vpn/THIRD_PARTY_NOTICES.md
2026-09-23 01:19:36 +00:00

1.7 KiB

Third-party notices

This file is intentionally explicit about components that may be bundled. Native artifacts are not committed to this repository; the exact version and SHA-256 must be recorded here before a release artifact is built.

Component Use Version/commit License Source
Flet Python UI/runtime packaging pinned by uv.lock Apache-2.0 https://github.com/flet-dev/flet
FreeTurn mobile API Android FreeTurn allowlist/whitelist transport samosvalishe/free-turn-proxy commit 065385e656085a06bf8079958bf1b563901db64f; local AAR SHA-256 112207f15bd5c93500be13e249f884dec0768d0f542599b3e24f641837483a6e GPL-3.0 https://github.com/samosvalishe/free-turn-proxy
FreeTurn Android reference lifecycle/API reference only; not a source dependency inspected only GPL-3.0 https://github.com/samosvalishe/turn-proxy-android
sign-box/libbox or private SignBox fork VPN/proxy engine artifact, if supplied must be pinned before release check supplied artifact/source https://github.com/SagerNet/sing-box
XTLS/libXray optional future VLESS mobile binding; not currently bundled not bundled MPL-2.0 https://github.com/XTLS/libXray
FastAPI / Uvicorn / Pydantic / qrcode Python app/backend dependencies pinned by uv.lock respective upstream licenses PyPI

The Android reference application is not copied. Its GPL license does not automatically apply to an independent implementation that only uses documented APIs, but distributing the FreeTurn GPL mobile library still requires complying with its license and providing corresponding notices/source obligations as applicable.