Public-release prep: ELv2 license, README/CLA/NOTICE, SSRF safeFetch, identifier genericization, export tooling

2026-06-22 16:04:03 +02:00
parent c0a6477059
commit 8dd76f3435
44 changed files with 1272 additions and 267 deletions
@@ -0,0 +1,61 @@
+Backspace
+Copyright (c) 2026 Jannis Braun
+
+This product is licensed under the Elastic License 2.0 (see the LICENSE file).
+
+It bundles, depends on, or redistributes the third-party components listed
+below. Each remains under its own license.
+
+================================================================================
+Fonts
+================================================================================
+
+DM Sans
+  Files:    packages/web/public/fonts/DMSans-Variable.woff2
+            packages/web/public/fonts/DMSans-Variable-Italic.woff2
+  License:  SIL Open Font License, Version 1.1
+  Notice:   Copyright 2014 The DM Sans Project Authors
+            (https://github.com/googlefonts/dm-fonts)
+  The full license text is shipped alongside the font files at
+  packages/web/public/fonts/OFL.txt.
+
+================================================================================
+Sound effects
+================================================================================
+
+In-app sound cues (packages/web/public/sounds/*.ogg) are original works
+authored for the Backspace project and are covered by the project license.
+
+================================================================================
+Icons and brand assets
+================================================================================
+
+The Backspace name, logos, marks, and app icons (assets/brand/,
+packages/web/public/icons/, packages/desktop build resources) are original
+works and trademarks of the project. The Elastic License 2.0 grants no right to
+use these trademarks; trademark use is governed separately by applicable law.
+
+In-application UI icons are hand-authored inline SVGs and are covered by the
+project license.
+
+================================================================================
+npm dependencies
+================================================================================
+
+Backspace depends on open-source packages distributed via npm, all under
+permissive licenses (predominantly MIT, ISC, Apache-2.0, and BSD variants).
+The image-processing dependency "sharp" loads libvips, distributed as a
+prebuilt binary under the LGPL-3.0-or-later license; it is used unmodified and
+dynamically, and is not statically linked into Backspace.
+
+To regenerate the full, current dependency license inventory, run:
+
+  pnpm licenses list --prod
+
+================================================================================
+Emoji
+================================================================================
+
+Emoji selection is provided by @emoji-mart/data and @emoji-mart/react (MIT).
+No emoji glyph images are bundled; glyphs render using the host operating
+system's emoji font.