Files
lightcraft/deny.toml
T
Andrew FrahnandClaude Opus 5.5 6cbc0eb5a9 Phase 0: configurable brand, MIT licence, plan/ and Immich tracker
- brand.toml is the only place the product name lives; every crate and app
  reads it through dac-brand (env vars with legacy fallback, settings folder
  with copy-only migration, default library, preset extensions, i18n {app})
- cargo xtask brand check|test, run|install|package, docs, rename-crates,
  deny and immich; packaging files are templates rendered from brand.toml
- icons regenerated from brand/icon.svg; upstream branding removed
- MIT licence (segment and fetch stay Apache-2.0); cargo deny licence policy
- clean-room rules in AGENTS.md/CLAUDE.md; docs/upstream-merge.md
- plan/ rebuilt and committed; parity tracker reopens Classic rows, adds
  PLAN.md section 2 rows and the IMM Immich section; plan/immich.md and a
  pinned Immich test server

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-10 10:30:06 +11:00

44 lines
1.3 KiB
TOML

# `cargo deny check licenses` (run by `cargo xtask ci` and the CI workflow): only permissive licences may
# reach the build, so a GPL/LGPL/AGPL/MPL dependency can't arrive silently (PLAN_phase_0.md §0.4.6).
# The workspace is MIT; crates/segment and crates/fetch stay Apache-2.0 (both allowed below).
[graph]
all-features = true
[licenses]
version = 2
# Everything not listed here is denied, GPL, LGPL, AGPL and MPL included.
allow = [
"MIT",
"MIT-0",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"ISC",
"Zlib",
"Unicode-3.0",
"CC0-1.0",
# Permissive, non-copyleft licences of existing dependencies (not on PLAN.md's original list):
"BSL-1.0", # Boost (clipboard-win, error-code: Windows clipboard)
"OFL-1.1", # epaint_default_fonts (egui default fonts)
"Ubuntu-font-1.0", # epaint_default_fonts
"IJG", # jpeg-encoder (derived from libjpeg)
"NCSA", # libfuzzer-sys (LLVM libFuzzer)
"CDLA-Permissive-2.0", # Mozilla CA root data (webpki-roots)
]
confidence-threshold = 0.9
# Workspace crates are checked like any other (publish = false must not exempt them).
[licenses.private]
ignore = false
[bans]
multiple-versions = "allow"
[advisories]
[sources]
unknown-registry = "deny"
unknown-git = "deny"