mirror of
https://github.com/bevyengine/bevy
synced 2024-11-10 07:04:33 +00:00
Update deny license to remove MPL as an allowed license (#2327)
# Objective - MPL should not be an authorised license for all crates ## Solution - Add exception for MPL for wgpu and hexasphere - Remove security issue for a crate we don't depend on anymore
This commit is contained in:
parent
5b0f40f3f1
commit
19799b8d94
1 changed files with 20 additions and 2 deletions
22
deny.toml
22
deny.toml
|
@ -6,7 +6,6 @@ unmaintained = "deny"
|
|||
yanked = "deny"
|
||||
notice = "deny"
|
||||
ignore = [
|
||||
"RUSTSEC-2020-0016", # net2 deprecated - https://github.com/deprecrated/net2-rs/commit/3350e3819adf151709047e93f25583a5df681091
|
||||
"RUSTSEC-2020-0056", # stdweb unmaintained - https://github.com/koute/stdweb/issues/403
|
||||
"RUSTSEC-2021-0047", # security issue - https://github.com/gnzlbg/slice_deque/issues/90
|
||||
]
|
||||
|
@ -23,10 +22,29 @@ allow = [
|
|||
"0BSD",
|
||||
"BSD-2-Clause",
|
||||
"CC0-1.0",
|
||||
"MPL-2.0",
|
||||
]
|
||||
default = "deny"
|
||||
|
||||
[[licenses.exceptions]]
|
||||
allow = ["MPL-2.0"]
|
||||
name = "wgpu-core"
|
||||
version = "0.8"
|
||||
|
||||
[[licenses.exceptions]]
|
||||
allow = ["MPL-2.0"]
|
||||
name = "wgpu-types"
|
||||
version = "0.8"
|
||||
|
||||
[[licenses.exceptions]]
|
||||
allow = ["MPL-2.0"]
|
||||
name = "wgpu"
|
||||
version = "0.8"
|
||||
|
||||
[[licenses.exceptions]]
|
||||
allow = ["MPL-2.0"]
|
||||
name = "hexasphere"
|
||||
version = "3.4"
|
||||
|
||||
[[licenses.clarify]]
|
||||
name = "stretch"
|
||||
expression = "MIT"
|
||||
|
|
Loading…
Reference in a new issue