SHiNE-server/THIRD_PARTY_NOTICES.md

Third-party notices

This file lists third-party components and assets used by SHiNE. It is a practical attribution file for repository publication; individual dependency artifacts may include additional license text in their own packages.

Twemoji

SHiNE UI uses Twemoji graphics for emoji rendering in the chat emoji picker and emoji-only messages.

• Source: https://github.com/twitter/twemoji
• Graphics license: Creative Commons Attribution 4.0 International (CC BY 4.0)
• Code license: MIT
• License text: https://creativecommons.org/licenses/by/4.0/

Attribution:

Emoji graphics by Twemoji, licensed under CC BY 4.0.

Changes in SHiNE:

• Emoji are stored and sent as normal Unicode text.
• Twemoji SVG graphics are used only as a visual rendering layer in the web UI.
• The UI loads Twemoji SVG assets from the pinned twitter/twemoji@14.0.2 package via jsDelivr.

QR Code Generator

SHiNE UI includes shine-UI/js/vendor-qrcode-generator.js.

• Project: QR Code Generator for JavaScript
• Copyright: Kazuhiko Arase
• License: MIT
• Source: http://www.d-project.com/

SHiNE project-owned visual assets

SHiNE logos, icons and generated visual assets in shine-UI/assets/ and shine-UI/img/ are project-owned assets, unless a specific file says otherwise.

Solana JavaScript libraries

SHiNE UI and Solana tooling use Solana JavaScript libraries, including @solana/web3.js.

• Package: @solana/web3.js
• License: MIT
• Source: https://github.com/solana-foundation/solana-web3.js

Some Solana JavaScript dependency trees include additional packages under permissive licenses such as MIT, Apache-2.0, BSD, ISC, 0BSD and CC0-1.0.

Known stricter dependency:

• Package: rpc-websockets
• License: LGPL-3.0-only
• Used transitively through Solana JavaScript dependencies in shine-solana/shine and SHiNE-browser-plugin-wallet.

Noble cryptography libraries

SHiNE browser wallet/vendor bundles include Noble cryptography code.

• Packages: @noble/curves, @noble/hashes
• License: MIT
• Source: https://github.com/paulmillr/noble-curves and https://github.com/paulmillr/noble-hashes

Java server dependencies

The SHiNE Java server uses third-party dependencies from Maven Central, including:

• Eclipse Jetty (org.eclipse.jetty:*) - EPL-2.0 / Apache-2.0 family licensing
• Bouncy Castle (org.bouncycastle:bcprov-jdk18on) - Bouncy Castle permissive license
• Jackson (com.fasterxml.jackson.core:jackson-databind) - Apache-2.0
• Logback (ch.qos.logback:logback-classic) - EPL-1.0 / LGPL-2.1
• SLF4J (org.slf4j:slf4j-api) - MIT
• SQLite JDBC (org.xerial:sqlite-jdbc) - Apache-2.0
• Web Push Java library (nl.martijndwars:web-push) - Apache-2.0
• JUnit (org.junit:*) - EPL-2.0

Gradle Wrapper

The repository includes Gradle wrapper scripts.

• License: Apache License 2.0
• Source: https://gradle.org/

Espressif code snippets

The ESP32 prototype area includes Espressif audio codec helper files with SPDX/license headers.

• Files include ESPRESSIF MIT License and SPDX-License-Identifier: Apache-2.0 notices.
• Original copyright notices are preserved in the source files.