Files
NotAlexNoyleandClaude Fable 5.1 62df604c54 Licensing audit: notices for everything bundled, no borrowed marks
The owner: "ensure that all software patent and trademark licenses in
the repo are being respected". A read-only audit of what the packages
carry found no blocker and these gaps, all closed here (the record is
impl-review-findings-6.md, "Licensing audit"):

- NOTICE names the runtime the engine ships with: glibc 2.23 as
  crosstool-NG modifies it (LGPL-2.1), the GCC 9.4.0 runtime (GPL-3.0
  with the Runtime Library Exception), and the eight Debian jessie
  libraries, with the FreeType disclaimer, Lato, the hyphenation
  patterns, and where the corresponding source is. licenses/ gains
  LGPL-2.1, GPL-3.0 and the GCC exception from the pinned tarballs and
  Debian's copyright files from the sysroot; every package ships all of
  licenses/ and CREDITS.md, checked in the payload preflight.
- NOTICE names the modified engine's source (the fork, branch, pinned
  commit, base release, the patches), as MPL-2.0 3.2 asks.
- README and LICENSE no longer call the packages Apache-2.0 and MPL-2.0
  only; the dead licensing.shtml reference is replaced by the UXP
  LICENSE and TRADEMARK files and Moonchild's legal and redist pages.
- Apache-2.0 4(b) change notices on the 29 HP-derived files changed
  since import.
- A drawn magnifier is the DuckDuckGo engines' icon; Google's logo is
  Google's only; the unused Bing logo is gone.
- The engine's services-sync.js defaults pointed at Moonchild's Sync,
  key server and add-on host: blanked at bundle time, checked.
- The "Blazer" keyword, the Goanna-mark tagline, a stray screenshot and
  a .bak dropped; the HP SDK's terms stated where it is downloaded;
  CREDITS records the logo's origin and the screenshot strip's licence.

Deferred to the next engine build: about:credits' URL and
--disable-ffmpeg (the system-libavcodec path is dead on the device).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XM9EDSp83ZFRhggY4RCT9X
2026-10-14 13:57:20 -04:00

83 lines
4.2 KiB
Plaintext

Jihad Browser — Licensing Overview
==================================
Jihad Browser is a composite work that incorporates source code from several
upstream projects, each retaining its own license. There is no single license
that covers the entire repository. Every source file retains the license header
of its origin; this file explains how the pieces fit together.
--------------------------------------------------------------------------------
Component licenses
--------------------------------------------------------------------------------
1. User-interface shell (directory: app/)
Derived from isis-browser (Enyo web app).
Copyright (c) 2012 Hewlett-Packard Development Company, L.P.
Licensed under the Apache License, Version 2.0.
Full text: licenses/Apache-2.0.txt
2. Render daemon / IPC layer (directory: render/browserserver/)
Derived from the isis-project BrowserServer / BrowserAdapter / AdapterBase.
Copyright (c) 2012 Hewlett-Packard Development Company, L.P.
Copyright (c) 2012-2014 LG Electronics, Inc.
Licensed under the Apache License, Version 2.0.
Full text: licenses/Apache-2.0.txt
3. Goanna rendering backend integration (directory: render/goanna/)
New code authored for Jihad Browser that links against the UXP / Goanna
engine. Licensed under the Mozilla Public License, Version 2.0, to remain
compatible with the engine it embeds.
Full text: licenses/MPL-2.0.txt
4. UXP / Goanna web engine (referenced as an external dependency; NOT vendored
in this repository — built from the upstream UXP source tree).
Copyright (c) Mozilla Foundation and the Moonchild Productions / Pale Moon
contributors.
Licensed under the Mozilla Public License, Version 2.0, with portions under
other compatible licenses as documented in the UXP tree.
Full text: licenses/MPL-2.0.txt
Engine origin (upstream repo + pinned revision), every modification made to
the engine (build patches + the Pale Moon/Basilisk branding strip), and the
MPL source-availability of those modifications are documented in
docs/ENGINE-SOURCE.md.
--------------------------------------------------------------------------------
License compatibility
--------------------------------------------------------------------------------
The Apache License 2.0 and the Mozilla Public License 2.0 are compatible. The
MPL-2.0 is a file-level (weak) copyleft: MPL-licensed files remain under the MPL
and their source must be made available, but they may be combined with files
under other licenses (including Apache-2.0) in a "Larger Work". See MPL-2.0
section 1.7 and 3.3.
New code added by NotAlexNoyle:
- Files placed under app/ or render/browserserver/ that are derivative of the
Apache-2.0 upstreams remain Apache-2.0.
- Files under render/goanna/ that integrate with the Goanna engine are
MPL-2.0.
- Build/packaging glue (build/) is Apache-2.0 unless a file header states
otherwise.
- The installed packages also carry third-party runtime components under
their own licences (LGPL-2.1, GPL-3.0 with the GCC Runtime Library
Exception 3.1, MIT, BSD, the FreeType License, zlib, libpng, SIL OFL 1.1,
CC BY 2.0): NOTICE names each one, where its text ships (licenses/, and
the engine's about:license page) and where its source is.
--------------------------------------------------------------------------------
Trademarks
--------------------------------------------------------------------------------
This project does NOT grant any rights to the trademarks of Moonchild
Productions, the Mozilla Foundation, or any other party, including without
limitation the "Pale Moon", "Basilisk", "Firefox", or "Mozilla" names and
logos. All Pale Moon / Basilisk / Moonchild branding is removed from any
engine build shipped under the Jihad Browser name, in accordance with the UXP
licence and trademark notes (third_party/uxp/LICENSE and TRADEMARK) and
Moonchild Productions' policies (https://www.palemoon.org/legal.shtml,
https://www.palemoon.org/redist.shtml). "Goanna" is Moonchild Productions'
trademark for the engine and is used here only to name it. "Jihad Browser" is
the product name used by this fork; it implies no endorsement by any upstream.
See NOTICE for required attributions.