# cargo-about configuration for the Chanora workspace.
#
# Lists the SPDX licenses the workspace is permitted to depend on
# transitively. Each entry corresponds to a license that has been
# audited and accepted under DEC-020 (`docs/governance/
# product-decision-register.md`).
#
# Generate the human-readable inventory:
#
#     cargo about generate \
#         --output-file docs/security/license-inventory.html \
#         about.hbs
#     cargo about generate \
#         --output-file docs/security/license-inventory.md \
#         about-md.hbs
#
# The generated artefacts are checked into `docs/security/` and
# referenced from `docs/governance/legal-review-readiness.md` §5.

accepted = [
    "Apache-2.0",
    "MIT",
    "BSD-2-Clause",
    "BSD-3-Clause",
    "ISC",
    "Zlib",
    "0BSD",
    "BSL-1.0",
    "MPL-2.0",
    "Unicode-DFS-2016",
    "Unicode-3.0",
    "CC0-1.0",
    "CDLA-Permissive-2.0",
    "OpenSSL",
]

# Targets we ship binaries for. Includes the three desktop targets,
# Android, and iOS so that platform-specific crates surface even on
# a Linux build host.
targets = [
    "x86_64-unknown-linux-gnu",
    "aarch64-linux-android",
    "x86_64-pc-windows-msvc",
    "aarch64-apple-darwin",
    "aarch64-apple-ios",
]

# Build-script-only crates should not influence the redistributed
# license inventory.
ignore-build-dependencies = false
ignore-dev-dependencies = true
ignore-transitive-dependencies = false

# Per-crate license clarifications. Anchored on a manual read of
# the upstream LICENSE file when the crate ships a `license-file`
# entry rather than an SPDX `license` expression.
[allo-isolate.clarify]
license = "Apache-2.0"

[[allo-isolate.clarify.git]]
path = "LICENSE"
checksum = "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"