@satzstrom/linux-x64 0.1.0

package/compliance/bun/source-manifest.json

@@ -0,0 +1,243 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "schemaVersion": 1,
+  "generatedFor": "Satzstrom Bun-compiled platform binaries",
+  "runtime": {
+    "name": "Bun",
+    "version": "1.4.0",
+    "license": "MIT with statically linked third-party components; see licenses/BUN-LICENSE.md",
+    "repository": "https://github.com/oven-sh/bun.git",
+    "revision": "34cbb9a40b4bd1bd767d134a7065e66c2432a676",
+    "tree": "61453622872e362c02b43a1ec0dc778a9b4a7285",
+    "sourceArchive": {
+      "url": "https://codeload.github.com/oven-sh/bun/tar.gz/34cbb9a40b4bd1bd767d134a7065e66c2432a676",
+      "sha256": "d44cad3fc8a3ab2e59308af42b022d2401b3425b98ffde535bfc02387dac4771",
+      "bytes": 64069192
+    },
+    "npmBootstrap": {
+      "package": "bun",
+      "version": "1.4.0",
+      "integrity": "sha512-iRiFkc2W7UVpCyZXO9tod45TP9QCyN19fWqbpeN/jaM/K7uzeHYx/OSPsahMJazGKBgPsnxRt+4Jc43d8BcHZw=="
+    }
+  },
+  "javascriptCore": {
+    "name": "oven-sh/WebKit (JavaScriptCore, WTF, and bmalloc)",
+    "license": "GNU Library General Public License version 2 and component-specific permissive licenses",
+    "repository": "https://github.com/oven-sh/WebKit.git",
+    "revision": "0f966e81b78c84bb23213e391bc679c4ef83e56b",
+    "tree": "e9590edf1ab6c32e20f83b70daec7314e0bfe261",
+    "pinEvidence": "scripts/build/deps/webkit.ts at the pinned Bun revision",
+    "fetch": {
+      "method": "git",
+      "command": "git fetch --depth 1 origin 0f966e81b78c84bb23213e391bc679c4ef83e56b"
+    }
+  },
+  "platformCompilerPackages": {
+    "win32-x64": {
+      "package": "@oven/bun-windows-x64",
+      "version": "1.4.0",
+      "integrity": "sha512-jRKv1NPLznMSZY5BEWciMF7zv0Tiyo2pQSxAJ3w+YWJ6y3VWNJQQQdLlV5Jx8lbOFDrJdrc9dD3GV17k3BP41A=="
+    },
+    "linux-x64": {
+      "package": "@oven/bun-linux-x64",
+      "version": "1.4.0",
+      "integrity": "sha512-Du44zebtPXJujvMLmtIxEQ6ykOhYt7L/Q+YIGVm+Yy+Pj/fpOnq60ggwIpKp/pGAFbYHNiTrA3JTjuZ9MTbZIg=="
+    },
+    "darwin-x64": {
+      "package": "@oven/bun-darwin-x64",
+      "version": "1.4.0",
+      "integrity": "sha512-cIrhwOr0SPEraewznhC+c/k6TG8bwFn5uZ4EJuXwjiKJLcAF36q7/bGjWkeXSe48JwMcPRUR054JXF7+cRwSSA=="
+    },
+    "darwin-arm64": {
+      "package": "@oven/bun-darwin-aarch64",
+      "version": "1.4.0",
+      "integrity": "sha512-GCpf8QuFLsyioVawP5HrMxA1ZRBlu6Hq9RNnSc3UTUWAzIxBso9trjoZczw1HdgpqSssFkszfIV2zmOzFTjhkw=="
+    }
+  },
+  "directBuildDependencies": [
+    {
+      "name": "boringssl",
+      "repository": "https://github.com/oven-sh/boringssl.git",
+      "revision": "2288897e2e716330490893d226b4f079f9da9e0c",
+      "tree": "382c6312d255ec3ed9623688f2579135d34e161d"
+    },
+    {
+      "name": "brotli",
+      "repository": "https://github.com/google/brotli.git",
+      "upstreamPin": "v1.1.0",
+      "revision": "ed738e842d2fbdf2d6459e39267a633c4a9b2f5d",
+      "tree": "66d65f2a9bf3dec372ceda26358ccc78ac3decab"
+    },
+    {
+      "name": "c-ares",
+      "repository": "https://github.com/c-ares/c-ares.git",
+      "revision": "c7a3138dcfe3bb0eaaf10c0c24c36dc66dc790ab",
+      "tree": "14315b31d0b2cf5cfde9f0b1544176221393295b"
+    },
+    {
+      "name": "HdrHistogram_c",
