完成网络音乐、工具页面与安装器体验升级

THIRD_PARTY_NOTICES.md

@@ -8,8 +8,11 @@ copyrights, licenses, and trademarks remain with their respective owners.
 | NexBox | Local source under `参考/NexBox-main` | GPL-3.0 | Reference implementation for hardware monitoring, optimization, overlays, music, network diagnostics, and installer workflows. NexBox branding and site assets are not included. |
 | LibreHardwareMonitor | LibreHardwareMonitorLib 0.9.6 | MPL-2.0 | Optional sensor provider in the isolated hardware-monitor host. |
 | QRCoder | 1.8.0 | MIT | QR code rendering for provider login. |
-| MoeKoeMusic | Commit [`4581660209c9cdd07669e8bd5bcbe136b7d91e02`](https://github.com/MoeKoeMusic/MoeKoeMusic/tree/4581660209c9cdd07669e8bd5bcbe136b7d91e02) | GPL-3.0 | Reference for the KuGou client login and account workflow. No MoeKoeMusic code or branding is bundled. |
-| KuGouMusicApi | Commit [`06560e3e053bda1ab830750db6f645bab703f824`](https://github.com/MakcRe/KuGouMusicApi/tree/06560e3e053bda1ab830750db6f645bab703f824) | MIT | Protocol reference for KuGou request signing, device registration, QR login, account playlists, and entitlement-aware HTTPS playback. The required protocol subset is independently implemented in C#. |
+| MoeKoeMusic | Commit [`4581660209c9cdd07669e8bd5bcbe136b7d91e02`](https://github.com/MoeKoeMusic/MoeKoeMusic/tree/4581660209c9cdd07669e8bd5bcbe136b7d91e02) | GPL-2.0 at the pinned commit | Pinned upstream project, README, license, and original disclaimer distributed with the local KuGou API integration. The fixed commit identifies `api` as the KuGouMusicApi submodule below. |
+| KuGouMusicApi | Commit [`06560e3e053bda1ab830750db6f645bab703f824`](https://github.com/MakcRe/KuGouMusicApi/tree/06560e3e053bda1ab830750db6f645bab703f824) | MIT | Bundled and modified local random-port API service for KuGou requests, login/account workflows, playback resolution, and KRC lyrics. Original source, lockfile, MIT license, README/disclaimer, and `YMhut_PATCHES.md` are distributed in `music-api`. |
+| Binaryify/NeteaseCloudMusicApi | [Repository](https://github.com/Binaryify/NeteaseCloudMusicApi) | Upstream project license | Attribution for the two-minute API response cache mechanism inherited by KuGouMusicApi. YMhut restricts the cache to an explicit anonymous public GET allowlist. |
+| Node.js | 22.18.0 x64 | Node.js license | Bundled runtime for the loopback-only music API child process. Production does not depend on a system Node installation. |
+| MoeKoeMusic API npm dependencies | Exact versions in `api/pnpm-lock.yaml` | Package-specific licenses | Production dependencies include axios, express, pako, qrcode, crypto-js, node-forge, big-integer, dotenv, safe-decode-uri-component, and url. |
 | Microsoft Windows App SDK | 1.8.260416003 | Microsoft license | WinUI 3 desktop application and installer bootstrap. |
 | Microsoft WebView2 | 1.0.3967.48 | Microsoft license | Embedded browser and tool surfaces. |
 | Microsoft.Data.Sqlite | 10.0.9 | MIT | Local application data and logs. |