diff --git a/deny.toml b/deny.toml index 63499975..453356db 100644 --- a/deny.toml +++ b/deny.toml @@ -1,27 +1,16 @@ [licenses] -# The lint level for crates which do not have a detectable license -unlicensed = "deny" - # List of explictly allowed licenses # See https://spdx.org/licenses/ for list of possible licenses # [possible values: any SPDX 3.7 short identifier (+ optional exception)]. -allow = ["MPL-2.0"] - -# List of explictly disallowed licenses -# See https://spdx.org/licenses/ for list of possible licenses -# [possible values: any SPDX 3.7 short identifier (+ optional exception)]. -deny = [] - -# The lint level for licenses considered copyleft -copyleft = "deny" - -# Blanket approval or denial for OSI-approved or FSF Free/Libre licenses -# * both - The license will only be approved if it is both OSI-approved *AND* FSF/Free -# * either - The license will be approved if it is either OSI-approved *OR* FSF/Free -# * osi-only - The license will be approved if is OSI-approved *AND NOT* FSF/Free -# * fsf-only - The license will be approved if is FSF/Free *AND NOT* OSI-approved -# * neither - The license will be denied if is FSF/Free *OR* OSI-approved -allow-osi-fsf-free = "either" +allow = [ + "Apache-2.0", + "BSD-2-Clause", + "BSD-3-Clause", + "EPL-2.0", + "MIT", + "MPL-2.0", + "Unicode-DFS-2016" +] # The confidence threshold for detecting a license from license text. # The higher the value, the more closely the license text must be to the @@ -48,16 +37,17 @@ allow = [ deny = [ # Each entry the name of a crate and a version range. If version is # not specified, all versions will be matched. - { name = "fuchsia-cprng" } + { crate = "fuchsia-cprng" } ] # Certain crates/versions that will be skipped when doing duplicate detection. skip = [ ] -# Similarly to `skip` allows you to skip certain crates during duplicate detection, -# unlike skip, it also includes the entire tree of transitive dependencies starting at -# the specified crate, up to a certain depth, which is by default infinite +# Similarly to `skip` allows you to skip certain crates during duplicate +# detection. Unlike skip, it also includes the entire tree of transitive +# dependencies starting at the specified crate, up to a certain depth, which is +# by default infinite. skip-tree = [ ]