summaryrefslogtreecommitdiff
path: root/maint/check_licenses
Commit message (Collapse)AuthorAgeFilesLines
* maint: Update check_license exceptions.Wesley Aptekar-Cassels2025-04-301-9/+0
| | | | | webpki have fixed their situation, and tinystr is now Unicode-3.0 licensed.
* maint: Allow CDLA-Permissive-2.0 license.Wesley Aptekar-Cassels2025-04-291-0/+1
| | | | | This seems to be compatible with our licenses, and is used by the webpki crates.
* arti-ureq: New library which integrates with ureqnield2025-04-091-0/+3
| | | | Fixes #1519
* Add permissions for aws-lc-* licensesNick Mathewson2025-03-041-0/+7
|
* maint: add 'Apache-2.0 AND ISC' as a recognized licenseSteven Engler2025-02-271-1/+3
| | | | | | | | | This is for ring >= v0.17.10 We currently use two ring versions in our Cargo.lock: - 0.16.20 (old non-standard license) - 0.17.11 (new license)
* maint/check_licenses: Acknowledge that we don't handle ORIan Jackson2025-01-201-1/+1
|
* maint/check_licenses: Instructions for what to do about MPLIan Jackson2025-01-201-1/+12
|
* maint/check_licenses: Add unicode-ident license to recognized list.Gabriela Moldovan2024-11-281-0/+2
| | | | | | | | `unicode-ident` recently changed their [license] from "(MIT OR Apache-2.0) AND Unicode-DFS-2016" to "(MIT OR Apache-2.0) AND Unicode-3.0". [license]: https://github.com/dtolnay/unicode-ident/commit/36cccb825aef6f334cfb57afc82a728c3d2d652f
* check_licences: Allow the ludicrous "Apache-2.0) OR MIT AND (MIT"Ian Jackson2024-10-301-0/+4
| | | | | | | | | Currently cargo-license mangles libm's Cargo.toml information very badly! And also our licence checker script is rather too stupid to do the boolean logic. I have a better licence checker elsewhere, in a personal project but ... it's GPL'd :-). https://salsa.debian.org/dgit-team/tag2upload-service-manager/-/blob/main/maint/check-licences?ref_type=heads
* maint: Remove exceptions for generational-arenaNick Mathewson2024-08-141-1/+0
| | | | | Now that it's gone, we no longer need to bless its MPL-2.0 usage or excuse it from cargo-audit.
* Update check_licenses for priority-queue and tinystrNick Mathewson2024-05-311-2/+2
|
* Remove note about option-ext statusNick Mathewson2024-04-021-1/+0
| | | | | They merged the suggested notice back May 2023: https://github.com/soc/option-ext/pull/4
* Remove check_licenses exception for rustls-webpkiNick Mathewson2024-04-021-1/+0
| | | | (They have declared their license as ISC, which is on our allow-list.)
* Add a check-license exception for tinystr.Nick Mathewson2023-12-041-0/+5
|
* Add BSL-1.0 license to permitted listNick Mathewson2023-11-021-0/+1
|
* tor-rtmock: Add priority-queue dependencyIan Jackson2023-10-031-0/+15
| | | | | | | | For our time provider we want a priority queue that lets us look up entries and delete them. std's Heap doesn't do that. priority-queue has the API we need and reasonable stats etc, and is maintained. It has some IMO-tolerable licence wrinkles.
* Check-licenses: Allow "MIT AND BSD-3-Clause"Nick Mathewson2023-09-051-0/+1
| | | | | | | | We have automatic support for "OR", but we can't do anything automated with AND, since the intersection of licenses can get complicated. So we just have to authorize the specific combinations that exist. This is used by matchit, which is used in the gotlou's examples.
