# Third-party software in the native release

The native C++ release is intentionally staged from CMake and contains only
the dependencies listed below. Exact license texts and machine-readable SPDX
notices are in the adjacent `licenses` directory.

- Qt 6 Core, GUI, Widgets, Network, and SVG are dynamically linked. Qt is
  available under its commercial terms or the open-source licenses described
  in `licenses/Qt-LICENSE.txt`. Exact Qt 6.11.2 component and third-party
  notices are in `licenses/qtbase-6.11.2.spdx` and
  `licenses/qtsvg-6.11.2.spdx`.
- OpenSSL is used for Ed25519 release-manifest verification. See
  `licenses/OpenSSL.txt`.
- miniz is used for release ZIP extraction. See `licenses/miniz.txt`.
- Zstandard is used for authenticated per-file differential update payloads.
  See `licenses/Zstandard.txt`.
- Microsoft Windows Implementation Library (WIL) is used for native Windows
  resource ownership. See `licenses/WIL.txt`.
- MemProcFS and LeechCore provide read-only access to Gunbound processes in
  VMware guests. They are loaded dynamically only when VM support is used.
  See `licenses/MemProcFS.txt`. The bundled FTDI D3XX backend is subject to
  the additional terms in `licenses/FTD3XX-LICENSE.txt`.
- The Microsoft Visual C++ Runtime and Universal C Runtime are distributed
  app-local so no machine-wide redistributable installation is required. See
  `licenses/Microsoft-Runtime-NOTICE.txt` and
  `licenses/Microsoft-Visual-Cpp-Redist.txt`.
- cppinterception is compiled directly into the native application from a
  pinned upstream revision. See `licenses/cppinterception-MIT.txt`.
- The Interception 1.0.1 driver installer is downloaded from its upstream
  GitHub release on demand, verified against a pinned SHA-256 digest, and is
  not bundled in the release. Its archive includes the applicable upstream
  documents.

The release does not ship Python, PySide, libgit2, OpenCV, NumPy, QML, Qt
Quick, Qt PDF, Qt Virtual Keyboard, or their dependency trees.
