Files
YMhut-box-C-/THIRD_PARTY_NOTICES.md

30 lines
3.0 KiB
Markdown

# YMhutBox Third-Party Notices
YMhutBox uses or adapts the following open-source projects. Their original
copyrights, licenses, and trademarks remain with their respective owners.
| Project | Version / source | License | Use in YMhutBox |
| --- | --- | --- | --- |
| NexBox | Local source under `参考/NexBox-main` | GPL-3.0 | Reference implementation for hardware monitoring, optimization, overlays, music, network diagnostics, and installer workflows. NexBox branding and site assets are not included. |
| LibreHardwareMonitor | LibreHardwareMonitorLib 0.9.6 | MPL-2.0 | Optional sensor provider in the isolated hardware-monitor host. |
| QRCoder | 1.8.0 | MIT | QR code rendering for provider login. |
| MoeKoeMusic | Commit [`4581660209c9cdd07669e8bd5bcbe136b7d91e02`](https://github.com/MoeKoeMusic/MoeKoeMusic/tree/4581660209c9cdd07669e8bd5bcbe136b7d91e02) | GPL-2.0 at the pinned commit | Pinned upstream project, README, license, and original disclaimer distributed with the local KuGou API integration. The fixed commit identifies `api` as the KuGouMusicApi submodule below. |
| KuGouMusicApi | Commit [`06560e3e053bda1ab830750db6f645bab703f824`](https://github.com/MakcRe/KuGouMusicApi/tree/06560e3e053bda1ab830750db6f645bab703f824) | MIT | Bundled and modified local random-port API service for KuGou requests, login/account workflows, playback resolution, and KRC lyrics. Original source, lockfile, MIT license, README/disclaimer, and `YMhut_PATCHES.md` are distributed in `music-api`. |
| Binaryify/NeteaseCloudMusicApi | [Repository](https://github.com/Binaryify/NeteaseCloudMusicApi) | Upstream project license | Attribution for the two-minute API response cache mechanism inherited by KuGouMusicApi. YMhut restricts the cache to an explicit anonymous public GET allowlist. |
| Node.js | 22.18.0 x64 | Node.js license | Bundled runtime for the loopback-only music API child process. Production does not depend on a system Node installation. |
| MoeKoeMusic API npm dependencies | Exact versions in `api/pnpm-lock.yaml` | Package-specific licenses | Production dependencies include axios, express, pako, qrcode, crypto-js, node-forge, big-integer, dotenv, safe-decode-uri-component, and url. |
| Microsoft Windows App SDK | 1.8.260416003 | Microsoft license | WinUI 3 desktop application and installer bootstrap. |
| Microsoft WebView2 | 1.0.3967.48 | Microsoft license | Embedded browser and tool surfaces. |
| Microsoft.Data.Sqlite | 10.0.9 | MIT | Local application data and logs. |
| SQLitePCLRaw | 3.0.3 | MIT | SQLite native integration. |
| ZXing.Net | 0.16.11 | Apache-2.0 | Barcode and QR decoding helpers. |
Bundled external tools keep their original notice, license, README, or EULA
files beside their payloads. Components that cannot be redistributed are not
bundled; YMhutBox exposes only an official install, detection, status, and
launch entry for those components.
The complete corresponding YMhutBox source is distributed under the repository
license. Package-specific license text is available from each package's source
repository and NuGet metadata.