deny.toml

Rama main · réplica de lectura del repositorio original.

# Configuration documentation:
#   https://embarkstudios.github.io/cargo-deny/index.html

[advisories]
yanked = "deny"
git-fetch-with-cli = true
ignore = [
  "RUSTSEC-2023-0071", # from rsa, transitive dep of sqlx
  "RUSTSEC-2021-0139", # from ansi_term, transitive dep of vrl
  "RUSTSEC-2024-0370", # we need it even it is no longer maintained
  "RUSTSEC-2024-0384", # from instant, dep of parking_lot
  "RUSTSEC-2024-0388", # from derivative, dep of vrl
  "RUSTSEC-2024-0421", # from idna, transitive dep of vrl
  "RUSTSEC-2024-0436", # from paste, transitive dep of datafusion
  "RUSTSEC-2024-0437", # from protobuf, transitive dep of prometheus
]

[licenses]
private = { ignore = true }

exceptions = [
    # We should probably NOT bundle CA certs but use the OS ones.
    { name = "webpki-roots", allow = ["MPL-2.0","CDLA-Permissive-2.0"] },
    { name = "webpki-root-certs", allow = ["CDLA-Permissive-2.0"] }, # transitive dep via rustls-platform-verifier
    { name = "openobserve", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-common", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-grpc", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-http", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-ingest", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-management", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-pipelines", allow = ["AGPL-3.0"] },
    { name = "openobserve-api-search", allow = ["AGPL-3.0"] },
    { name = "openobserve-builtins", allow = ["AGPL-3.0"] },
    { name = "common", allow = ["AGPL-3.0"] },
    { name = "openobserve-core", allow = ["AGPL-3.0"] },
    { name = "openobserve-node", allow = ["AGPL-3.0"] },
    { name = "openobserve-jobs", allow = ["AGPL-3.0"] },
    { name = "openobserve-mcp", allow = ["AGPL-3.0"] },
    { name = "openobserve-org-storage", allow = ["AGPL-3.0"] },
    { name = "openobserve-sourcemaps", allow = ["AGPL-3.0"] },
    { name = "openobserve-tls", allow = ["AGPL-3.0"] },
    { name = "transform", allow = ["AGPL-3.0"] },
    { name = "super_cluster_queue", allow = ["AGPL-3.0"] },
    { name = "search", allow = ["AGPL-3.0"] },
    { name = "openobserve-cipher", allow = ["AGPL-3.0"] },
    { name = "db", allow = ["AGPL-3.0"] },
    { name = "promql", allow = ["AGPL-3.0"] },
    { name = "audit", allow = ["AGPL-3.0"] },
    { name = "search_service", allow = ["AGPL-3.0"] },
    { name = "usage_reporting", allow = ["AGPL-3.0"] },
    { name = "vortex", allow = ["AGPL-3.0"] },
    { name = "vortex-datafusion", allow = ["AGPL-3.0"] },
    { name = "metrics_index", allow = ["AGPL-3.0"] },
    { name = "config", allow = ["AGPL-3.0"] },
    { name = "infra", allow = ["AGPL-3.0"] },
    { name = "ingester", allow = ["AGPL-3.0"] },
    { name = "wal", allow = ["AGPL-3.0"] },
    { name = "proto", allow = ["AGPL-3.0"] },
    { name = "flight", allow = ["AGPL-3.0"] },
    { name = "tantivy_utils", allow = ["AGPL-3.0"] },
    { name = "report_server", allow = ["AGPL-3.0"] },
    { name = "web", allow = ["AGPL-3.0"] },
    { name = "arrayref", allow = ["BSD-2-Clause"] },
    { name = "mach", allow = ["BSD-2-Clause"] },
    { name = "fastdivide", allow = ["zlib-acknowledgement"] },
    { name = "foldhash", allow = ["Zlib"] },
    { name = "adler32", allow = ["Zlib"] },
    { name = "libz-rs-sys", allow = ["Zlib"] },
    { name = "libz-rs", allow = ["Zlib"] },
    { name = "zlib-rs", allow = ["Zlib"] },
    # These two are transitive deps of vrl via dep rustyline.
    # However, rustyline is needed only when we enable feature cli
    # which we haven't. Probably in Cargo.lock due to old code, need
    # to take a look and remove.
    { name = "clipboard-win", allow = ["BSL-1.0"] },
    { name = "error-code", allow = ["BSL-1.0"] },
    { name = "base16", allow = ["CC0-1.0"] },
    { name = "tiny-keccak", allow = ["CC0-1.0"] },
    { name = "ring", allow = ["BSD-4-Clause", "OpenSSL"] },
    { name = "inferno", allow = ["CDDL-1.0"] },
    { name = "libbz2-rs-sys", allow = ["bzip2-1.0.6"] },
    { name = "aws-lc-sys", allow = ["OpenSSL"] },
    { name = "borrow-or-share", allow = ["MIT-0"] },
]

allow = [
    "Apache-2.0",
    "Apache-2.0 WITH LLVM-exception",
    "MPL-2.0",
    "MIT",
    "BSD-3-Clause", # OSI + fsf free
    "Unicode-3.0", # OSI
    "ISC", # OSI + fsf free
    "BSL-1.0",
    "CC0-1.0",
    "0BSD", # OSI approved - BSD Zero Clause License
]

[[licenses.clarify]]
name = "ring"
expression = "BSD-4-Clause AND ISC AND MIT AND OpenSSL"
license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]

[sources.allow-org]
github = ["openobserve", "apache"]

[sources]
allow-git = ["https://github.com/mattsse/chromiumoxide"]