+      "repository": "https://github.com/HdrHistogram/HdrHistogram_c.git",
+      "revision": "be60a9987ee48d0abf0d7b6a175bad8d6c1585d1",
+      "tree": "bf5e7a332ae1160b35cc2728bc6800cce5b86f3f"
+    },
+    {
+      "name": "highway",
+      "repository": "https://github.com/google/highway.git",
+      "revision": "2607d3b5b0113992fe84d3848859eae13b3b52c1",
+      "tree": "e240dc0bc54afd953256adbe67eb2f267beb9d86"
+    },
+    {
+      "name": "libarchive",
+      "repository": "https://github.com/libarchive/libarchive.git",
+      "revision": "ded82291ab41d5e355831b96b0e1ff49e24d8939",
+      "tree": "750d581c1606b7a02f4a8cbdb2485219b7f44215"
+    },
+    {
+      "name": "libdeflate",
+      "repository": "https://github.com/ebiggers/libdeflate.git",
+      "revision": "c8c56a20f8f621e6a966b716b31f1dedab6a41e3",
+      "tree": "1afcaaba34b5d30e1d95c6bd4bf7172ac683769e"
+    },
+    {
+      "name": "libjpeg-turbo",
+      "repository": "https://github.com/libjpeg-turbo/libjpeg-turbo.git",
+      "revision": "e352b02f794f701407b39af08576035ba3360d60",
+      "tree": "220986f36b2aab31da15b05e1de9df0bbc7d886f"
+    },
+    {
+      "name": "libspng",
+      "repository": "https://github.com/randy408/libspng.git",
+      "revision": "fb768002d4288590083a476af628e51c3f1d47cd",
+      "tree": "6f98e1ffb7272520991831281282627c6b0ccefb"
+    },
+    {
+      "name": "libuv",
+      "repository": "https://github.com/oven-sh/libuv.git",
+      "revision": "8023581113b276e7c1aee3f82da57ca0893faab1",
+      "tree": "675bfb72c541515f2d05034e8974d9f7a40cd286"
+    },
+    {
+      "name": "libwebp",
+      "repository": "https://github.com/webmproject/libwebp.git",
+      "revision": "b7e29b9d75bd31422b00c2a446d49d7af06c328d",
+      "tree": "3a7830b9713d9187cf1211862d4571ff58b0d507"
+    },
+    {
+      "name": "lol-html",
+      "repository": "https://github.com/oven-sh/lol-html.git",
+      "revision": "725ce499aa9b71e38b7a2d0a9fbb6d7294a4079e",
+      "tree": "00a6cb3974901e9acbfbeac9799f55429f909000"
+    },
+    {
+      "name": "ls-hpack",
+      "repository": "https://github.com/litespeedtech/ls-hpack.git",
+      "revision": "8905c024b6d052f083a3d11d0a169b3c2735c8a1",
+      "tree": "1186c2a8807c901a609dbcdb6ec90c14ca531001"
+    },
+    {
+      "name": "ls-qpack",
+      "repository": "https://github.com/litespeedtech/ls-qpack.git",
+      "revision": "1e9c5b8e59f8161c54f168a570c8bfdc59ded0c3",
+      "tree": "aee985fcba89b5ab7c84915624664f6c3955d71d"
+    },
+    {
+      "name": "lsquic",
+      "repository": "https://github.com/litespeedtech/lsquic.git",
+      "revision": "3181911301b1aa4f54c1ed690901abc674ee08fb",
+      "tree": "b8d6097853ad39af0258c90cac54f9e7657c6417"
+    },
+    {
+      "name": "mimalloc",
+      "repository": "https://github.com/oven-sh/mimalloc.git",
+      "revision": "6a14aee24315e503fa295a1fa90fe8b24ad91774",
+      "tree": "7c723eb64f0240e061a7256d091c69e7ca5f280e"
+    },
+    {
+      "name": "picohttpparser",
+      "repository": "https://github.com/h2o/picohttpparser.git",
+      "revision": "066d2b1e9ab820703db0837a7255d92d30f0c9f5",
+      "tree": "fb2963624d8463d72e1cdc79e2f1145003af0a1f"
+    },
+    {
+      "name": "rust-argon2",
+      "repository": "https://github.com/sru-systems/rust-argon2.git",
+      "revision": "ed81866f163f0c7026aa6fd8388adf37242eb32a",
