@napi-rs/webcodecs-darwin-arm64 1.4.1 → 1.5.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020 N-API for Rust
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/LICENSES.md

@@ -0,0 +1,40 @@
+# Licenses and binary distribution
+
+The original source code of `@napi-rs/webcodecs` is licensed under the MIT
+license in [LICENSE](LICENSE). That license and its copyright notice remain
+unchanged. It does not replace the licenses of bundled third-party code.
+
+## Native packages
+
+The `@napi-rs/webcodecs-*` platform packages contain native addons that statically
+link FFmpeg and codec libraries. The checked-in build recipes enable
+`--enable-gpl`, `--enable-version3`, `--enable-libx264`, and `--enable-libx265`.
+FFmpeg describes this configuration as GPL version 3 or later; see its
+[licensing explanation](licenses/ffmpeg-LICENSE.md.txt) and
+[GPLv3 text](licenses/ffmpeg-COPYING.GPLv3.txt).
+
+These addons cannot be described as MIT-only distributions. Distribution of
+the combined GPL-covered work must satisfy GPLv3, including the applicable
+Corresponding Source requirements. The original MIT grant for this project's
+own source remains available; it does not provide an exception to those
+requirements for the combined binaries. The root JavaScript package selects
+these addons through optional dependencies, so installing it normally also
+installs a native package with these obligations.
+
+The npm `license` field points here to distinguish the original source license
+from the conditions on the binary distribution. It is not a dual-license offer
+allowing a recipient to select MIT for the bundled native addon.
+
+## Third-party material and source status
+
+[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) lists the configured dependencies
+and reference license texts. Preserve their copyright, license, patent, and
+other required notices when redistributing them. See
+[SOURCE_DISTRIBUTION.md](SOURCE_DISTRIBUTION.md) for the source-material gaps
+identified in the 1.4.2 distribution and the work required before the next
+binary release. The repository URL and these notice files alone are not a
+complete Corresponding Source distribution or a written source offer.
+
+This notice correction does not certify compliance of existing releases,
+change codec features, or relicense the project's original source. Custom
+builds require an inventory of the libraries actually linked into them.

package/README.md

@@ -1,3 +1,11 @@
 # `@napi-rs/webcodecs-darwin-arm64`
 
 This is the **aarch64-apple-darwin** binary for `@napi-rs/webcodecs`
+
+## Licenses and source
+
+This native addon statically links GPL-enabled FFmpeg and codec libraries.
+See [LICENSES.md](LICENSES.md), [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md),
+and [SOURCE_DISTRIBUTION.md](SOURCE_DISTRIBUTION.md) for licensing terms and
+outstanding source-distribution work. The original project's MIT license
+does not by itself cover this combined binary.

