Open-source notices

What this is

Yapmesh is built on other people's open-source work, and most of their licences ask to be reproduced wherever the software is distributed. This page is that reproduction for the website; inside the app, About → Open-source licences shows every package's full licence text as bundled by Flutter. The repository copy is docs/THIRD_PARTY_NOTICES.md, with the full text of every licence.

Yapmesh itself

The source repository does not yet carry a licence file. The protocol specification and the core library are intended to be released under an open-source licence before the first public release; until then all rights are reserved and the code is published for reading and review. See the terms.

Needs attention

• com.android.tools:desugar_jdk_libs 2.1.4: GPL-2.0-with-classpath-exception
• com.google.android.gms:play-services-nearby 19.2.0: Android SDK License (proprietary)
• archive: MIT, plus LICENSE-other.md listing code derived from zlib.js (MIT, imaya), JZlib (BSD-3-Clause, JCraft), bzip2 (BSD-style, Julian Seward) and Pointy Castle (MIT). Reproduced under package notices.
• image_picker / image_picker_android / image_picker_ios: BSD-3-Clause (The Flutter Authors) plus the Apache-2.0 notice for the bundled aFileChooser code (Paul Burke). Reproduced under package notices.
• mqtt_client: MIT (Steve Hamblett) plus the BSD-3-Clause notice for the included Observable code (Dart project authors). Reproduced under package notices.
• pointycastle: LICENSE is MIT (Legion of the Bouncy Castle). licenses/LICENSE-BouncyCastle.html carries a stale HTML comment saying the library is 'dually licensed under LGPL 3 and MPL 2.0' (pre-2019 Pointy Castle); the shipped LICENSE and pubspec are MIT, and licenses/LICENSE-scrypt.txt is Apache-2.0 for the bundled scrypt implementation. Reproduced under package notices.
• vector_math: BSD-3-Clause (Google) plus a Zlib-style notice for code by Andrew Magill. Reproduced under package notices.
• Flutter engine: the engine binary embeds many further third-party components (Skia, ICU, HarfBuzz, libpng, zlib, ...). Their notices are compiled into the app as the Flutter LICENSE asset and are shown by Flutter's showLicensePage; this file does not repeat them, the app's licence screen must stay reachable.
• nearby_connections 4.3.0+zynk1: vendored fork of the pub.dev package (upstream 4.3.0). The one local change (forwarding onBandwidthChanged) is described in app/third_party/nearby_connections/YAPMESH_PATCH.md; the fork keeps the upstream licence and copyright line, and the modification notice is that file.
• com.android.tools:desugar_jdk_libs:2.1.4 (declared in app/android/app/build.gradle.kts): POM says "GNU General Public License, version 2, with the Classpath Exception" (https://github.com/google/desugar_jdk_libs/blob/master/LICENSE). GPL-2.0 WITH Classpath Exception is the OpenJDK licence; the Classpath Exception permits linking it into an independently licensed app without the GPL extending to the app, but the notice and the licence URL must be reproduced. The library itself is an Android build-time desugaring runtime, distributed inside the APK.
• com.google.android.gms:play-services-nearby:19.2.0 (declared in app/third_party/nearby_connections/android/build.gradle): POM says "Android Software Development Kit License" (https://developer.android.com/studio/terms.html). Not open source: Google Play Services client library, distributed under Google's Android SDK terms; no attribution text is required, but it cannot be listed as open source and does not ship in the F-Droid/seed builds that exclude Play Services.
• app/lib/services/meshtastic_protobuf.dart is hand-written from Meshtastic's published protobuf field numbers; no Meshtastic source code, generated code or text is copied into this repository, so no Meshtastic licence is asserted or reproduced here.

Components

Fonts and marks

The website's typeface is Vazirmatn, under the SIL Open Font License 1.1. The Yapmesh mark and wordmark are not open source; see the brand sheet for how they may be used to describe Yapmesh.