Files
SHiNE-server/THIRD_PARTY_NOTICES.md

87 lines
3.1 KiB
Markdown

# Third-party notices
This file lists third-party components and assets used by SHiNE. It is a practical attribution file for repository publication; individual dependency artifacts may include additional license text in their own packages.
## Twemoji
SHiNE UI uses Twemoji graphics for emoji rendering in the chat emoji picker and emoji-only messages.
- Source: https://github.com/twitter/twemoji
- Graphics license: Creative Commons Attribution 4.0 International (CC BY 4.0)
- Code license: MIT
- License text: https://creativecommons.org/licenses/by/4.0/
Attribution:
Emoji graphics by Twemoji, licensed under CC BY 4.0.
Changes in SHiNE:
- Emoji are stored and sent as normal Unicode text.
- Twemoji SVG graphics are used only as a visual rendering layer in the web UI.
- The UI loads Twemoji SVG assets from the pinned `twitter/twemoji@14.0.2` package via jsDelivr.
## QR Code Generator
SHiNE UI includes `shine-UI/js/vendor-qrcode-generator.js`.
- Project: QR Code Generator for JavaScript
- Copyright: Kazuhiko Arase
- License: MIT
- Source: http://www.d-project.com/
## SHiNE project-owned visual assets
SHiNE logos, icons and generated visual assets in `shine-UI/assets/` and `shine-UI/img/` are project-owned assets, unless a specific file says otherwise.
## Solana JavaScript libraries
SHiNE UI and Solana tooling use Solana JavaScript libraries, including `@solana/web3.js`.
- Package: `@solana/web3.js`
- License: MIT
- Source: https://github.com/solana-foundation/solana-web3.js
Some Solana JavaScript dependency trees include additional packages under permissive licenses such as MIT, Apache-2.0, BSD, ISC, 0BSD and CC0-1.0.
Known stricter dependency:
- Package: `rpc-websockets`
- License: LGPL-3.0-only
- Used transitively through Solana JavaScript dependencies in `shine-solana/shine` and `SHiNE-browser-plugin-wallet`.
## Noble cryptography libraries
SHiNE browser wallet/vendor bundles include Noble cryptography code.
- Packages: `@noble/curves`, `@noble/hashes`
- License: MIT
- Source: https://github.com/paulmillr/noble-curves and https://github.com/paulmillr/noble-hashes
## Java server dependencies
The SHiNE Java server uses third-party dependencies from Maven Central, including:
- Eclipse Jetty (`org.eclipse.jetty:*`) - EPL-2.0 / Apache-2.0 family licensing
- Bouncy Castle (`org.bouncycastle:bcprov-jdk18on`) - Bouncy Castle permissive license
- Jackson (`com.fasterxml.jackson.core:jackson-databind`) - Apache-2.0
- Logback (`ch.qos.logback:logback-classic`) - EPL-1.0 / LGPL-2.1
- SLF4J (`org.slf4j:slf4j-api`) - MIT
- PostgreSQL JDBC (`org.postgresql:postgresql`) - BSD-2-Clause
- Web Push Java library (`nl.martijndwars:web-push`) - Apache-2.0
- JUnit (`org.junit:*`) - EPL-2.0
## Gradle Wrapper
The repository includes Gradle wrapper scripts.
- License: Apache License 2.0
- Source: https://gradle.org/
## Espressif code snippets
The ESP32 prototype area includes Espressif audio codec helper files with SPDX/license headers.
- Files include `ESPRESSIF MIT License` and `SPDX-License-Identifier: Apache-2.0` notices.
- Original copyright notices are preserved in the source files.