diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
index 8194ba00..20524cdc 100644
--- a/.github/workflows/pr.yaml
+++ b/.github/workflows/pr.yaml
@@ -19,6 +19,14 @@ jobs:
     steps:
       - name: Success
         run: "echo \"Success\""
+  cargo-deny:
+    name: cargo-deny
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v2
+      - uses: EmbarkStudios/cargo-deny-action@v1
+        with:
+          command: check all
   py-fmt:
     name: py-fmt
     runs-on: ubuntu-18.04
diff --git a/Cargo.lock b/Cargo.lock
index a9715f82..4384fd79 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -281,6 +281,12 @@ dependencies = [
  "gimli",
 ]
 
+[[package]]
+name = "adler"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee2a4ec343196209d6594e19543ae87a39f96d5534d7174822a3ad825dd6ed7e"
+
 [[package]]
 name = "adler32"
 version = "1.1.0"
@@ -430,7 +436,7 @@ dependencies = [
  "addr2line",
  "cfg-if",
  "libc 0.2.71 (registry+https://github.com/rust-lang/crates.io-index)",
- "miniz_oxide",
+ "miniz_oxide 0.3.7",
  "object",
  "rustc-demangle",
 ]
@@ -958,14 +964,14 @@ dependencies = [
 
 [[package]]
 name = "flate2"
-version = "1.0.14"
+version = "1.0.16"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2cfff41391129e0a856d6d822600b8d71179d46879e310417eb9c762eb178b42"
+checksum = "68c90b0fc46cf89d227cc78b40e494ff81287a92dd07631e5af0d06fe3cf885e"
 dependencies = [
  "cfg-if",
  "crc32fast",
  "libc 0.2.71 (registry+https://github.com/rust-lang/crates.io-index)",
- "miniz_oxide",
+ "miniz_oxide 0.4.0",
 ]
 
 [[package]]
@@ -1730,6 +1736,15 @@ dependencies = [
  "adler32",
 ]
 
+[[package]]
+name = "miniz_oxide"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be0f75932c1f6cfae3c04000e40114adf955636e19040f9c0a2c380702aa1c7f"
+dependencies = [
+ "adler",
+]
+
 [[package]]
 name = "mio"
 version = "0.6.22"
@@ -2259,7 +2274,7 @@ dependencies = [
 [[package]]
 name = "puller"
 version = "0.1.0"
-source = "git+https://github.com/jjs-dev/commons#73c36f4e5bb8bd3c3f126df8564a5cad3ea094ae"
+source = "git+https://github.com/jjs-dev/commons#38c9256b0fd67ff8a57e0009f525b1629c1703f0"
 dependencies = [
  "base64 0.12.2",
  "dkregistry",
@@ -3336,9 +3351,9 @@ checksum = "e987b6bf443f4b5b3b6f38704195592cca41c5bb7aedd3c3693c7081f8289860"
 
 [[package]]
 name = "tracing"
-version = "0.1.15"
+version = "0.1.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a41f40ed0e162c911ac6fcb53ecdc8134c46905fdbbae8c50add462a538b495f"
+checksum = "dbdf4ccd1652592b01286a5dbe1e2a77d78afaa34beadd9872a5f7396f92aaa9"
 dependencies = [
  "cfg-if",
  "tracing-attributes",
@@ -3347,9 +3362,9 @@ dependencies = [
 
 [[package]]
 name = "tracing-attributes"
-version = "0.1.8"
+version = "0.1.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "99bbad0de3fd923c9c3232ead88510b783e5a4d16a6154adffa3d53308de984c"
+checksum = "f0693bf8d6f2bf22c690fc61a9d21ac69efdbb894a17ed596b9af0f01e64b84b"
 dependencies = [
  "proc-macro2 1.0.18",
  "quote 1.0.7",
@@ -3358,9 +3373,9 @@ dependencies = [
 
 [[package]]
 name = "tracing-core"
-version = "0.1.10"
+version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0aa83a9a47081cd522c09c81b31aec2c9273424976f922ad61c053b58350b715"
+checksum = "94ae75f0d28ae10786f3b1895c55fe72e79928fd5ccdebb5438c75e93fec178f"
 dependencies = [
  "lazy_static",
 ]
diff --git a/actions/pr.yaml b/actions/pr.yaml
index 4165ffb8..3b8b8ad8 100644
--- a/actions/pr.yaml
+++ b/actions/pr.yaml
@@ -18,6 +18,14 @@ jobs:
     steps:
       - name: Success
         run: echo "Success"
+  cargo-deny:
+    name: cargo-deny
+    runs-on: "ubuntu-20.04"
+    steps:
+      - uses: actions/checkout@v2
+      - uses: EmbarkStudios/cargo-deny-action@v1
+        with:
+          command: check all
   py-fmt:
     name: py-fmt
     runs-on: "ubuntu-18.04"
diff --git a/deny.toml b/deny.toml
index 37d83c81..3bf119bb 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,2 +1,7 @@
 [bans]
-multiple-version = "warn"
\ No newline at end of file
+multiple-versions = "warn"
+
+[licenses]
+allow-osi-fsf-free = "both"
+allow = ["BSD-2-Clause", "Unlicense", "CC0-1.0"]
+unlicensed = "warn"
\ No newline at end of file