nandi.uk
Fork of daniellemaywood.uk/gleam — Wasm codegen work
1# SPDX-License-Identifier: Apache-2.0
2# SPDX-FileCopyrightText: 2021 The Gleam contributors
3
4# https://embarkstudios.github.io/cargo-deny/checks/advisories/cfg.html
5[advisories]
6db-path = "~/.cargo/advisory-db"
7db-urls = ["https://github.com/rustsec/advisory-db"]
8
9# The `FIX-DEADLINE` lines are used by the test suite, and once the date
10# they specify has passed they will cause a deadline check test to fail. This
11# is to ensure that we do not forget to fix these.
12#
13[[advisories.ignore]]
14id = "RUSTSEC-2026-0173"
15reason = """
16proc-macro-error2 is currently unmaintained.
17https://rustsec.org/advisories/RUSTSEC-2024-0370
18
19At time of writing, it is used by a single transitive dependency.
20
21 $ cargo tree -i proc-macro-error2
22 proc-macro-error2 v2.0.1
23 └── i18n-embed-fl v0.9.2
24 └── age v0.11.3
25 └── gleam-core
26
27https://github.com/gleam-lang/gleam/issues/5829
28
29FIX-DEADLINE: 2026-10-08
30"""
31
32[[advisories.ignore]]
33id = "RUSTSEC-2025-0141"
34reason = """
35Bincode is currently unmaintained.
36https://rustsec.org/advisories/RUSTSEC-2025-0141.html
37
38We need to migrate to some other package.
39https://github.com/gleam-lang/gleam/issues/5827
40
41FIX-DEADLINE: 2026-10-08
42"""
43
44# https://embarkstudios.github.io/cargo-deny/checks/licenses/cfg.html
45[licenses]
46allow = [
47 "Apache-2.0",
48 "BSD-3-Clause",
49 "BSL-1.0",
50 "CC0-1.0",
51 "CDLA-Permissive-2.0",
52 "ISC",
53 "MIT",
54 "MPL-2.0",
55 "Unicode-3.0",
56 "Zlib",
57]
58confidence-threshold = 0.8
59
60[[licenses.clarify]]
61name = "ring"
62version = "*"
63expression = "MIT AND ISC AND OpenSSL"
64license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
65
66[licenses.private]
67ignore = false
68registries = []
69
70# https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.html
71[bans]
72multiple-versions = "allow"
73wildcards = "allow"
74highlight = "all"
75allow = []
76deny = []
77skip = []
78skip-tree = []
79
80# https://embarkstudios.github.io/cargo-deny/checks/sources/cfg.html
81[sources]
82unknown-registry = "deny"
83unknown-git = "deny"
84allow-registry = ["https://github.com/rust-lang/crates.io-index"]
85allow-git = [
86 # "https://github.com/gleam-lang/hexpm-rust",
87]
88
89[[licenses.clarify]]
90name = "encoding_rs"
91version = "*"
92expression = "(Apache-2.0 OR MIT) AND BSD-3-Clause"
93license-files = [
94 { path = "COPYRIGHT", hash = 0x39f8ad31 }
95]