{ "redistributionFormat": 1, "policy": "Ekklesia ADR 0055: native redistributable packages carry corresponding-source artifacts", "package": { "file": "signage-0.1.4-linux-x64-glibc.tar.gz", "sha256": "d1eeaf6a146805f4dffe125aeb5631dbfde2208e4032debe20a1b1b1b576610e", "module": { "id": "signage", "version": "0.1.4" }, "target": "linux-x64-glibc" }, "covered": [ { "name": "@img/sharp-libvips-linux-x64", "version": "1.3.4", "license": "LGPL-3.0-or-later", "contentDigest": "ekklesia-content-v1:sha256:2927fe11493461fa34847191d0b9b1c6441007c3e99f306e5708cb07fb0a5e59", "supplement": { "version": "1.3.4", "sha256": "ff2e849dc2627dfb6411b785915c1bdeb2e700f754f9c540db8d2a2cefb87f67" }, "recipe": { "sha256": "9bd921792565e164b400815114d53406970428c8ba7aca4ccaafff4b1b7da09a" } } ], "correspondingSource": { "file": "signage-0.1.4-linux-x64-glibc-corresponding-source.tar.gz", "sha256": "8e12557a74a729d86c77966882fb6014a23ff973728667324d2d855fa16d2cea", "size": 207242023, "manifestSha256": "f74eb3bc2ae978520028b9b73f7adb7dd870cb88f6e4496de3c9cd67a0accc6a" }, "notice": "This release includes third-party software covered by licenses including the GNU LGPL and MPL:\n\n @img/sharp-libvips-linux-x64 1.3.4 (declared LGPL-3.0-or-later; components under GNU LGPL and MPL)\n\nCorresponding source and build/relink materials for the covered native dependencies distributed\nwith this release are available in the accompanying corresponding-source artifact:\n\n signage-0.1.4-linux-x64-glibc-corresponding-source.tar.gz\n SHA-256 8e12557a74a729d86c77966882fb6014a23ff973728667324d2d855fa16d2cea\n\nThe binary package's own THIRD_PARTY_NOTICES carries the licence and notice material for\neverything it includes.\n" }