# Third-party notices

This file lists third-party components and assets used by SHiNE. It is a practical attribution file for repository publication; individual dependency artifacts may include additional license text in their own packages.

## Twemoji

SHiNE UI uses Twemoji graphics for emoji rendering in the chat emoji picker and emoji-only messages.

- Source: https://github.com/twitter/twemoji
- Graphics license: Creative Commons Attribution 4.0 International (CC BY 4.0)
- Code license: MIT
- License text: https://creativecommons.org/licenses/by/4.0/

Attribution:

Emoji graphics by Twemoji, licensed under CC BY 4.0.

Changes in SHiNE:

- Emoji are stored and sent as normal Unicode text.
- Twemoji SVG graphics are used only as a visual rendering layer in the web UI.
- The UI loads Twemoji SVG assets from the pinned `twitter/twemoji@14.0.2` package via jsDelivr.

## QR Code Generator

SHiNE UI includes `shine-UI/js/vendor-qrcode-generator.js`.

- Project: QR Code Generator for JavaScript
- Copyright: Kazuhiko Arase
- License: MIT
- Source: http://www.d-project.com/

## SHiNE project-owned visual assets

SHiNE logos, icons and generated visual assets in `shine-UI/assets/` and `shine-UI/img/` are project-owned assets, unless a specific file says otherwise.

## Solana JavaScript libraries

SHiNE UI and Solana tooling use Solana JavaScript libraries, including `@solana/web3.js`.

- Package: `@solana/web3.js`
- License: MIT
- Source: https://github.com/solana-foundation/solana-web3.js

Some Solana JavaScript dependency trees include additional packages under permissive licenses such as MIT, Apache-2.0, BSD, ISC, 0BSD and CC0-1.0.

Known stricter dependency:

- Package: `rpc-websockets`
- License: LGPL-3.0-only
- Used transitively through Solana JavaScript dependencies in `shine-solana/shine` and `SHiNE-browser-plugin-wallet`.

## Noble cryptography libraries

SHiNE browser wallet/vendor bundles include Noble cryptography code.

- Packages: `@noble/curves`, `@noble/hashes`
- License: MIT
- Source: https://github.com/paulmillr/noble-curves and https://github.com/paulmillr/noble-hashes

## Java server dependencies

The SHiNE Java server uses third-party dependencies from Maven Central, including:

- Eclipse Jetty (`org.eclipse.jetty:*`) - EPL-2.0 / Apache-2.0 family licensing
- Bouncy Castle (`org.bouncycastle:bcprov-jdk18on`) - Bouncy Castle permissive license
- Jackson (`com.fasterxml.jackson.core:jackson-databind`) - Apache-2.0
- Logback (`ch.qos.logback:logback-classic`) - EPL-1.0 / LGPL-2.1
- SLF4J (`org.slf4j:slf4j-api`) - MIT
- SQLite JDBC (`org.xerial:sqlite-jdbc`) - Apache-2.0
- Web Push Java library (`nl.martijndwars:web-push`) - Apache-2.0
- JUnit (`org.junit:*`) - EPL-2.0

## Gradle Wrapper

The repository includes Gradle wrapper scripts.

- License: Apache License 2.0
- Source: https://gradle.org/

## Espressif code snippets

The ESP32 prototype area includes Espressif audio codec helper files with SPDX/license headers.

- Files include `ESPRESSIF MIT License` and `SPDX-License-Identifier: Apache-2.0` notices.
- Original copyright notices are preserved in the source files.