+      "tree": "6fb0d43d620ce5fe287c6f3d611b8d593896929b"
+    },
+    {
+      "name": "tinycc",
+      "repository": "https://github.com/oven-sh/tinycc.git",
+      "revision": "05f0fafaa3be31e31d7b4b5c17dc60f62c991171",
+      "tree": "a04dd2cfd0f9d9ad96c3bd4e20db3f0bedbcb8e1"
+    },
+    {
+      "name": "zlib-ng",
+      "repository": "https://github.com/zlib-ng/zlib-ng.git",
+      "revision": "12731092979c6d07f42da27da673a9f6c7b13586",
+      "tree": "baa7e2050b51c3db4c88bc8f2daf93ca0ae88a98"
+    },
+    {
+      "name": "zstd",
+      "repository": "https://github.com/facebook/zstd.git",
+      "revision": "f8745da6ff1ad1e7bab384bd1f9d742439278e99",
+      "tree": "1a3cb277e9b9b37b01811a3c65f6c25d46a8f241"
+    }
+  ],
+  "materials": [
+    {
+      "path": "licenses/BUN-LICENSE.md",
+      "sha256": "51402e15bdab948668eb5bcca05c096bc8c47beaf96f0db4b41777faf546ba4f",
+      "origin": "Bun LICENSE.md at the pinned revision"
+    },
+    {
+      "path": "licenses/JAVASCRIPTCORE-COPYING.LIB",
+      "sha256": "5094ecb9c9dcd0eadc34f3c11511d9b5535063032bc150164ecd1a5d5a445547",
+      "origin": "WebKit Source/JavaScriptCore/COPYING.LIB at the pinned revision"
+    },
+    {
+      "path": "licenses/BUN-CLAP-UNLICENSE.txt",
+      "sha256": "88d9b4eb60579c191ec391ca04c16130572d7eedc4a86daa58bf28c6e14c9bcd",
+      "origin": "Bun src/clap/LICENSE at the pinned revision"
+    },
+    {
+      "path": "licenses/bun-dependencies/manifest.json",
+      "sha256": "c9ef0eec0de59ad81a9a45fc25ba9d8c665d2f3ba1d30be02864224987795ee3",
+      "origin": "Hash inventory for direct native Bun dependency license and notice texts"
+    },
+    {
+      "path": "licenses/THIRD-PARTY-SOURCE-NOTICES.md",
+      "sha256": "a2d660d804337f286ea5e632e97490a8f94e69455cdcecc177265ab8bc8c319b",
+      "origin": "Index of Bun's exact third-party source notices"
+    },
+    {
+      "path": "licenses/WEBKIT-JSC-THIRD-PARTY-NOTICES.md",
+      "sha256": "e2169b77c9a55ea2a62a1fb737ac8c09966ca744537117adbd1c8a051dc12b90",
+      "origin": "Exact license paths and notices in the pinned WebKit source"
+    },
+    {
+      "path": "licenses/webkit/ICU-LICENSE.txt",
+      "sha256": "de596f6e3482bab99d2425af16add38f959ebc17a5883c6302970355853b6539",
+      "origin": "WebKit Source/WTF/icu/LICENSE at the pinned revision"
+    },
+    {
+      "path": "licenses/webkit/DTOA-COPYING.txt",
+      "sha256": "4af93c12062c58058378de2397dc1c92bbff9ddfb1d583a01c84127557ce97ca",
+      "origin": "WebKit Source/WTF/wtf/dtoa/COPYING at the pinned revision"
+    },
+    {
+      "path": "licenses/webkit/DTOA-LICENSE.txt",
+      "sha256": "4af93c12062c58058378de2397dc1c92bbff9ddfb1d583a01c84127557ce97ca",
+      "origin": "WebKit Source/WTF/wtf/dtoa/LICENSE at the pinned revision"
+    },
+    {
+      "path": "licenses/webkit/FAST-FLOAT-LICENSE.txt",
+      "sha256": "097a889aa954d04e088b790b10a4014d6189561d0a6013935a73ce3d4ddaaf06",
+      "origin": "WebKit Source/WTF/wtf/fast_float/LICENSE at the pinned revision"
+    },
+    {
+      "path": "licenses/webkit/MIMALLOC-LICENSE.txt",
+      "sha256": "82ade5d7d9b029044b5fbbc326207fc47c2d44ee4dd71e8a559c36d728217de9",
+      "origin": "WebKit Source/bmalloc/mimalloc/mimalloc/LICENSE at the pinned revision"
+    }
+  ]
+}

