28 lines
1.5 KiB
Markdown
28 lines
1.5 KiB
Markdown
# Third-party notices
|
|
|
|
Magent's original source is licensed under the [MIT License](LICENSE). Third-party
|
|
software and assets retain their own copyright and license terms.
|
|
|
|
The exact JavaScript dependency graph and resolved versions are recorded in
|
|
`frontend/package-lock.json`. Production runtime packages include Next.js,
|
|
React, React DOM, Sharp and their transitive dependencies. Their license terms
|
|
come from the installed package metadata and license files, not from fields in
|
|
the lockfile. The release build collects discoverable production package
|
|
license and notice files under `/usr/share/licenses/magent/frontend`.
|
|
|
|
The exact direct Python versions are recorded in `backend/requirements.txt` and
|
|
`docker/requirements-runtime.txt`. Python package metadata and license files are
|
|
installed with those packages and remain subject to their respective terms.
|
|
|
|
The release container also contains components from its pinned Python, Node.js
|
|
and Alpine base images. Those components are not relicensed by Magent. The image
|
|
includes this notice, Magent's MIT license, Node.js's license, installed Python
|
|
package license files, discoverable production frontend license/notice files,
|
|
and any license files supplied by the Alpine packages in the runtime image under
|
|
`/usr/share/licenses`.
|
|
|
|
Before redistributing a modified image, regenerate and review its software bill
|
|
of materials and preserve every applicable license, copyright and notice file.
|
|
Lockfiles are the version inventory; this summary is not a replacement for the
|
|
complete license texts supplied by each dependency.
|