgen
  { name = "itertools", version = "0.13.0" },
  # ordered-multimap
  { name = "hashbrown", version = "0.14.5" },
  # string-interner
  { name = "hashbrown", version = "0.15.5" },
  # cexpr (via bindgen)
  { name = "nom", version = "7.1.3" },
  # const-random-macro, rand_core
  { name = "getrandom", version = "0.2.15" },
  # num-bigint, num-prime, phf_generator
  { name = "rand", version = "0.8.5" },
  # rand
  { name = "rand_chacha", version = "0.3.1" },
  # rand
  { name = "rand_core", version = "0.6.4" },
  # utmp-classic
  { name = "zerocopy", version = "0.7.35" },
  # zerocopy
  { name = "zerocopy-derive", version = "0.7.35" },
  # hashbrown
  { name = "foldhash", version = "0.1.5" },
  # keccak, sha1, sha2
  { name = "cpufeatures", version = "0.2.17" },
  # various crates
  { name = "digest", version = "0.10.7" },
  # digest
  { name = "crypto-common", version = "0.1.7" },
  # digest
  { name = "block-buffer", version = "0.10.4" },
  # parse_datetime
  { name = "winnow", version = "0.7.15" },
  # parking_lot_core
  { name = "redox_syscall", version = "0.5.18" },
]
# spell-checker: enable

# This section is considered when running `cargo deny check sources`.
# More documentation about the 'sources' section can be found here:
# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html

[sources]
unknown-registry = "warn"
unknown-git = "warn"
allow-registry = ["https://github.com/rust-lang/crates.io-index"]
allow-git = []