...

Text file src/github.com/linkerd/linkerd2/deny.toml

Documentation: github.com/linkerd/linkerd2

     1targets = [
     2    { triple = "x86_64-unknown-linux-gnu" },
     3    { triple = "aarch64-unknown-linux-gnu" },
     4    { triple = "armv7-unknown-linux-gnu" },
     5]
     6
     7[advisories]
     8db-path = "~/.cargo/advisory-db"
     9db-urls = ["https://github.com/rustsec/advisory-db"]
    10vulnerability = "deny"
    11unmaintained = "warn"
    12yanked = "deny"
    13notice = "warn"
    14ignore = []
    15
    16[licenses]
    17unlicensed = "deny"
    18allow = ["Apache-2.0", "BSD-2-Clause", "BSD-3-Clause", "ISC", "MIT"]
    19deny = []
    20copyleft = "deny"
    21allow-osi-fsf-free = "neither"
    22default = "deny"
    23confidence-threshold = 0.8
    24exceptions = [
    25    { allow = [
    26        "ISC",
    27        "MIT",
    28        "OpenSSL",
    29    ], name = "ring", version = "*" },
    30
    31    # The Unicode-DFS--2016 license is necessary for unicode-ident because they
    32    # use data from the unicode tables to generate the tables which are
    33    # included in the application. We do not distribute those data files so
    34    # this is not a problem for us. See https://github.com/dtolnay/unicode-ident/pull/9/files
    35    # for more details.
    36    { allow = [
    37        "MIT",
    38        "Apache-2.0",
    39        "Unicode-DFS-2016",
    40    ], name = "unicode-ident" },
    41    { allow = [
    42        "Zlib",
    43    ], name = "adler32" },
    44]
    45
    46[[licenses.clarify]]
    47name = "ring"
    48version = "*"
    49expression = "MIT AND ISC AND OpenSSL"
    50license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
    51
    52[bans]
    53multiple-versions = "deny"
    54# Wildcard dependencies are used for all workspace-local crates.
    55wildcards = "allow"
    56highlight = "all"
    57deny = []
    58skip = [
    59    # `rustls-pemfile` and `k8s-openapi` depend on versions of `base64` that
    60    # have diverged significantly.
    61    { name = "base64" },
    62    # syn v2 has been released and some libraries are slower to adopt it
    63    { name = "syn", version = "1.0" },
    64    # `tower-http` (a transitive dep via `kubert`) depends on v2.x of `bitflags`,
    65    # while pretty much the entire rest of the world is still on v1.x
    66    { name = "bitflags", version = "1.0" },
    67    # https://github.com/hawkw/matchers/pull/4
    68    { name = "regex-automata", version = "0.1" },
    69    { name = "regex-syntax", version = "0.6" },
    70    # Pending hyper upgrade to 1.0
    71    { name = "socket2" },
    72]
    73skip-tree = [
    74    # `serde_json` and `h2` depend on diverged versions of `indexmap` (2.0.x and
    75    # 1.9.x, respectively)
    76    { name = "indexmap" },
    77]
    78
    79[sources]
    80unknown-registry = "deny"
    81unknown-git = "deny"
    82allow-registry = ["https://github.com/rust-lang/crates.io-index"]
    83
    84[sources.allow-org]
    85github = []

View as plain text