From 6a989594658920a81d784405807cb07f6bf5c3e2 Mon Sep 17 00:00:00 2001 From: Ming-Wei Shih Date: Fri, 17 Apr 2026 00:02:19 +0000 Subject: [PATCH] chore: add NOTICE file and project name in LICENSE - NOTICE: list all third-party dependencies with licenses and copyrights (serde, thiserror, proc-macro2, quote, syn, serde_json, clap, hex, etc.) - LICENSE: add project name above copyright per MS OSS release checklist --- LICENSE | 2 ++ NOTICE | 72 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 74 insertions(+) create mode 100644 NOTICE diff --git a/LICENSE b/LICENSE index f29f55d..17986a0 100644 --- a/LICENSE +++ b/LICENSE @@ -1,5 +1,7 @@ MIT License + CoRIM (Concise Reference Integrity Manifest) — Rust Library + Copyright (c) Microsoft Corporation. Permission is hereby granted, free of charge, to any person obtaining a copy diff --git a/NOTICE b/NOTICE new file mode 100644 index 0000000..c5d9441 --- /dev/null +++ b/NOTICE @@ -0,0 +1,72 @@ +NOTICES AND INFORMATION + +This project incorporates material from the third-party open source +software components listed below. The original copyright notices and +license terms are listed below and are provided for informational +purposes only. Microsoft licenses this software to you under the terms +of the MIT License. Microsoft reserves all other rights not expressly +granted under the MIT License, whether by implication, estoppel or +otherwise. + +All third-party dependencies are used under their respective licenses +and are automatically managed via Cargo (the Rust package manager). +No third-party source code is vendored in this repository. + +======================================================================== + +serde — https://github.com/serde-rs/serde +License: MIT OR Apache-2.0 +Copyright: David Tolnay and contributors + +serde_json — https://github.com/serde-rs/json +License: MIT OR Apache-2.0 +Copyright: David Tolnay and contributors + +thiserror — https://github.com/dtolnay/thiserror +License: MIT OR Apache-2.0 +Copyright: David Tolnay + +proc-macro2 — https://github.com/dtolnay/proc-macro2 +License: MIT OR Apache-2.0 +Copyright: David Tolnay and Alex Crichton + +quote — https://github.com/dtolnay/quote +License: MIT OR Apache-2.0 +Copyright: David Tolnay + +syn — https://github.com/dtolnay/syn +License: MIT OR Apache-2.0 +Copyright: David Tolnay + +unicode-ident — https://github.com/dtolnay/unicode-ident +License: (MIT OR Apache-2.0) AND Unicode-3.0 +Copyright: David Tolnay + +itoa — https://github.com/dtolnay/itoa +License: MIT OR Apache-2.0 +Copyright: David Tolnay + +memchr — https://github.com/BurntSushi/memchr +License: Unlicense OR MIT +Copyright: Andrew Gallant + +zmij — https://github.com/serde-rs/json (internal dep of serde_json) +License: MIT +Copyright: David Tolnay + +clap — https://github.com/clap-rs/clap (corim-cli only) +License: MIT OR Apache-2.0 +Copyright: Kevin K. and clap contributors + +hex — https://github.com/KokaKiwi/rust-hex (corim-cli only) +License: MIT OR Apache-2.0 +Copyright: KokaKiwi and contributors + +======================================================================== + +Full license texts for the MIT License and the Apache License, +Version 2.0, can be found at: + - MIT: https://opensource.org/licenses/MIT + - Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0 + - Unlicense: https://unlicense.org/ + - Unicode-3.0: https://www.unicode.org/license.txt