Skip to content

chore: specify license in Cargo.toml#69

Merged
shekohex merged 1 commit into
shekohex:masterfrom
boxdot:master
Sep 1, 2025
Merged

chore: specify license in Cargo.toml#69
shekohex merged 1 commit into
shekohex:masterfrom
boxdot:master

Conversation

@boxdot

@boxdot boxdot commented Sep 1, 2025

Copy link
Copy Markdown
Contributor

In particular, it makes cargo deny happy.

@shekohex
shekohex merged commit 3c0ce45 into shekohex:master Sep 1, 2025
4 of 5 checks passed
@shekohex

shekohex commented Sep 1, 2025

Copy link
Copy Markdown
Owner

Thank you!

ThibautMelen added a commit to supernovae-st/qrcode-ai-scanner that referenced this pull request Jul 5, 2026
…cense clarify

Verify-before-file killed the "escalate upstream" plan (Q6): primary-source
research showed all three findings need zero upstream action.

- adler RUSTSEC-2025-0056 + futures-util 0.3.29 (yanked) were stale-lockfile
  artifacts: targeted `cargo update -p futures-util@0.3.29 -p backtrace`
  moves backtrace 0.3.69 -> 0.3.76 (miniz_oxide 0.8 / adler2) and futures
  to 0.3.32. adler leaves the graph entirely.
- allo-isolate has been Apache-2.0 all along (repo LICENSE; metadata fix
  merged upstream in shekohex/allo-isolate#69, unreleased) -> [[licenses.clarify]]
  pins the SPDX expression until a 0.1.28 ships.
- unicode-ident 1.0.12 -> 1.0.24: same stale-lock class (Unicode-DFS-2016
  predates the Unicode-3.0 relicense already on the allow list).

cargo deny advisories+licenses: workspace ok · flutter tree ok.

Co-Authored-By: Nika 🦋 <nika@supernovae.studio>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants