# SPDX-FileCopyrightText: <%= year %> <%= copyrightHolder %>
# SPDX-License-Identifier: MIT

licenses:
  allowed:
    - Apache-2.0
    - MIT
    - X11
    - BSD-2-Clause
    - BSD-3-Clause
    - ISC
    - Zlib
    - Unlicense
    - 0BSD
    - BlueOak-1.0.0
    - WTFPL
    - CC-BY-3.0
    - CC-BY-4.0
    - CC0-1.0
    - Python-2.0
  warning:
    - CC-BY-SA-3.0
    - CC-BY-SA-4.0
    - LGPL-2.1
    - LGPL-2.1-only
    - LGPL-2.1+
    - LGPL-2.1-or-later
    - LGPL-3.0
    - LGPL-3.0-only
    - LGPL-3.0+
    - LGPL-3.0-or-later
    - MPL-1.1
    - MPL-2.0
    - EPL-1.0
  forbidden:
    - GPL-2.0-only
    - GPL-2.0-or-later
    - GPL-3.0-only
    - GPL-3.0-or-later
    - AGPL-3.0
# production: true # Whether to check production dependencies or not
# development: true # Whether to check development dependencies or not
# onlyDirect: false # Whether to check only direct dependencies or not
# npm: # Configuration for npm dependencies
#   includeFiles: # Files to include in the check
#     - "**/package.json"
#   excludeFiles: # Files to exclude from the check
#     - "**/node_modules/**"
#   developmentFiles: # Dependencies in these files are considered development dependencies
#     - "**/my-dev-package/package.json"
#   modules: # Only check these modules
#     - "foo-module@1.0.0"
#   excludeModules: # Exclude these modules from the check
#     - "bar-module@1.0.0"
#   extraModules: # Add these extra modules to the check
#     - "baz-module@1.0.0"
# python: # Configuration for python dependencies, similar to npm, plus extra options
#   recursiveRequirements: true # Whether to check requirements recursively, including -r files
# maven: {} # Configuration for maven dependencies, similar to npm
# go: {} # Configuration for go dependencies, similar to npm
# reporter: text # Reporter to use (text, json, markdown)
# failOnNotValid: true # Whether to fail the action if a dependency is forbidden
# log: info # Log level (silly, debug, verbose, info, warn, error)