7.2 KiB
Third-party notices
Flectar Mail contains third-party open-source software. The source and binary forms remain subject to the licenses and copyright notices of their respective authors.
Slint
Slint 1.18 is copyright © SixtyFPS GmbH and Slint contributors. Flectar Mail
uses Slint under the GPL-3.0-only option offered by the Slint crates. The
license text is in LICENSES/GPL-3.0-only.txt, and
the upstream source is https://github.com/slint-ui/slint. The locally patched
i-slint-backend-winit 1.18.1 crate retains its upstream license texts in
crates/i-slint-backend-winit/LICENSES.
Its Wayland clipboard backport, source checksum, and removal condition are
documented in patches/slint-winit/README.md.
Blitz
The locally patched blitz-dom and blitz-paint crates originate from the
DioxusLabs Blitz project and are used under their Apache-2.0 option. The
license text is in LICENSES/Apache-2.0.txt, and the
upstream source is https://github.com/DioxusLabs/blitz. The pinned release,
checksums, and patch order are recorded in
upstream.toml and
series.
Parley emoji presentation
Blitz uses upstream Parley 0.12.0; Slint still uses locally patched Parley
0.11.1. Both are used under the Apache-2.0 option. The parley_emoji
sequence detector includes the fix from
Parley PR #811, based on
Christian Hansen's c-emoji, and is
licensed under MIT. Its copyright and license are included in
LICENSES/Parley-Emoji-MIT.txt.
Published packages and checksums are pinned in Cargo.lock. The backport
retained for Slint is documented in patches/parley/README.md.
Candle
The optional CPU embedding runtime uses the published Candle crates under
Apache-2.0. Published packages and checksums are pinned in Cargo.lock.
Reader integration dependencies
The reader integration uses these Rust packages under their Apache-2.0
license option. Their source distributions retain the authors' copyright
notices and license texts; the Apache-2.0 license is also included in
LICENSES/Apache-2.0.txt.
| Package | Locked version | Upstream source | Purpose |
|---|---|---|---|
| arboard | 3.6.1 | 1Password/arboard | Desktop HTML and primary-selection clipboard |
| html5ever | 0.40.1 | servo/html5ever | HTML preflight and export tokenization |
| unicode-segmentation | 1.13.3 | unicode-rs/unicode-segmentation | Unicode word selection |
| percent-encoding | 2.3.2 | servo/rust-url | Fragment and mailto decoding |
| base64 | 0.22.1 | marshallpierce/rust-base64 | Export CSP hash encoding |
| jpeg-decoder | 0.3.2 | image-rs/jpeg-decoder | Bounded native JPEG downsampling for email images |
PDF preview
Desktop, Android, and iOS packages include a non-V8 PDFium runtime from
bblanchon/pdfium-binaries, built
from PDFium. The selected release and
per-platform SHA-256 digests are pinned in scripts/stage-pdfium.py. Every
package retains the archive's LICENSE, complete licenses/ directory, and
build provenance under pdfium-licenses beside the private desktop library,
Android assets at licenses/PDFium, and iOS bundle resources at Licenses/PDFium.
PDFium's third-party components retain their respective licenses.
The OpenHarmony package prefers a source build from the pinned
OpenHarmonyPCDeveloper/pdfium revision in
platform/ohos/scripts/build-pdfium-source.sh.
The fallback arm64 ohos_pdfium 7947 port has its archive URL and SHA-256
digest pinned in
platform/ohos/scripts/fetch-pdfium.sh.
The build stages and strips the library and packages this notice plus
LICENSES/PDFium-BSD-3-Clause.txt under
resources/rawfile/ in the hap. The port is documented in
platform/ohos/prebuilt/README.md.
The source-built OpenHarmony PDFium component links the OHOS SDK's
libc++_shared.so C++ runtime. LLVM libc++ is Apache-2.0 with the LLVM
exception; the license and exception are retained in
LICENSES/LLVM-exception.txt. The pinned OHOS
source compatibility patch is
platform/ohos/patches/pdfium-ohos-compat.patch.
The Rust interface is pdfium-render
0.9.4, used under its Apache-2.0 option. Linux process restrictions use
Landlock and
seccompiler, under their Apache-2.0
options. Rust package versions and source checksums are recorded in Cargo.lock.
Lucide Icons
The original SVG inputs in ui/icons/lucide/sources are sourced from
Lucide Static 1.46.0. The displayed outlines in
ui/icons/lucide/outline preserve that geometry with an adjusted stroke weight.
The active and sidebar variants in ui/icons/lucide/filled are modifications
created for Flectar Mail from the same 24px Lucide geometry. Lucide is licensed
under the ISC License, with Feather-derived icons covered by the MIT License.
Both notices are retained in ui/icons/lucide/LICENSE. Source mappings are
recorded in ui/icons/lucide/sources.json and ui/icons/lucide/solid_recipes.py.
Google Sans Flex
The bundled Google Sans Flex font is distributed under the SIL Open Font
License 1.1. Its license, provenance, and checksum are retained in
resources/fonts/google-sans-flex.
Noto Emoji
The bundled Noto Emoji font is distributed under the SIL Open Font License
1.1. Its license, provenance, and checksum are retained in
resources/fonts/noto-emoji.
Renderer regression tests also use a subset of Noto Color Emoji under SIL OFL
1.1. Its license and reproduction instructions are retained in
resources/test-fonts.
Android instrumentation tests
Device tests use AndroidX Test Runner 1.7.0 and AndroidX Test JUnit 1.3.0
from android/android-test, under
Apache-2.0. The license text is included in
LICENSES/Apache-2.0.txt. These dependencies are
included only in the test APK, not the application APK.
Screenshot examples
The fictional screenshot fixture uses real public sender domains so the same favicon service used by the application can demonstrate sender recognition. Third-party names and marks belong to their respective owners. Their appearance does not imply affiliation, sponsorship, or endorsement.
Additional Rust dependencies are identified in Cargo.lock and retain the
license terms supplied by their upstream packages.