Files
MetaCrate/NOTICE.md
Chili Palmer b71386dc31
Some checks failed
API and SemVer surface / api-surface (push) Failing after 13m11s
Native code generation / deterministic (push) Failing after 2m9s
Documentation / documentation (push) Failing after 1m39s
Imaging and meshing gate / native (push) Failing after 2m58s
Release platform and feature matrix / audit (push) Successful in 44s
Native Rust workspace compile / compile (push) Failing after 55s
Dependency and supply-chain audit / audit (push) Failing after 9m14s
Release platform and feature matrix / matrix (false, linux-stable-minimal, x86_64-unknown-linux-gnu, stable) (push) Failing after 9m22s
Release platform and feature matrix / matrix (false, windows-stable-portable, x86_64-pc-windows-gnu, stable) (push) Has been cancelled
Release platform and feature matrix / matrix (true, linux-msrv-portable, x86_64-unknown-linux-gnu, 1.96.0) (push) Has been cancelled
Release platform and feature matrix / matrix (true, linux-stable-default, x86_64-unknown-linux-gnu, stable) (push) Has been cancelled
Release platform and feature matrix / matrix (true, linux-stable-features, x86_64-unknown-linux-gnu, stable) (push) Has been cancelled
Release platform and feature matrix / matrix (true, linux-stable-release-surface, x86_64-unknown-linux-gnu, stable) (push) Has been cancelled
Release platform and feature matrix / matrix (false, macos-stable-portable, x86_64-apple-darwin, stable) (push) Has been cancelled
Audit release licenses and provenance (#104)
2026-08-12 02:12:49 +00:00

2.6 KiB
Raw Permalink Blame History

MetaCrate notices and attribution

MetaCrate's Rust implementation is licensed under the BSD 3-Clause License in LICENSE.md. It is a clean native Rust rewrite based on the public API and observable behavior of LibreMetaverse at commit 2aa70bb68513b39795da5d13c88f31b86e85a3ba. The upstream BSD notice is retained in LICENSE.md for openmetaverse.co (20062016) and Sjofn LLC (20172025). The exact pinned upstream text is included in licenses/LibreMetaverse-BSD-3-Clause.txt.

Linden viewer data

The following exact, unmodified files are Linden viewer data redistributed by LibreMetaverse under Creative Commons Attribution-ShareAlike 3.0 Unported:

  • codegen/inputs/attentions.xml
  • codegen/inputs/attentionsN.xml
  • codegen/inputs/avatar_lad.xml
  • codegen/inputs/avatar_skeleton.xml
  • codegen/inputs/genepool.xml
  • codegen/inputs/grass.xml
  • codegen/inputs/trees.xml

The original author/attribution party is Linden Lab. MetaCrate copied these files without modification from the pinned LibreMetaverse LibreMetaverse/linden/ tree. Their generated Rust data tables identify the input, exact SHA-256, and CC-BY-SA-3.0 license. The license URI and pinned legal-code hash are retained in licenses/CC-BY-SA-3.0-NOTICE.md.

No Linden textures, meshes, animations, gestures, clothing, body parts, or viewer binaries are included. The protocol message_template.msg is separately tracked as BSD-3-Clause material from LibreMetaverse's data/ tree and is not classified as a Linden CC asset by the pinned upstream repository.

Generated and translated material

Generated Rust files retain machine-readable source hashes and licenses in their headers. The LSL parser grammar snapshot, compatibility fixtures, translated tests, API mappings, and program mappings are covered by the MetaCrate and upstream BSD notices. Their exact provenance is checked by the Rust release-provenance audit and its locked manifests.

Dependencies and native components

release/THIRD-PARTY-NOTICES.md contains the complete locked Rust package inventory and the license/notice files shipped by each package. release/NATIVE-LICENSES.md records native components, whether MetaCrate bundles them, and the notice obligations for binary distributors. Both are generated from ci/provenance-policy.json and Cargo.lock.

A source or binary distribution is complete only when it includes the notice files required by release/DISTRIBUTION-MANIFEST.json.