package/compliance/bun/tools/extract-standalone-payload.mjs

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, resolve } from "node:path";
+import { findStandalonePayload } from "./standalone-payload.mjs";
+
+const original = requiredArgument("--original");
+const output = requiredArgument("--output");
+const executable = await readFile(resolve(original));
+const payload = findStandalonePayload(executable);
+await mkdir(dirname(resolve(output)), { recursive: true });
+await writeFile(resolve(output), payload.bytes);
+console.log(
+  JSON.stringify(
+    { output: resolve(output), bytes: payload.bytes.length, sha256: payload.sha256 },
+    null,
+    2,
+  ),
+);
+
+function requiredArgument(name) {
+  const index = process.argv.indexOf(name);
+  const value = index >= 0 ? process.argv[index + 1] : undefined;
+  if (!value) throw new Error(`${name} is required.`);
+  return value;
+}

package/compliance/bun/tools/fetch-corresponding-source.mjs

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+import { execFileSync } from "node:child_process";
+import { mkdir, readFile } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const complianceRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const manifest = JSON.parse(await readFile(join(complianceRoot, "source-manifest.json"), "utf8"));
+const destination = resolve(requiredArgument("--destination"));
+await mkdir(destination, { recursive: true });
+
+fetchRepository("bun", manifest.runtime);
+fetchRepository("WebKit", manifest.javascriptCore);
+
+function fetchRepository(directory, source) {
+  const target = join(destination, directory);
+  try {
+    run("git", ["-C", target, "rev-parse", "--git-dir"], true);
+  } catch {
+    run("git", ["init", target]);
+    run("git", ["-C", target, "remote", "add", "origin", source.repository]);
+  }
+  run("git", ["-C", target, "config", "core.longpaths", "true"]);
+  run("git", ["-C", target, "fetch", "--depth", "1", "origin", source.revision]);
+  run("git", ["-C", target, "checkout", "--detach", source.revision]);
+  const revision = run("git", ["-C", target, "rev-parse", "HEAD"], true).trim();
+  const tree = run("git", ["-C", target, "rev-parse", "HEAD^{tree}"], true).trim();
+  if (revision !== source.revision || tree !== source.tree) {
+    throw new Error(
+      `${directory} identity mismatch: expected ${source.revision}/${source.tree}, got ${revision}/${tree}`,
+    );
+  }
+  console.log(`${directory}: ${revision} (tree ${tree})`);
+}
+
+function requiredArgument(name) {
+  const index = process.argv.indexOf(name);
+  const value = index >= 0 ? process.argv[index + 1] : undefined;
+  if (!value) throw new Error(`${name} is required.`);
+  return value;
+}
+
+function run(command, args, capture = false) {
+  return execFileSync(command, args, {
+    encoding: capture ? "utf8" : undefined,
+    stdio: capture ? ["ignore", "pipe", "pipe"] : "inherit",
+  });
+}

