56 lines
3.7 KiB
Markdown
56 lines
3.7 KiB
Markdown
# Licensing and dependency review
|
|
|
|
The repository's original code, example and documentation are under the MIT
|
|
license in LICENSE (copyright Johannes Findeisen). No energyXT source, artwork,
|
|
external plugin SDK, vendored DSP or binary asset is included. The source archive
|
|
contains repository files and an export manifest; it does not bundle system
|
|
libraries. Installation includes LICENSE and these documents.
|
|
|
|
The Phase 9 host review inspected installed package metadata and local license
|
|
files. Package-level license sets can include utilities/docs that differ from the
|
|
specific library being linked; retain the relevant upstream notices when
|
|
redistributing dependencies. The default install uses system shared libraries.
|
|
|
|
| Component | Inspected license / role |
|
|
| --- | --- |
|
|
| FLTK 1.4.5 | LGPL-2.0-only with FLTK exception; optional GUI. `/usr/share/licenses/fltk/COPYING` contains the linking/subclass exceptions. No local modifications. |
|
|
| PipeWire JACK client library | Installed client COPYING is MIT (Wim Taymans); package metadata also lists GPL/LGPL components. No PipeWire binaries are bundled. |
|
|
| Traditional JACK client | Alternative backend library commonly LGPL; inspect the actual distribution package instead of assuming PipeWire's license. |
|
|
| glibc/libm | LGPL-2.1-or-later library code; package also contains GPL components. System runtime. |
|
|
| libstdc++/libgcc | GPL-3.0-or-later with GCC Runtime Library Exception 3.1. System C++ runtime. |
|
|
| Pango/GLib | LGPL family; installed Pango metadata LGPL-2.0-or-later. FLTK text stack. |
|
|
| Cairo | LGPL-2.1-only OR MPL-1.1. FLTK graphics stack. |
|
|
| Fontconfig | HPND AND Unicode-DFS-2016 in inspected package. |
|
|
| FreeType | FTL OR GPL-2.0-or-later; distribution can select FTL. |
|
|
| HarfBuzz, Wayland, libdecor, xkbcommon | MIT-family licenses; check each shipped package. |
|
|
| X11 libraries | MIT/X11-family notices. |
|
|
| D-Bus | AFL-2.1 OR GPL-2.0-or-later. |
|
|
| Python 3 | PSF-2.0; optional build/test/package scripts use only the standard library. Not an application runtime dependency. |
|
|
|
|
GNU Make, GCC/Clang, binutils, pkg-config and optional Xvfb/xdotool/sanitizers are
|
|
build/test tools, not shipped dependencies. New Python tooling needs Python 3.12+
|
|
for safe tar extraction in release tests; this host has Python 3.14.8. No packages
|
|
were installed and no application dependency was added in Phase 9.
|
|
|
|
Binary redistributors must inspect their own `readelf -d`/`ldd` dependency set
|
|
and supply the notices/source/relinking facilities required by those exact
|
|
licenses and linking choices. FLTK's exception does not remove obligations of
|
|
other linked libraries. This review covers the current unmodified system-linked
|
|
build; static all-in-one bundles and external plugins need a separate review.
|
|
|
|
## Phase 15 LADSPA review
|
|
|
|
The optional external host includes the system LADSPA 1.1 header (`ladspa`
|
|
1.17-7), copyright Richard W.E. Furse, Paul Barton-Davis and Stefan Westerfeld,
|
|
LGPL-2.1-or-later. No header, implementation or plugin binary is copied into the
|
|
repository. The host uses the glibc dynamic loader (`-ldl`, LGPL-2.1-or-later),
|
|
with no discovery/runtime SDK library or new installed package. LADSPA is mature
|
|
and stable; it does not provide modern instrument/MIDI/opaque-state services.
|
|
The original fixture in tests/plugins is MIT repository code.
|
|
|
|
Acceptance dynamically loads the user's installed LADSPA sample amp/sine modules
|
|
(package metadata LGPL-2.1-or-later) and SWH inverter (swh-plugins 0.4.17-7,
|
|
GPL-2.0-or-later). Testing/loading a user-installed module does not grant the right
|
|
to bundle or relicense it. Redistributors must review each chosen module and the
|
|
combined distribution's obligations separately; xtc's MIT grant covers only its
|
|
original code. No third-party plugin is included in source archives or installs.
|