This was found by cargo-deny in amethyst/specs#770.
zerocopy has the license string BSD-2-Clause, but ahash has MIT OR Apache-2.0. The former is incompatible with the latter.
Although this isn't in itself a fundamental problem, it does mean that the de-facto license that users of ahash are operating under is BSD-2-Clause, which is less permissive and not suitable for some purposes.