# Third-Party Notices

Instagrow ships the following third-party software and assets inside the
extension package. Each component remains under its own license; the notices
below apply to the vendored copies listed here.

Questions about any notice: outsightai@gmail.com.

---

## 1. ffmpeg.wasm — `@ffmpeg/ffmpeg` 0.10.1 (JavaScript wrapper)

- File: `js/ffmpeg/ffmpeg.min.js`
- Upstream: <https://github.com/ffmpegwasm/ffmpeg.wasm> /
  <https://www.npmjs.com/package/@ffmpeg/ffmpeg> (version 0.10.1)
- License: MIT — Copyright (c) 2019 Jerome Wu.
  Full text: <https://github.com/ffmpegwasm/ffmpeg.wasm/blob/master/LICENSE>
- Local modification ("local-loading patch"): the vendored copy is
  `https://unpkg.com/@ffmpeg/ffmpeg@0.10.1/dist/ffmpeg.min.js` with the default
  CDN `corePath` replaced by
  `chrome.runtime.getURL("/js/ffmpeg/ffmpeg-core.js")` so the FFmpeg core is
  loaded from files packaged inside the extension instead of a remote CDN, the
  `sourceMappingURL` comment removed, and AMD `define` disabled. No other
  functional changes were made.

## 2. ffmpeg.wasm core — `@ffmpeg/core` 0.10.0 (FFmpeg compiled to WebAssembly)

- Files: `js/ffmpeg/ffmpeg-core.js`, `js/ffmpeg/ffmpeg-core.wasm`,
  `js/ffmpeg/ffmpeg-core.worker.js`
- Upstream: <https://github.com/ffmpegwasm/ffmpeg.wasm-core> /
  <https://www.npmjs.com/package/@ffmpeg/core> (version 0.10.0, per the
  `https://unpkg.com/@ffmpeg/core@0.10.0/dist/...` provenance headers in the
  vendored files)
- Integrity: `sha256(js/ffmpeg/ffmpeg-core.wasm) =
  436b0f64a9e1188e927522667b1f76c8b1e895eae18fdb4cd7087af8c9142831`.
  This is byte-identical to `dist/ffmpeg-core.wasm` in the official
  `@ffmpeg/core@0.10.0` npm artifact
  (`https://registry.npmjs.org/@ffmpeg/core/-/core-0.10.0.tgz`), verified by
  download and hash comparison. The WebAssembly binary is unmodified.
  `ffmpeg-core.worker.js` matches the npm artifact except for an added
  provenance header comment; `ffmpeg-core.js` matches except for the added
  header and whitespace normalization (leading blank line / trailing newline).
- Licenses:
  - The `@ffmpeg/core` package wrapper code is MIT (Copyright (c) 2020
    Jerome Wu).
  - The compiled binary contains **FFmpeg**, licensed under the
    **GNU Lesser General Public License (LGPL) version 2.1 or later**.
    FFmpeg upstream: <https://ffmpeg.org>. License text:
    <https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html>.
    "This software uses code of FFmpeg (<https://ffmpeg.org>) licensed under
    the LGPL v2.1+ and its source can be downloaded from
    <https://github.com/ffmpegwasm/ffmpeg.wasm-core>."
  - The build additionally links GPL-licensed codec libraries enabled by the
    upstream ffmpeg.wasm-core build (notably **x264**, GNU GPL version 2 or
    later, <https://www.videolan.org/developers/x264.html>), which makes the
    combined `ffmpeg-core.wasm` binary distributable under the **GPL v2+**.
    License text: <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>.
- Corresponding source: the complete corresponding source code for the
  compiled `ffmpeg-core.wasm` (the FFmpeg revision plus the build scripts and
  library sources used by the ffmpeg.wasm-core release that published
  `@ffmpeg/core@0.10.0`) is available at
  <https://github.com/ffmpegwasm/ffmpeg.wasm-core>. We will also provide it on
  request (email above).

## 3. JSZip 3.10.1

- File: `js/jszip.min.js`
- Upstream: <https://stuartk.com/jszip> / <https://github.com/Stuk/jszip>
  (version 3.10.1, taken from `https://unpkg.com/jszip@3.10.1/dist/jszip.min.js`)
- License: dual-licensed under the MIT License or GPLv3; we use it under the
  **MIT License** — Copyright (c) 2009-2016 Stuart Knightley, David Duponchel,
  Franz Buchinger, António Afonso.
  Full text: <https://raw.github.com/Stuk/jszip/main/LICENSE.markdown>
- JSZip internally uses **pako** (MIT License):
  <https://github.com/nodeca/pako/blob/main/LICENSE>
- Local modification: a header comment and `let define = null` (AMD disabled)
  were prepended; the library code is otherwise unmodified.

## 4. HackTimer worker

- File: `js/timer-worker.min.js`
- Upstream: <https://github.com/turuslan/HackTimer>
  (derived from `HackTimerWorker.js`)
- License: MIT — Copyright (c) 2015 Ruslan Tushov.
  Full text: <https://github.com/turuslan/HackTimer/blob/master/LICENSE>

## 5. Inter font

- Files: `app/fonts/inter/*.woff2`, `app/inter.css`
- Upstream: <https://rsms.me/inter/> / <https://github.com/rsms/inter>
- License: **SIL Open Font License, Version 1.1** — Copyright (c) 2016 The
  Inter Project Authors. The full license text ships in this package at
  `app/fonts/inter/LICENSE.txt` and is available at
  <https://scripts.sil.org/OFL>.

## 6. Open-source libraries compiled into the application bundles

The application bundles under `app/` and `modern/` additionally contain
open-source libraries compiled in at build time, including **React** and
**react-dom** (MIT License, Copyright (c) Meta Platforms, Inc.,
<https://github.com/facebook/react>) and **MobX** (MIT License,
<https://github.com/mobxjs/mobx>). Their license texts are available at the
linked repositories.
