diff options
| author | Ethan Werner <mail@ethanwerner.com> | 2026-10-10 20:55:33 +0000 |
|---|---|---|
| committer | Ethan Werner <mail@ethanwerner.com> | 2026-10-10 20:56:50 +0000 |
| commit | f8423ebea413605b42de23f5dd06c5479d3fa1dd (patch) | |
| tree | 2612a5eb026c59e7aae01f10a1cf62f2ee43042c /THIRD_PARTY_NOTICES.md | |
Diffstat (limited to 'THIRD_PARTY_NOTICES.md')
| -rw-r--r-- | THIRD_PARTY_NOTICES.md | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/THIRD_PARTY_NOTICES.md b/THIRD_PARTY_NOTICES.md new file mode 100644 index 0000000..1c8fff9 --- /dev/null +++ b/THIRD_PARTY_NOTICES.md @@ -0,0 +1,26 @@ +# Third-party notices + +llsh bundles source archives and build inputs for the following components. +Refer to the license files included in each upstream source archive for the +full license terms. + +Component | Version | License +--------- | ------- | ------- +musl libc | 1.2.5 | MIT +zlib | 1.3.1 | zlib License +cJSON | 1.7.19 | MIT +OpenSSL | 3.3.2 | Apache-2.0 +curl | 8.10.1 | curl License (MIT-like) +nlohmann/json | 3.12.0 | MIT +GNU glibc static runtime | host-matched Fedora package | LGPL-2.1-or-later and additional package component licenses +GNU libstdc++ static runtime | host-matched Fedora package | GPL-3.0-or-later with GCC Runtime Library Exception + +The build downloads matching Fedora `glibc-static` and `libstdc++-static` +packages into the ignored `vendor/build/system-runtime/` directory; these RPMs +are not bundled as source-tree inputs. Package metadata lists the complete +license set. Source RPM NEVRAs are host-version-specific; obtain the matching +`glibc` and `gcc` source RPMs from the configured Fedora source repositories +for corresponding source and license texts. + +Older vendored musl and libstdc++ artifacts remain in `vendor/` for reference; +the current Makefile does not use them. |