The owner: "ensure that all software patent and trademark licenses in
the repo are being respected". A read-only audit of what the packages
carry found no blocker and these gaps, all closed here (the record is
impl-review-findings-6.md, "Licensing audit"):
- NOTICE names the runtime the engine ships with: glibc 2.23 as
crosstool-NG modifies it (LGPL-2.1), the GCC 9.4.0 runtime (GPL-3.0
with the Runtime Library Exception), and the eight Debian jessie
libraries, with the FreeType disclaimer, Lato, the hyphenation
patterns, and where the corresponding source is. licenses/ gains
LGPL-2.1, GPL-3.0 and the GCC exception from the pinned tarballs and
Debian's copyright files from the sysroot; every package ships all of
licenses/ and CREDITS.md, checked in the payload preflight.
- NOTICE names the modified engine's source (the fork, branch, pinned
commit, base release, the patches), as MPL-2.0 3.2 asks.
- README and LICENSE no longer call the packages Apache-2.0 and MPL-2.0
only; the dead licensing.shtml reference is replaced by the UXP
LICENSE and TRADEMARK files and Moonchild's legal and redist pages.
- Apache-2.0 4(b) change notices on the 29 HP-derived files changed
since import.
- A drawn magnifier is the DuckDuckGo engines' icon; Google's logo is
Google's only; the unused Bing logo is gone.
- The engine's services-sync.js defaults pointed at Moonchild's Sync,
key server and add-on host: blanked at bundle time, checked.
- The "Blazer" keyword, the Goanna-mark tagline, a stray screenshot and
a .bak dropped; the HP SDK's terms stated where it is downloaded;
CREDITS records the logo's origin and the screenshot strip's licence.
Deferred to the next engine build: about:credits' URL and
--disable-ffmpeg (the system-libavcodec path is dead on the device).
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XM9EDSp83ZFRhggY4RCT9X
NotAlexNoyleandClaude Fable 5.1
62df604c54