sources:
  npm: true

allowed:
  - apache-2.0
  - bsd-2-clause
  - bsd-3-clause
  - cc0-1.0
  - isc
  - mit
  - unlicense

reviewed:
  npm:
  - 'fs.realpath' 
  - '@actions/http-client'
  - 'glob'