Merge branch 'cargo-deny' into master

Signed-off-by: Matthias Beyer <mail@beyermatthias.de>

4 files changed, 107 insertions, 0 deletions

diff --git a/.travis.yml b/.travis.yml
index 763c55c2..ff40aae1 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -79,6 +79,18 @@ matrix:
             - rustup component add clippy
           script:
             - cargo clippy --all --all-targets
+        - language: rust
+          rust: stable
+          name: cargo-deny
+          cache:
+            directories:
+              - /home/travis/.cargo
+          before_cache:
+            - rm -rf /home/travis/.cargo/registry
+          install:
+            - cargo install cargo-deny --force
+          script:
+            - cargo deny check Licenses
 
 
 addons:
diff --git a/deny.toml b/deny.toml
new file mode 100644
index 00000000..814c9f18
--- /dev/null
+++ b/deny.toml
@@ -0,0 +1,93 @@
+[advisories]
+vulnerability = "deny"
+unmaintained  = "deny"
+notice        = "deny"
+
+[bans]
+multiple-versions = "deny"
+deny = [ ]
+skip = [
+    # clap uses an older version of ansi_term
+    { name = "ansi_term", version = "=0.11.0" },
+]
+
+[licenses]
+unlicensed         = "deny"
+allow-osi-fsf-free = "either"
+copyleft           = "deny"
+
+# We want really high confidence when inferring licenses from text
+confidence-threshold = 0.93
+
+allow = [
+    "Apache-2.0",
+    "MIT",
+    "MPL-2.0",
+]
+
+exceptions = [
+    { name = "libimagutil"            ,  allow = ["LGPL-2.1"] },
+    { name = "libimagtimeui"          ,  allow = ["LGPL-2.1"] },
+    { name = "libimagerror"           ,  allow = ["LGPL-2.1"] },
+    { name = "libimagstore"           ,  allow = ["LGPL-2.1"] },
+    { name = "libimaginteraction"     ,  allow = ["LGPL-2.1"] },
+    { name = "libimagrt"              ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentrylink"       ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryurl"        ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentrytag"        ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryfilter"     ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentrygps"        ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryedit"       ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryview"       ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentrydatetime"   ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryutil"       ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentrycategory"   ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryref"        ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentrymarkdown"   ,  allow = ["LGPL-2.1"] },
+    { name = "libimagentryannotation" ,  allow = ["LGPL-2.1"] },
+    { name = "libimagbookmark"        ,  allow = ["LGPL-2.1"] },
+    { name = "libimagcalendar"        ,  allow = ["LGPL-2.1"] },
+    { name = "libimaghabit"           ,  allow = ["LGPL-2.1"] },
+    { name = "libimagnotes"           ,  allow = ["LGPL-2.1"] },
+    { name = "libimagcontact"         ,  allow = ["LGPL-2.1"] },
+    { name = "libimagdiary"           ,  allow = ["LGPL-2.1"] },
+    { name = "libimaglog"             ,  allow = ["LGPL-2.1"] },
+    { name = "libimagtimetrack"       ,  allow = ["LGPL-2.1"] },
+    { name = "libimagtodo"            ,  allow = ["LGPL-2.1"] },
+    { name = "libimagmail"            ,  allow = ["LGPL-2.1"] },
+    { name = "libimagwiki"            ,  allow = ["LGPL-2.1"] },
+    { name = "imag-habit"             ,  allow = ["LGPL-2.1"] },
+    { name = "imag-diary"             ,  allow = ["LGPL-2.1"] },
+    { name = "imag-calendar"          ,  allow = ["LGPL-2.1"] },
+    { name = "imag-contact"           ,  allow = ["LGPL-2.1"] },
+    { name = "imag-notes"             ,  allow = ["LGPL-2.1"] },
+    { name = "imag-bookmark"          ,  allow = ["LGPL-2.1"] },
+    { name = "imag-timetrack"         ,  allow = ["LGPL-2.1"] },
+    { name = "imag-mail"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-todo"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-log"               ,  allow = ["LGPL-2.1"] },
+    { name = "imag-wiki"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-markdown"          ,  allow = ["LGPL-2.1"] },
+    { name = "imag-ref"               ,  allow = ["LGPL-2.1"] },
+    { name = "imag-gps"               ,  allow = ["LGPL-2.1"] },
+    { name = "imag-diagnostics"       ,  allow = ["LGPL-2.1"] },
+    { name = "imag-mv"                ,  allow = ["LGPL-2.1"] },
+    { name = "imag-store"             ,  allow = ["LGPL-2.1"] },
+    { name = "imag-tag"               ,  allow = ["LGPL-2.1"] },
+    { name = "imag-grep"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-annotate"          ,  allow = ["LGPL-2.1"] },
+    { name = "imag-link"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-view"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-init"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-edit"              ,  allow = ["LGPL-2.1"] },
+    { name = "imag-ids"               ,  allow = ["LGPL-2.1"] },
+    { name = "imag-id-in-collection"  ,  allow = ["LGPL-2.1"] },
+    { name = "imag-git"               ,  allow = ["LGPL-2.1"] },
+    { name = "imag-category"          ,  allow = ["LGPL-2.1"] },
+    { name = "imag-header"            ,  allow = ["LGPL-2.1"] },
+    { name = "imag-create"            ,  allow = ["LGPL-2.1"] },
+    { name = "imag"                   ,  allow = ["LGPL-2.1"] },
+
+    { name = "tests-ui", allow = ["LGPL-2.1"] },
+    { name = "version-sync", allow = ["LGPL-2.1", "MIT"] },
+]
diff --git a/tests/ui/Cargo.toml b/tests/ui/Cargo.toml
index 3d601d03..2d823191 100644
--- a/tests/ui/Cargo.toml
+++ b/tests/ui/Cargo.toml
@@ -3,6 +3,7 @@ name    = "tests-ui"
 version = "0.10.0"
 authors = ["Matthias Beyer <mail@beyermatthias.de>"]
 edition = "2018"
+license = "LGPL-2.1"
 
 # We do not publish this crate because it contains tests which should only be
 # available during development and CI runs, but there's nothing that a user of
diff --git a/tests/version-sync/Cargo.toml b/tests/version-sync/Cargo.toml
index 64f4a95a..f6987af5 100644
--- a/tests/version-sync/Cargo.toml
+++ b/tests/version-sync/Cargo.toml
@@ -3,6 +3,7 @@ name = "version-sync"
 version = "0.10.0"
 authors = ["Matthias Beyer <mail@beyermatthias.de>"]
 edition = "2018"
+license = "LGPL-2.1"
 
 # We do not publish this crate because it contains tests which should only be
 # available during development and CI runs, but there's nothing that a user of