# Restricts the dependency tree to licenses whose obligations we can meet while
# conveying our binaries under MIT (see NOTICE.md).
#
# MPL-2.0's copyleft is per-file: it never reaches our sources. Shipping a binary
# that links it still obliges us to keep those crates' source available under the
# MPL and say where to get it (§3.2) — that duty comes from distributing, not
# from modifying. LGPL likewise permits linking into a differently-licensed work,
# subject to its notice and relink conditions.
[licenses]
allow = [
"0BSD",
"Apache-2.0",
"Apache-2.0 WITH LLVM-exception",
"BSD-2-Clause",
"BSD-3-Clause",
"BSL-1.0",
"CC0-1.0",
"CDLA-Permissive-2.0",
"ISC",
"LGPL-3.0",
"MIT",
"MPL-2.0",
"Unicode-3.0",
"Zlib",
]
confidence-threshold = 0.93