package/SOURCE_DISTRIBUTION.md

@@ -0,0 +1,111 @@
+# Corresponding Source: release work still required
+
+Status: notice and packaging corrections only. No complete source bundle has
+been reconstructed, verified, or published by this change. Do not treat the
+presence of these files or a passing packaging check as release clearance.
+
+## What was checked for 1.4.2
+
+The `v1.4.2` tag resolves to
+`3eb6525afb643baadcbe628f536e30265404d818`, also the root npm package's
+`gitHead`. The registry tarballs for the root and all nine native packages were
+downloaded and checked against their npm SHA-512 integrity values.
+
+- The root tarball contains eight files, including the original MIT `LICENSE`.
+- Each native tarball contains only `package.json`, `README.md`, and its `.node`
+  binary. All ten manifests advertise `MIT`. The native packages contain no
+  license, notice, or Corresponding Source files.
+- x264-identifying strings are present in every native binary. This supports
+  the build-recipe evidence but does not identify all linked revisions.
+  The final addons did not retain a discoverable FFmpeg configure/license
+  string in this inspection; no complete binary dependency attestation has
+  been established.
+- `build.rs` pins nine digests for the `ffmpeg-n9.0.2` static-library release.
+  That release lists nine binary/install archives and no dedicated third-party
+  source archive. Its automatic GitHub repository source snapshot contains the
+  wrapper and build scripts, not the downloaded upstream source trees.
+- The macOS arm64 and both Windows static-library archives were downloaded and
+  their SHA-256 values verified against the release metadata. Their file lists
+  contain headers/libraries but no license, copyright, notice, or source tree.
+  Inspection of their `avutil` static libraries confirms `n9.0.2` and the
+  `--enable-gpl`, `--enable-version3`, `--enable-libx264`, and
+  `--enable-libx265` configure options. The other six static-library archives
+  have not been inspected in this audit.
+
+References: [npm root metadata](https://registry.npmjs.org/@napi-rs%2fwebcodecs/1.4.2),
+[1.4.2 source](https://github.com/Brooooooklyn/webcodecs-node/tree/3eb6525afb643baadcbe628f536e30265404d818),
+[FFmpeg static-library release](https://github.com/Brooooooklyn/webcodecs-node/releases/tag/ffmpeg-n9.0.2).
+
+## Requirements to implement for the existing GPL build
+
+[GPLv3](licenses/ffmpeg-COPYING.GPLv3.txt) sections 1, 4, 5, and 6 cover the
+source and object-code distribution conditions. Section 1 covers the source
+needed to generate, install, run, and modify the work, including the controlling
+scripts; its System Library and general-purpose-tool exclusions require a
+component-specific assessment. Preserve applicable notices and identify changes
+and their dates. Distribution of the combined covered work must satisfy GPLv3
+as a whole while retaining compatible upstream notices, including MIT.
+
+For npm/network distribution, section 6(d) provides a route: equivalent access
+to Corresponding Source at no extra charge, with clear directions beside the
+object code. A different source server is permitted under that section, but
+the distributor remains responsible for source availability. A generic link to
+upstream or an unimplemented promise to provide source is insufficient. The
+physical-product written-offer route in section 6(b) is not a generic substitute
+for the npm download route. Installation Information may also be required when
+the section 6 User Product conditions apply.
+
+Before another release using this configuration:
+
+1. Recover the actual source inputs for each old binary where available. Record
+   package version, target, addon hash, FFmpeg archive hash, build run, source
+   commits, tarball hashes, dependency lockfiles, and toolchain versions. Do not
+   use today's dependency HEAD as evidence of the 1.4.2 inputs.
+2. Retain all source trees required for the combined addon, including this
+   project's Rust/C/JS sources, third-party code, relevant generated/interface