package/compliance/bun/tools/relink-standalone-payload.mjs

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+import { execFileSync } from "node:child_process";
+import { chmod, mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { findStandalonePayload } from "./standalone-payload.mjs";
+
+const originalPath = resolve(requiredArgument("--original"));
+const runtimePath = resolve(requiredArgument("--runtime"));
+const outputPath = resolve(requiredArgument("--output"));
+const codesignIdentity = optionalArgument("--codesign-identity") ?? "-";
+const temporary = await mkdtemp(join(tmpdir(), "satzstrom-bun-relink-"));
+
+try {
+  const original = await readFile(originalPath);
+  const originalPayload = findStandalonePayload(original);
+  const carrierPath = join(temporary, process.platform === "win32" ? "carrier.exe" : "carrier");
+  const entryPath = join(temporary, "carrier.js");
+
+  let fillerLength = 0;
+  let carrier;
+  let carrierPayload;
+  for (let attempt = 0; attempt < 8; attempt += 1) {
+    await writeFile(
+      entryPath,
+      `globalThis.__satzstromRelinkCarrier=${JSON.stringify("x".repeat(fillerLength))};\n`,
+    );
+    run(runtimePath, ["build", "--compile", "--minify", `--outfile=${carrierPath}`, entryPath]);
+    carrier = await readFile(carrierPath);
+    carrierPayload = findStandalonePayload(carrier);
+    const delta = originalPayload.bytes.length - carrierPayload.bytes.length;
+    if (delta === 0) break;
+    if (fillerLength + delta < 0) {
+      throw new Error(
+        `The rebuilt runtime produced a carrier payload larger than the Satzstrom payload by ${-delta} bytes.`,
+      );
+    }
+    fillerLength += delta;
+  }
+
+  if (!carrier || !carrierPayload || carrierPayload.bytes.length !== originalPayload.bytes.length) {
+    throw new Error("Unable to create a carrier with the exact standalone payload size.");
+  }
+
+  originalPayload.bytes.copy(carrier, carrierPayload.start);
+  await mkdir(dirname(outputPath), { recursive: true });
+  await writeFile(outputPath, carrier);
+  if (process.platform !== "win32") await chmod(outputPath, 0o755);
+
+  if (process.platform === "darwin") {
+    run("codesign", ["--force", "--sign", codesignIdentity, outputPath]);
+  }
+
+  const outputPayload = findStandalonePayload(await readFile(outputPath));
+  if (outputPayload.sha256 !== originalPayload.sha256) {
+    throw new Error("Payload verification failed after relinking.");
+  }
+
+  console.log(
+    JSON.stringify(
+      {
+        output: outputPath,
+        payloadBytes: outputPayload.bytes.length,
+        payloadSha256: outputPayload.sha256,
+        runtime: runtimePath,
+      },
+      null,
+      2,
+    ),
+  );
+} finally {
+  await rm(temporary, { recursive: true, force: true });
+}
+
+function requiredArgument(name) {
+  const value = optionalArgument(name);
+  if (!value) throw new Error(`${name} is required.`);
+  return value;
+}
+
+function optionalArgument(name) {
+  const index = process.argv.indexOf(name);
+  return index >= 0 ? process.argv[index + 1] : undefined;
+}
+
+function run(command, args) {
+  execFileSync(command, args, { stdio: ["ignore", process.stderr, "inherit"] });
+}