* check_licenses: Whitelist for crates that may use LGPL-3.0-onlyMicah Elizabeth Scott2023-07-271-6/+18
| | | | | | | Narrows the previous check, allowing this particular LGPL only for the hashx and equix crates. Signed-off-by: Micah Elizabeth Scott <[email protected]>
* equix, hashx: Prepare for an initial LGPL releaseMicah Elizabeth Scott2023-07-271-3/+5
| | | | | | | This replaces the 'TODO' marker from earlier commits, using tevador's copyright and license (LGPL 3.0 only) for the hashx and equix crates. Signed-off-by: Micah Elizabeth Scott <[email protected]>
* Reimplement HashX in RustMicah Elizabeth Scott2023-07-271-0/+6
| | | | | | | | | | | | | | | | | This is a new pure Rust implementation of the HashX algorithm designed by tevador for Tor's onion service proof of work puzzle v1. HashX is a lightweight family of randomly generated hash functions. A seed, via blake2 and siphash, drives a program generation model which randomly selects opcodes and registers while following some constraints that avoid timing stalls or insufficient hash mixing. The execution of these hash funcions can be done using a pure Rust interpreter, or about 20x faster using a very simple just in time compiler based on the dynasm assembler crate. This has been implemented for x86_64 and aarch64. Signed-off-by: Micah Elizabeth Scott <[email protected]>
* maint/check_license: Make MPL-2.0 into an allow-listNick Mathewson2023-05-231-1/+22
| | | | | | | | | | | | | Previously we allowed this license unconditionally. But because of its non-self-enacting nature, we need the actual notice from its "exhibit A" to appear somewhere that says that it applies to all the relevant code. Therefore, we shouldn't take new MPL-2.0 dependencies without hand-checking them. (I am tentatively allowing option-ext, though, since we already have an indirect dependency on that crate via `directories`.) For more info, see https://gitlab.torproject.org/tpo/core/arti/-/issues/845
* allow rustls-webpki licensetrinity-1686a2023-05-081-0/+1
|
* check-licenses: Permit MPL-2.0Nick Mathewson2023-05-041-0/+1
| | | | | | | | The generational-arena crate is distributed under MPL-2.0, so we need to allow it. I believe that this license is fine and does not interfere with our code or our users; the reviewer should double-check.
* maint/check_licensse: Placate shellcheckIan Jackson2023-02-241-1/+1
| | | | | There's nothing wrong with the previous idiom since it's a trusted variable, but whatever.
* maint/check_licensse: Approve Zlib licenceIan Jackson2023-02-241-0/+1
| | | | | | | This is a very permissive BSD/MIT-like licence. I have reviewed the licence text and it is inoffensive. I want this for slotmap, in !1034
* maint/check_licensse: Honour CARGO variableIan Jackson2023-02-241-2/+8
| | | | Even if it contains spaces.
* maint/check_licensse: Do not discard actual errorIan Jackson2023-02-241-1/+1
| | | | This confused me while I was debugging the interaction with nailing-cargo.
* shell: use /usr/bin/env instead of absolute pathsEmil Engler2023-01-251-1/+1
| | | | | | | | | | This commit changes the shebang in all shell scripts from absolute paths (such as `/bin/bash` or `/usr/bin/python3`) to the `/usr/bin/env` binary with the accompanying interpreter as it's argument. The reason for this are as follows: - NixOS cannot work with absolute paths - BSD systems install their packages in /usr/local/bin
* check_licenses: List license for tinystrNick Mathewson2022-08-301-8/+1
|
* fix error running check_licensestrinity-1686a2022-08-131-1/+1
| | | | | | | | --version was removed in a recent update we use that to detected whether cargo-license is installed, now use --help instead
* Several typo fixes from `typos`.Nick Mathewson2022-07-271-1/+1
|
* Teach check_licenses to accept license on `unicode-ident`.Nick Mathewson2022-07-201-6/+20
| | | | | | | | | | The license there is `(MIT OR Apache-2.0) AND Unicode-DFS-2016`, which fine, but the existing shell script doesn't actually handle "AND" correctly. This commit adds a workaround for licenses that are "AND", and some comments about weaknesses in our (lack of) boolean expression parsing. This should fix CI.
* check_licenses: list new crates with manual license verificationNick Mathewson2022-05-311-1/+17
| | | | | | | | | | | | | | | Closes #462. Note that the license on `ring` is slightly problematic for some users, including as it does old the openssl license[^1], with advertising clause and all. That's not a blocker for us now, since `ring` is not a required dependency. But we wouldn't want `ring` to become a mandatory dependency because of this. [^1]: To make the situation even more complicated, modern openssl has relicensed under apache-2.0, but that doesn't necessarily help us, since ring took its code from boringssll, which forked from an older version of openssl.
* make almost all scripts use bash and set euo pipefailtrinity-1686a2022-05-251-1/+1
|
* Remove cargo-husky, and replace with manual instructionseta2022-05-101-1/+0
| | | | | | | | A build script reaching into your .git/hooks/ and modifying them nonconsensually was a bit of a horrifying concept, and also made it hard to build arti with the feature disabled. Remove this crate, and replace it with manual instructions on how to install the hooks in CONTRIBUTING.md.
* rename *.sh scripts to bare nameIan Jackson2022-02-181-0/+81
As per #309 Update all references. There is one remaining hit for git-grep '\.sh\b' namely "build.sh" in maint/reproducible_build, which I think is the build script for osxcross - ie, an external project.
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-26 19:59:27 +0000