39 lines
2.7 KiB
Markdown
39 lines
2.7 KiB
Markdown
|
# Licensing and dependency review
|
||
|
|
|
||
|
|
The repository's original code, example and documentation are under the MIT
|
||
|
|
license in LICENSE (copyright Johannes Findeisen). No energyXT source, artwork,
|
||
|
|
external plugin SDK, vendored DSP or binary asset is included. The source archive
|
||
|
|
contains repository files and an export manifest; it does not bundle system
|
||
|
|
libraries. Installation includes LICENSE and these documents.
|
||
|
|
|
||
|
|
The Phase 9 host review inspected installed package metadata and local license
|
||
|
|
files. Package-level license sets can include utilities/docs that differ from the
|
||
|
|
specific library being linked; retain the relevant upstream notices when
|
||
|
|
redistributing dependencies. The default install uses system shared libraries.
|
||
|
|
|
||
|
|
| Component | Inspected license / role |
|
||
|
|
| --- | --- |
|
||
|
|
| FLTK 1.4.5 | LGPL-2.0-only with FLTK exception; optional GUI. `/usr/share/licenses/fltk/COPYING` contains the linking/subclass exceptions. No local modifications. |
|
||
|
|
| PipeWire JACK client library | Installed client COPYING is MIT (Wim Taymans); package metadata also lists GPL/LGPL components. No PipeWire binaries are bundled. |
|
||
|
|
| Traditional JACK client | Alternative backend library commonly LGPL; inspect the actual distribution package instead of assuming PipeWire's license. |
|
||
|
|
| glibc/libm | LGPL-2.1-or-later library code; package also contains GPL components. System runtime. |
|
||
|
|
| libstdc++/libgcc | GPL-3.0-or-later with GCC Runtime Library Exception 3.1. System C++ runtime. |
|
||
|
|
| Pango/GLib | LGPL family; installed Pango metadata LGPL-2.0-or-later. FLTK text stack. |
|
||
|
|
| Cairo | LGPL-2.1-only OR MPL-1.1. FLTK graphics stack. |
|
||
|
|
| Fontconfig | HPND AND Unicode-DFS-2016 in inspected package. |
|
||
|
|
| FreeType | FTL OR GPL-2.0-or-later; distribution can select FTL. |
|
||
|
|
| HarfBuzz, Wayland, libdecor, xkbcommon | MIT-family licenses; check each shipped package. |
|
||
|
|
| X11 libraries | MIT/X11-family notices. |
|
||
|
|
| D-Bus | AFL-2.1 OR GPL-2.0-or-later. |
|
||
|
|
| Python 3 | PSF-2.0; optional build/test/package scripts use only the standard library. Not an application runtime dependency. |
|
||
|
|
|
||
|
|
GNU Make, GCC/Clang, binutils, pkg-config and optional Xvfb/xdotool/sanitizers are
|
||
|
|
build/test tools, not shipped dependencies. New Python tooling needs Python 3.12+
|
||
|
|
for safe tar extraction in release tests; this host has Python 3.14.8. No packages
|
||
|
|
were installed and no application dependency was added in Phase 9.
|
||
|
|
|
||
|
|
Binary redistributors must inspect their own `readelf -d`/`ldd` dependency set
|
||
|
|
and supply the notices/source/relinking facilities required by those exact
|
||
|
|
licenses and linking choices. FLTK's exception does not remove obligations of
|
||
|
|
other linked libraries. This review covers the current unmodified system-linked
|
||
|
|
build; static all-in-one bundles and external plugins need a separate review.
|