package/compliance/bun/tools/standalone-payload.mjs

@@ -0,0 +1,47 @@
+import { createHash } from "node:crypto";
+
+const trailer = Buffer.from("\n---- Bun! ----\n", "utf8");
+// Bun 1.4.0 `Offsets` on the supported 64-bit targets:
+// usize + StringPointer + u32 + StringPointer + Flags, rounded to 8-byte alignment.
+const offsetsSize = 32;
+
+export function findStandalonePayload(executable) {
+  const candidates = [];
+  let trailerOffset = executable.lastIndexOf(trailer);
+  while (trailerOffset >= offsetsSize) {
+    const offsetsOffset = trailerOffset - offsetsSize;
+    const byteCount = executable.readBigUInt64LE(offsetsOffset);
+    if (byteCount <= BigInt(Number.MAX_SAFE_INTEGER)) {
+      const start = offsetsOffset - Number(byteCount);
+      const end = trailerOffset + trailer.length;
+      if (start >= 0 && end <= executable.length) {
+        const modulesOffset = executable.readUInt32LE(offsetsOffset + 8);
+        const modulesLength = executable.readUInt32LE(offsetsOffset + 12);
+        const execArgvOffset = executable.readUInt32LE(offsetsOffset + 20);
+        const execArgvLength = executable.readUInt32LE(offsetsOffset + 24);
+        if (
+          modulesOffset + modulesLength <= Number(byteCount) &&
+          execArgvOffset + execArgvLength < Number(byteCount)
+        ) {
+          candidates.push({ start, end, byteCount: Number(byteCount) });
+        }
+      }
+    }
+    trailerOffset = executable.lastIndexOf(trailer, trailerOffset - 1);
+  }
+
+  if (candidates.length !== 1) {
+    throw new Error(
+      `Expected exactly one valid Bun standalone payload, found ${candidates.length}. ` +
+        "Use a Bun 1.4.0-compiled Satzstrom executable from a supported target.",
+    );
+  }
+
+  const region = candidates[0];
+  const bytes = executable.subarray(region.start, region.end);
+  return {
+    ...region,
+    bytes,
+    sha256: createHash("sha256").update(bytes).digest("hex"),
+  };
+}

package/licenses/runtime/README.md

@@ -0,0 +1,9 @@
+# Runtime third-party notices
+
+This directory accompanies the native Satzstrom executable. `npm/` contains the
+license and notice files for every JavaScript package embedded in the executable
+or its layout asset. `assets/` covers both embedded TeX hyphenation patterns and
+the embedded sRGB2014 ICC profile.
+
+`manifest.json` is the deterministic, hashed allowlist audited during build and pack.
+Bun and JavaScriptCore notices are provided separately under `compliance/bun/`.

package/licenses/runtime/assets/HYPHENATION-NOTICE.md

@@ -0,0 +1,25 @@
+# Hyphenation pattern notices
+
+The pattern files are pinned from `hyphenation/tex-hyphen` commit
+`5684c0f51c0b81133db2efbe60a408b4155a3ff5`.
+
+## German, reformed orthography
+
+File: `hyph-de-1996.tex`, version 2024-02-28.
+
+Copyright (c) 2013-2024 Stephan Hennig, Werner Lemberg, Günter Milde,
+Sander van Geloven, Georg Pfeiffer, Gisbert W. Selke, Tobias Wendorf, and
+Keno Wehr.
+
+Licensed under the MIT License. The complete license and copyright notice are
+preserved in the header of `hyph-de-1996.tex`.
+
+## American English
+
+File: `hyph-en-us.tex`, version 2005-05-30.
+
+Copyright (c) 1990, 2004, 2005 Gerard D.C. Kuiken.
+
+Copying and distribution, with or without modification, are permitted without
+royalty provided the copyright and permission notices are preserved. The full
+notice is preserved in the header of `hyph-en-us.tex`.

