@push.rocks/smartnftables 2.5.1 → 2.6.0

package/native-notices/readme.md

@@ -1,36 +1,42 @@
 # Native distribution notices
 
-The managed policy binary is MIT-licensed package code, statically linked with
-Rust's standard library, compiler builtins, musl and the locked Cargo dependencies.
-The JavaScript dependency packages retain their own distributed notices.
-
-`manifest.json` records the exact Cargo.lock hash, compiler identity, upstream
-source commits, notice hashes and installed musl target runtime artifact hashes.
-`scripts/check-native-notices.mjs` rejects builds if that frozen inventory no
-longer matches. Refresh and review this inventory when changing the native
-dependency graph or toolchain before distributing another binary.
-
-`crates/` contains verbatim license/notice files from all 21 locked registry
-packages, including build dependencies. `rust-standard-library/` contains the
-upstream Rust MIT/Apache licenses, the standard-library attribution and dependency
-notices selected from the installed Rust toolchain COPYRIGHT.html using its exact
-library/Cargo.lock, compiler-builtins' combined license, musl 1.2.5's complete
-copyright notice, Unicode License V3 and LLVM libunwind's license. The Rust CI musl
-recipe at the recorded source commit includes the two CVE-2025-26519 patches.
-The standard-library inventory includes other-platform dependencies as an
-attribution superset; it does not assert that those dependencies are linked into
-these Linux binaries. addr2line 0.25.1 notices come from the checksum-verified
-published crate because the toolchain's aggregate notice file omits that version.
-
-Sources:
-
-- https://github.com/rust-lang/rust/tree/59807616e1fa2540724bfbac14d7976d7e4a3860
-- https://github.com/rust-lang/llvm-project/tree/1cb4e3833c1919c2e6fb579a23ac0e2b22587b7e
-- https://git.musl-libc.org/cgit/musl/tree/COPYRIGHT?h=v1.2.5
-- https://www.unicode.org/license.txt
-- The exact crates.io versions and source identifiers in `manifest.json`.
-
-The isolated QEMU fixtures, guest kernel, guest utilities and modules are not
-included in the package or its native binaries. Kernel source files used for API
-research are not distributed. This is a native artifact notice inventory, not an
-assertion that build tools or test fixtures are part of the runtime distribution.
+Generated by `tsrust notices` from `rust/Cargo.lock`, the Rust 1.95.0 toolchain
+(commit `59807616e1fa2540724bfbac14d7976d7e4a3860`)
+and the `@git.zone/tsrust` configuration. Do not edit these files by hand:
+`tsrust notices --check` verifies them before every build.
+
+These notices accompany the native executables built for the targets below. The
+package's own code is covered by its own license.
+
+## Targets
+
+| Target | Rust target | Linkage | Cargo packages |
+| --- | --- | --- | --- |
+| linux_amd64_musl | x86_64-unknown-linux-musl | static musl | 21 |
+| linux_arm64_musl | aarch64-unknown-linux-musl | static musl | 21 |
+
+## Contents
+
+- `crates/`: the license and notice files of the 21 third-party Cargo packages compiled
+  for these targets (normal and build dependencies, including procedural macros;
+  development dependencies are excluded), copied verbatim. `manifest.json` records each
+  package's license expression, the texts that cover it, and the targets it is built for.
+- `rust/`: the Rust standard library copyright inventory and license texts from the
+  toolchain, and compiler-builtins' license.
+  `rust/crates/` holds the license files of 5 standard-library dependencies the
+  inventory does not list.
+- `runtime/`: license texts of the C runtime described below.
+- `manifest.json`: the inventory and the SHA-256 digest of every other file.
+
+## Runtime libraries
+
+The Linux executables may contain GCC runtime startup code and support routines, licensed
+under the GNU General Public License version 3 or later with the GCC Runtime Library
+Exception 3.1 (`runtime/gcc/`). The exception permits distributing the executables under
+the package's own terms.
+
+The static musl executables contain musl 1.2.5, the C library shipped with the Rust
+toolchain, under the MIT license (`runtime/musl-1.2.5/copyright`).
+
+The Rust standard library and its runtime (including LLVM libunwind in static musl
+executables) are covered by `rust/`.