+   inputs, and build/install scripts. Include transitive components unless a
+   documented exclusion applies; a directory of static `.a`/`.lib` files and
+   headers is not Corresponding Source.
+3. Capture exact revisions and modifications. Unix x264 is unpinned; most
+   dependency clones reuse an existing directory without revision validation.
+   LAME's archive has no input checksum. The build script modifies x265 CMake
+   policy settings and FFmpeg's generated `config.h` for Zig, emits compiler
+   wrappers/toolchain files, and rewrites pkg-config files. Preserve those
+   instructions and the actual patches/configuration, with change notices.
+   libjpeg-turbo is vendored in `vendor/libjpeg-turbo` as an unmodified copy
+   of Chromium's tree; Chromium's changes are listed in its `README.chromium`,
+   `CHROMIUM_PIN` records the Chromium revision, and `build.rs` holds the
+   compile flags (symbol prefix, 12/16-bit objects, SIMD defines, NASM flags).
+4. For Windows, retain the pinned vcpkg ports, resolved source archives and
+   patches, triplets, feature selections, installed copyright files, and the
+   source/build dependencies for the separately downloaded rav1e staticlib.
+   Keep the x265 alpha/multilib build instructions as well.
+5. Recover the release's resolved Cargo dependencies and toolchains where
+   possible. For future releases, record lockfiles, immutable source identities,
+   build environment and the actual linked library list alongside each binary.
+   Byte-for-byte reproducibility is useful verification, not itself the GPL's
+   definition of Corresponding Source.
+6. Assemble the source materials and notices, test rebuilding each target from
+   them, and resolve differences. Check upstream embedded subcomponent notices
+   and runtime terms; the reference notice inventory is not complete evidence.
+7. Choose and maintain a version-specific source distribution location. Put
+   working links and checksums beside npm binaries and FFmpeg downloads and in
+   every platform package; verify access without credentials. Do not invent
+   source URLs or publish placeholders. Existing 1.4.2 tarballs cannot be fixed
+   by editing the next version's package files alone.
+
+## Maintainer decision
+
+The original MIT license is preserved. Choose the future binary distribution
+approach before publishing:
+
+- Retain the GPL-enabled codecs and meet the combined-work GPLv3 distribution
+  requirements, including complete corresponding-source delivery and notices.
+- Design and rebuild a distribution without GPL components. This requires an
+  actual codec/build/dependency review, removing GPL configure options and
+  affected code, capability tests, and continued satisfaction of applicable
+  LGPL and other dependency terms. It is not an MIT-only shortcut; static
+  LGPL linking has its own requirements.
+
+This patch makes neither choice and removes no codecs. It provides an
+engineering inventory of the evidence and gaps, not a legal determination.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,87 @@
+# Third-party notices
+
+The native addon uses FFmpeg and the dependencies below. Version entries are
+build-recipe references, not a verified bill of materials for each released
+binary. All platforms receive this combined notice bundle; inclusion of a
+license text does not mean that component is present on every platform.
+
+Full reference texts, copyright notices, and patent notices are in `licenses/`.
+[licenses/manifest.json](licenses/manifest.json) records where each text was
+obtained and its SHA-256 digest. A source-file header excerpt is explicitly
+marked there. Those digests identify notice files, not source archives or
+binaries. Original project source remains under [MIT](LICENSE); see
+[LICENSES.md](LICENSES.md) for the combined binary distribution.
+
+## Configured dependencies
+
+The Unix versions come from `tools/build-ffmpeg/src/main.rs`. Windows uses
+vcpkg commit `74e6536215718009aae747d86d84b78376bf9e09` plus separately built
+x265 and, on x64, a downloaded rav1e static library. The vcpkg baseline is pinned;
