Files
chanora/about.toml
T

63 lines
1.8 KiB
TOML

# cargo-about configuration for the Chanora workspace.
#
# Lists the SPDX licenses the workspace is permitted to depend on
# transitively. Each entry corresponds to a license that has been
# audited and accepted under DEC-020 (`docs/governance/
# product-decision-register.md`).
#
# Generate the human-readable inventory:
#
# cargo about generate \
# --output-file docs/security/license-inventory.html \
# about.hbs
# cargo about generate \
# --output-file docs/security/license-inventory.md \
# about-md.hbs
#
# The generated artefacts are checked into `docs/security/` and
# referenced from `docs/governance/legal-review-readiness.md` §5.
accepted = [
"Apache-2.0",
"MIT",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Zlib",
"0BSD",
"BSL-1.0",
"MPL-2.0",
"Unicode-DFS-2016",
"Unicode-3.0",
"CC0-1.0",
"CDLA-Permissive-2.0",
"OpenSSL",
]
# Targets we ship binaries for. Includes the three desktop targets,
# Android, and iOS so that platform-specific crates surface even on
# a Linux build host.
targets = [
"x86_64-unknown-linux-gnu",
"aarch64-linux-android",
"x86_64-pc-windows-msvc",
"aarch64-apple-darwin",
"aarch64-apple-ios",
]
# Build-script-only crates should not influence the redistributed
# license inventory.
ignore-build-dependencies = false
ignore-dev-dependencies = true
ignore-transitive-dependencies = false
# Per-crate license clarifications. Anchored on a manual read of
# the upstream LICENSE file when the crate ships a `license-file`
# entry rather than an SPDX `license` expression.
[allo-isolate.clarify]
license = "Apache-2.0"
[[allo-isolate.clarify.git]]
path = "LICENSE"
checksum = "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4"