# Open Source Notices — Karuiya 0.9.1

Karuiya's own application code is proprietary. The standard Karuiya 0.9.1 Windows package also contains separately licensed open-source components. Those component licenses remain in force and are not replaced or restricted by Karuiya's terms.

The standard package is the **LGPL-only distribution profile**. It does not contain `program/ffmpeg-gpl`, libx264, libx265, a GPL-extension installer, the `cryptography` package, or an active GPL-extension downloader. `GPL_EXTENSION.md`, the disabled configuration file and `licenses/GPL-3.0.txt` document a possible future user-selected extension; their presence does not mean that the extension is installed or active.

## Qt and PySide6

Karuiya uses the reviewed LGPL-eligible Qt 6.11.1 modules and PySide6/Shiboken6 6.11.1 under the LGPLv3 option. They are distributed as shared DLLs and Python extension modules in the onedir `_internal` tree. Qt Virtual Keyboard and Qt PDF are not included in the 0.9.1 runtime. Users may replace compatible shared libraries and may reverse engineer Karuiya when necessary to debug modifications to an LGPL library, subject to the LGPL terms.

Exact upstream wheel names and hashes, and official source archive hashes, are recorded in `licenses/PySide6` and `licenses/Qt`. The source companion does not redistribute the complete upstream PySide6 wheel archives because they contain optional modules that are not part of Karuiya. Qt Image Formats is retained for WebP support; its source archive includes the bundled libtiff and libwebp sources and license texts. Replacement guidance is in `QT_LIBRARY_REPLACEMENT.md`. The complete LGPLv3 text is in `licenses/LGPL-3.0.txt`.

## Two separate FFmpeg installations

Karuiya contains two technically and evidentially separate FFmpeg uses:

1. `program/ffmpeg-lgpl` is FFmpeg/ffprobe `n7.1.5-12-g1fdbca85aa-20260801`, invoked as an external process for analysis, thumbnails, waveform generation, proxy creation, filters, export and output verification. It is an LGPLv3-or-later shared build. Its binary hashes, exact configure output, FFmpeg source commit and BtbN build-script commit are under `licenses/FFmpeg-LGPL`.
2. Qt Multimedia's preview backend uses FFmpeg 7.1.3 shared DLLs supplied by the PySide6 6.11.1 wheel. These DLLs are used only by QMediaPlayer preview. Their reference hashes, build configuration and separate source references are under `licenses/Qt`.

The two sets of FFmpeg DLLs must not be substituted for one another.

## Python and PyInstaller

The onedir includes the CPython 3.14.6 runtime under the Python Software Foundation license. `Karuiya.exe` contains the PyInstaller 6.21.0 bootloader, whose GPLv2-or-later license includes the PyInstaller Bootloader Exception permitting its use in non-free programs. The corresponding license texts and source/build-input hashes are under `licenses/Python` and `licenses/PyInstaller`.

## Source package and checksums

The source companion is named `Karuiya-0.9.1-open-source-sources.zip`. It is published beside the matching binary release over HTTPS, together with its SHA-256. It contains the source archives listed in `licenses/SOURCE_ARCHIVE_CHECKSUMS.txt`, exact upstream build-input references and component evidence files. The release operator must not publish a binary package unless the matching source companion and checksum are available from the same release page.

The exact final onedir inventory is covered by `licenses/manifests/*.sha256`, generated after packaging and validated by `release_verify.py`. `THIRD_PARTY_COMPONENTS.json` is the machine-readable component ledger.

Some FFmpeg dependencies are selected by the archived BtbN build scripts. Their exact official dependency-source cache is retained in the source companion and verified by byte length, SHA-256 and ZIP integrity. `licenses/FFmpeg-LGPL/ENABLED_DEPENDENCY_SOURCE_REQUIREMENTS.md` records the completed mirror and the remaining independent notice/license review.

This notice is an engineering inventory, not legal advice or a certification of compliance. Obtain qualified legal review before public distribution, especially for the precise Qt module set, FFmpeg's enabled third-party libraries, codec patent exposure, end-user terms and the source-availability process.