+its port patches and actual resolved build inputs must also be retained.
+
+| Component                  | Build reference                                                                                  | Reference terms and files in `licenses/`                                                                               |
+| -------------------------- | ------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------- |
+| FFmpeg                     | `n9.0.2`, all targets                                                                            | GPL-3.0-or-later for the configured build; `ffmpeg-LICENSE.md.txt`, `ffmpeg-COPYING.*.txt`                             |
+| x264                       | Unix: unpinned shallow clone; Windows: `0.164.3108` / `31e19f92f00c7003fa115047ce50978bc98c3a0d` | GPL-2.0-or-later; `x264-COPYING.txt`, `x264-x264.h.txt`                                                                |
+| x265                       | `Release_4.1`, multilib with alpha                                                               | GPL-2.0-or-later; `x265-COPYING.txt`, `x265-source-x265.h.txt`                                                         |
+| libvpx                     | `v1.15.2`                                                                                        | BSD-3-Clause and patent grant; `libvpx-LICENSE.txt`, `libvpx-PATENTS.txt`                                              |
+| libaom                     | `v3.13.1`; excluded from Windows x64 recipe                                                      | BSD-2-Clause and AOM patent license; `aom-LICENSE.txt`, `aom-PATENTS.txt`                                              |
+| rav1e                      | `v0.8.1`, Windows x64 prebuilt archive                                                           | BSD-2-Clause and patent grant; `rav1e-LICENSE.txt`, `rav1e-PATENTS.txt`; transitive dependencies require inventory     |
+| dav1d                      | Windows vcpkg `1.5.1`                                                                            | BSD-2-Clause; `dav1d-COPYING.txt`                                                                                      |
+| Opus                       | `v1.5.2`                                                                                         | BSD-style notice and patent references; `opus-COPYING.txt`                                                             |
+| LAME / libmp3lame / mpghip | `3.100`                                                                                          | GNU Library GPL v2 text and upstream guidance; `lame-COPYING.txt`, `lame-LICENSE.txt`; retain component-level headers  |
+| libogg                     | Unix `v1.3.5`; Windows `v1.3.6`                                                                  | BSD-3-Clause; `ogg-COPYING.txt`, `ogg-windows-COPYING.txt`                                                             |
+| libvorbis                  | `v1.3.7`                                                                                         | BSD-3-Clause; `vorbis-COPYING.txt`                                                                                     |
+| libwebp / libsharpyuv      | `v1.6.0`                                                                                         | BSD-3-Clause and patent grant; `libwebp-COPYING.txt`, `libwebp-PATENTS.txt`                                            |
+| zlib                       | `v1.3.1`                                                                                         | zlib license; `zlib-LICENSE.txt`                                                                                       |
+| JPEG XL / libjxl           | `v0.11.1`                                                                                        | BSD-3-Clause and patent grant; `libjxl-LICENSE.txt`, `libjxl-PATENTS.txt`                                              |
+| Highway                    | `1.3.0`                                                                                          | Apache-2.0 / BSD-3-Clause reference texts; `highway-LICENSE.txt`, `highway-LICENSE-BSD3.txt`; inspect file-level terms |
