Licences of the software in the almondpass executable
=====================================================

AlmondPass itself is under the MIT licence in ../copyright. The executable is
statically linked, it contains the following components. Their licence texts
are in the directories named below. The versions are those of the release,
BUILDINFO.txt lists the exact packages it was built with.

Component              Licence                      Directory
---------------------  ---------------------------  -----------------------
AlmondPass crypto core MIT                          almond-encryption/
Dear ImGui 1.92.9b     MIT                          dear-imgui/
Droid Sans Mono        Apache 2.0                   droid-sans-mono/
Mozilla CA bundle      MPL 2.0                      ca-certificates/
libsodium 1.0.22       ISC                          libsodium/
OpenSSL 3.5            Apache 2.0                   openssl/
libX11                 X11 (MIT style)              libx11/
libxcb                 MIT                          libxcb/
libXau 1.0.12          MIT                          libxau/
libXdmcp               MIT                          libxdmcp/
libxkbcommon           MIT and MIT style            libxkbcommon/
musl                   MIT                          musl/
libstdc++ (GCC 15)     GPL 3 with the GCC Runtime   libstdc++/
                       Library Exception, which
                       permits this use

The certificate authorities trusted by the sync client are the Mozilla CA
bundle, extracted from Mozilla's certdata.txt; its source is available at
https://hg.mozilla.org/projects/nss/ and https://curl.se/docs/caextract.html.

The texts of libX11, libxcb, libXdmcp, libxkbcommon, musl, OpenSSL, libsodium
and libXau are taken from their source releases, verified against the
checksums of the Alpine 3.24 packages and of the AlmondPass builder image.