package/licenses/runtime/assets/hyph-de-1996-LICENSE.txt

@@ -0,0 +1,64 @@
+% title: German Hyphenation Patterns (Reformed Orthography, 2006)
+%
+% notice: TeX-Trennmuster für die reformierte (2006) deutsche Rechtschreibung
+%
+% version: 2024-02-28
+%
+% authors:
+%   -
+%     name:    Deutschsprachige Trennmustermannschaft
+%     contact: trennmuster@dante.de
+%
+% copyright: Copyright (c) 2013-2024
+%            Stephan Hennig, Werner Lemberg, Günter Milde,
+%            Sander van Geloven, Georg Pfeiffer, Gisbert W. Selke,
+%            Tobias Wendorf, Keno Wehr
+%
+% licence:
+%     name: MIT
+%     url:  https://opensource.org/licenses/mit-license.php
+%     text: >
+%           Permission is hereby granted, free of charge, to any person
+%           obtaining a copy of this software and associated documentation
+%           files (the “Software”), to deal in the Software without
+%           restriction, including without limitation the rights to use,
+%           copy, modify, merge, publish, distribute, sublicense, and/or
+%           sell copies of the Software, and to permit persons to whom the
+%           Software is furnished to do so, subject to the following
+%           conditions:
+%
+%           The above copyright notice and this permission notice shall be
+%           included in all copies or substantial portions of the Software.
+%
+%           THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,
+%           EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+%           OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+%           NONINFRINGEMENT.  IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+%           HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+%           WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+%           FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+%           OTHER DEALINGS IN THE SOFTWARE.
+%
+% source: https://repo.or.cz/w/wortliste.git?a=commit;h=304aaa2188a75e57afe36bad0443d90a9c715b8e
+%
+% language:
+%     name: German, reformed spelling
+%     tag:  de-1996
+%
+% hyphenmins:
+%     generation:
+%         left:  2
+%         right: 2
+%     typesetting:
+%         left:  2
+%         right: 2
+%
+% texlive:
+%     encoding: ec
+%     babelname: ngerman
+%     use_old_patterns_comment: Kept for the sake of backward compatibility, but newer and better patterns by WL are available.
+%     legacy_patterns: dehyphn.tex
+%     message: German hyphenation patterns (reformed orthography)
+%     package: german
+%
+% ===========================================================================

package/licenses/runtime/assets/hyph-en-us-LICENSE.txt

@@ -0,0 +1,32 @@
+% title: Hyphenation patterns for American English
+% copyright: Copyright (C) 1990, 2004, 2005 Gerard D.C. Kuiken
+% notice: This file is part of the hyph-utf8 package.
+%     See http://www.hyphenation.org/tex for more information.
+% language:
+%     name: English, American spelling
+%     tag: en-us
+% version: 2005-05-30
+% authors:
+%   -
+%     name: Gerard D.C. Kuiken
+% licence:
+%     text: >
+%         Copying and distribution of this file, with or without modification,
+%         are permitted in any medium without royalty provided the copyright
+%         notice and this notice are preserved.
+% hyphenmins:
+%     typesetting:
+%         left: 2
+%         right: 3
+% changes:
+%     March 1, 1990 Initial release
+%     May 30, 2005 Added copyright notice, no patterns change.
+% texlive:
+%     encoding: ascii
+%     babelname: usenglishmax
+%     legacy_patterns: ushyphmax.tex
+%     message: Hyphenation patterns for American English
+%     package: english
+% known_bugs:
+%     de-mo-c-rat: 'instead of dem-o-crat (see GitHub issue #15)'
+% ==========================================

package/licenses/runtime/assets/sRGB2014-ICC-LICENSE.txt

@@ -0,0 +1,8 @@
+sRGB2014.icc
+
+Copyright International Color Consortium, 2015.
+
+This profile is made available by the International Color Consortium, and may be copied, distributed, embedded, made, used, and sold without restriction. Altered versions of this profile shall have the original identification and copyright information removed and shall not be misrepresented as the original profile.
+
+License source: https://www.color.org/faqs/
+Profile source: https://registry.color.org/rgb-registry/srgbprofiles