+| Brotli                     | `v1.1.1`                                                                                         | MIT; `brotli-LICENSE.txt`                                                                                              |
+| Little CMS 2               | Unix `lcms2.16`; Windows `lcms2.17`                                                              | MIT; `lcms2-LICENSE.txt`, `lcms2-windows-LICENSE.txt`                                                                  |
+| NVIDIA codec headers       | Linux recipe `n13.0.19.0`, except armv7                                                          | MIT; `nv-codec-headers-nvEncodeAPI.h.txt`                                                                              |
+| libjpeg-turbo              | `3.1.0` from Chrome `155.0.8059.79` DEPS, in `vendor/libjpeg-turbo`, all targets                 | IJG License, BSD-3-Clause and zlib; `libjpeg-turbo-LICENSE.md.txt`, `libjpeg-turbo-README.ijg.txt`; see below          |
+| Blink JPEG decoder         | `jpeg_image_decoder.cc` from Chrome `155.0.8059.79`, rewritten as `src/ffi/jpeg_blink.c`         | LGPL-2.1-or-later, MPL-1.1 or GPL-2.0; notice in `src/ffi/jpeg_blink.c`; `ffmpeg-COPYING.LGPLv2.1.txt`                 |
+
+This software is based in part on the work of the Independent JPEG Group.
+FFmpeg's licensing explanation identifies IJG-derived codec files requiring
+this attribution, and so does the IJG License of libjpeg-turbo. The checked-in
+build recipe does not modify FFmpeg's files. `vendor/libjpeg-turbo` is an
+unmodified copy of files from Chromium's libjpeg-turbo tree, and `build.rs`
+compiles it as is. Chromium's own changes to libjpeg-turbo (`jpeglibmangler.h`,
+included from `jpeglib.h`, and the hand-edited `jconfig.h` and `jconfigint.h`)
+are listed in `vendor/libjpeg-turbo/README.chromium`; `CHROMIUM_LICENSE` and
+`simd/nasm/jsimdext.inc` there hold the notices that `jpeglibmangler.h`,
+`jsimd.h`, `jsimddct.h` and most SIMD files refer to (the Neon files hold their
+zlib notice themselves). Byte-for-byte copies are packaged as
+`licenses/libjpeg-turbo-CHROMIUM_LICENSE.txt` and
+`licenses/libjpeg-turbo-jsimdext.inc.txt`. The SIMD code bears the zlib License,
+which `LICENSE.md` says the IJG License subsumes in the built library. Other
+builds must document any changes to these files.
+
+`src/ffi/jpeg_blink.c` is a C rewrite of Blink's `jpeg_image_decoder.cc`:
+Copyright (C) 2006 Apple Computer, Inc.; portions Copyright (C) 2001-6
+mozilla.org. A recipient may use it under the LGPL 2.1 or later, the MPL 1.1 or
+the GPL 2.0; its header holds the full notice.
+
+## Inventory still required for release
+
+These reference texts are an initial notice inventory. They do not establish
+that every upstream subcomponent notice or actual linked dependency has been
+captured. In particular:
+
+- Capture the exact x264 revision for every Unix build; the reference header in
+  this bundle is identified by its own commit, not asserted to be the binary's.
+- Preserve vcpkg port patches and installed `share/*/copyright` files, checking
+  their contents against the exact source trees and transitive dependencies.
+- Inventory Rust dependencies (including rav1e's), the Rust standard library,
+  statically linked C/C++/compiler runtimes, and any platform-specific notices.
+  `Cargo.lock` is currently ignored and release toolchains are not all pinned.
+- `build.rs` searches local library paths and may link additional optional
+  libraries. These custom builds need their own notice and source inventory.
+- Resolve and publish the matching source materials described in
+  [SOURCE_DISTRIBUTION.md](SOURCE_DISTRIBUTION.md).
+
+Upstream entry points: [FFmpeg](https://ffmpeg.org/legal.html),
+[x264](https://code.videolan.org/videolan/x264),
+[x265](https://bitbucket.org/multicoreware/x265_git), and
+[vcpkg baseline](https://github.com/microsoft/vcpkg/tree/74e6536215718009aae747d86d84b78376bf9e09/ports).

