TypeDialog/docs/DEPENDENCIES.md

TypeDialog Dependencies

Direct Dependencies (by crate)

typedialog-core

Core library dependencies:

Serialization & Data

• serde 1.0 (Apache-2.0 OR MIT)
• serde_json 1.0 (Apache-2.0 OR MIT)
• serde_yaml 0.9 (Apache-2.0 OR MIT)
• toml 0.9 (Apache-2.0 OR MIT)

Error Handling

• anyhow 1.0 (Apache-2.0 OR MIT)
• thiserror 2.0 (Apache-2.0 OR MIT)

Date/Time

• chrono 0.4 (Apache-2.0 OR MIT)

Async

• tokio 1 (MIT)
• async-trait 0.1 (Apache-2.0 OR MIT)
• futures 0.3 (Apache-2.0 OR MIT)

Templating (optional)

• tera 1.20 (MIT)

i18n (optional)

• fluent 0.17 (Apache-2.0)
• fluent-bundle 0.16 (Apache-2.0)
• unic-langid 0.9 (Apache-2.0 OR MIT)
• sys-locale 0.3 (Apache-2.0 OR MIT)
• dirs 6.0 (Apache-2.0 OR MIT)

CLI Backend (optional)

• inquire 0.9 (MIT)
• dialoguer 0.12 (MIT)
• rpassword 7.4 (Apache-2.0)

TUI Backend (optional)

• ratatui 0.29 (MIT)
• crossterm 0.29 (MIT)
• atty 0.2 (MIT)

Web Backend (optional)

• axum 0.8.7 (MIT)
• tower 0.5.2 (MIT)
• tower-http 0.6.8 (MIT)
• tracing 0.1 (MIT)
• tracing-subscriber 0.3 (MIT)

Utilities

• tempfile 3.23 (Apache-2.0 OR MIT)

typedialog (CLI)

Direct dependencies:

• typedialog-core 0.1.0 (MIT)
• clap 4.5 (Apache-2.0 OR MIT) - CLI argument parsing
• anyhow 1.0 (Apache-2.0 OR MIT)
• serde_json 1.0 (Apache-2.0 OR MIT)
• tokio 1.0 (MIT)
• toml 0.9 (Apache-2.0 OR MIT)
• unic-langid 0.9 (Apache-2.0 OR MIT)

typedialog-tui (TUI)

Direct dependencies:

• typedialog-core 0.1.0 (MIT)
• clap 4.5 (Apache-2.0 OR MIT)
• anyhow 1.0 (Apache-2.0 OR MIT)
• serde_json 1.0 (Apache-2.0 OR MIT)
• tokio 1.0 (MIT)
• unic-langid 0.9 (Apache-2.0 OR MIT)

typedialog-web (Web)

Direct dependencies:

• typedialog-core 0.1.0 (MIT)
• clap 4.5 (Apache-2.0 OR MIT)
• anyhow 1.0 (Apache-2.0 OR MIT)
• serde_json 1.0 (Apache-2.0 OR MIT)
• tokio 1.0 (MIT)
• unic-langid 0.9 (Apache-2.0 OR MIT)

---

Transitive Dependencies

Total: 286 dependencies across all features.

License Distribution

License	Count
Apache-2.0 OR MIT	190
MIT	66
Apache-2.0	3
MIT OR Unlicense	7
Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	7
Other	13

---

License Compatibility

All dependencies are compatible with the MIT License:

• ✓ Permissive licenses (MIT, Apache-2.0, BSD-3-Clause, Zlib, MPL-2.0)
• ✓ Weak copyleft (LGPL-2.1-or-later, MPL-2.0)
• ✓ Public domain (Unlicense, Unicode-3.0)

---

Files

• LICENSE.md - Full dependency license attribution
• SBOM.spdx.json - Software Bill of Materials (SPDX 2.3 format)
• SBOM.cyclonedx.json - Software Bill of Materials (CycloneDX 1.4 format)
• Cargo.lock - Locked dependency versions for reproducibility

---

Security Considerations

No Unsafe Code

The workspace forbids unsafe code:

[workspace.lints.rust]
unsafe_code = "forbid"

Dependency Auditing

Run security audit:

cargo audit

Review dependency tree:

cargo tree --depth=2

SBOM Usage

SBOMs can be used with:

• SPDX format - CycloneDX tools, GitHub Dependabot, SPDX validators
• CycloneDX format - Software composition analysis tools, vulnerability scanners

---

Generated: 2024-12-17