package/licenses/aom-LICENSE.txt

@@ -0,0 +1,27 @@
+Copyright (c) 2016, Alliance for Open Media. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions
+are met:
+
+1. Redistributions of source code must retain the above copyright
+   notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+   notice, this list of conditions and the following disclaimer in
+   the documentation and/or other materials provided with the
+   distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
+FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
+INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
+BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
+ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+

package/licenses/aom-PATENTS.txt

@@ -0,0 +1,108 @@
+Alliance for Open Media Patent License 1.0
+
+1. License Terms.
+
+1.1. Patent License. Subject to the terms and conditions of this License, each
+     Licensor, on behalf of itself and successors in interest and assigns,
+     grants Licensee a non-sublicensable, perpetual, worldwide, non-exclusive,
+     no-charge, royalty-free, irrevocable (except as expressly stated in this
+     License) patent license to its Necessary Claims to make, use, sell, offer
+     for sale, import or distribute any Implementation.
+
+1.2. Conditions.
+
+1.2.1. Availability. As a condition to the grant of rights to Licensee to make,
+       sell, offer for sale, import or distribute an Implementation under
+       Section 1.1, Licensee must make its Necessary Claims available under
+       this License, and must reproduce this License with any Implementation
+       as follows:
+
+       a. For distribution in source code, by including this License in the
+          root directory of the source code with its Implementation.
+
+       b. For distribution in any other form (including binary, object form,
+          and/or hardware description code (e.g., HDL, RTL, Gate Level Netlist,
+          GDSII, etc.)), by including this License in the documentation, legal
+          notices, and/or other written materials provided with the
+          Implementation.
+
+1.2.2. Additional Conditions. This license is directly from Licensor to
+       Licensee.  Licensee acknowledges as a condition of benefiting from it
+       that no rights from Licensor are received from suppliers, distributors,
+       or otherwise in connection with this License.
+
+1.3. Defensive Termination. If any Licensee, its Affiliates, or its agents
+     initiates patent litigation or files, maintains, or voluntarily
+     participates in a lawsuit against another entity or any person asserting
+     that any Implementation infringes Necessary Claims, any patent licenses
+     granted under this License directly to the Licensee are immediately
+     terminated as of the date of the initiation of action unless 1) that suit
+     was in response to a corresponding suit regarding an Implementation first
+     brought against an initiating entity, or 2) that suit was brought to
+     enforce the terms of this License (including intervention in a third-party
+     action by a Licensee).
+
+1.4. Disclaimers. The Reference Implementation and Specification are provided
+     "AS IS" and without warranty. The entire risk as to implementing or
+     otherwise using the Reference Implementation or Specification is assumed
+     by the implementer and user. Licensor expressly disclaims any warranties
+     (express, implied, or otherwise), including implied warranties of
+     merchantability, non-infringement, fitness for a particular purpose, or
+     title, related to the material. IN NO EVENT WILL LICENSOR BE LIABLE TO
+     ANY OTHER PARTY FOR LOST PROFITS OR ANY FORM OF INDIRECT, SPECIAL,
+     INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY CHARACTER FROM ANY CAUSES OF
+     ACTION OF ANY KIND WITH RESPECT TO THIS LICENSE, WHETHER BASED ON BREACH
+     OF CONTRACT, TORT (INCLUDING NEGLIGENCE), OR OTHERWISE, AND WHETHER OR
+     NOT THE OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+2. Definitions.
+
+2.1. Affiliate.  "Affiliate" means an entity that directly or indirectly
+     Controls, is Controlled by, or is under common Control of that party.
+
+2.2. Control. "Control" means direct or indirect control of more than 50% of
+     the voting power to elect directors of that corporation, or for any other
+     entity, the power to direct management of such entity.
+
+2.3. Decoder.  "Decoder" means any decoder that conforms fully with all
+     non-optional portions of the Specification.
+
+2.4. Encoder.  "Encoder" means any encoder that produces a bitstream that can
+     be decoded by a Decoder only to the extent it produces such a bitstream.
+
+2.5. Final Deliverable.  "Final Deliverable" means the final version of a
+     deliverable approved by the Alliance for Open Media as a Final
+     Deliverable.
+
+2.6. Implementation.  "Implementation" means any implementation, including the
+     Reference Implementation, that is an Encoder and/or a Decoder. An
+     Implementation also includes components of an Implementation only to the
+     extent they are used as part of an Implementation.
+
+2.7. License. "License" means this license.
+
+2.8. Licensee. "Licensee" means any person or entity who exercises patent
+     rights granted under this License.
+
+2.9. Licensor.  "Licensor" means (i) any Licensee that makes, sells, offers
+     for sale, imports or distributes any Implementation, or (ii) a person
+     or entity that has a licensing obligation to the Implementation as a
+     result of its membership and/or participation in the Alliance for Open
+     Media working group that developed the Specification.
+
+2.10. Necessary Claims.  "Necessary Claims" means all claims of patents or
+      patent applications, (a) that currently or at any time in the future,
+      are owned or controlled by the Licensor, and (b) (i) would be an
+      Essential Claim as defined by the W3C Policy as of February 5, 2004
+      (https://www.w3.org/Consortium/Patent-Policy-20040205/#def-essential)
+      as if the Specification was a W3C Recommendation; or (ii) are infringed
+      by the Reference Implementation.
+
+2.11. Reference Implementation. "Reference Implementation" means an Encoder
+      and/or Decoder released by the Alliance for Open Media as a Final
+      Deliverable.
+
+2.12. Specification. "Specification" means the specification designated by
+      the Alliance for Open Media as a Final Deliverable for which this
+      License was issued.
+

package/licenses/brotli-LICENSE.txt

@@ -0,0 +1,19 @@
+Copyright (c) 2009, 2010, 2013-2016 by the Brotli Authors.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

package/licenses/dav1d-COPYING.txt

@@ -0,0 +1,23 @@
+Copyright © 2018-2019, VideoLAN and dav1d authors
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice,
+   this list of conditions and the following disclaimer in the documentation
+   and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
+ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.