Basilisk — Third-Party Notices
===============================

This software incorporates components from the following open-source projects.
Each component is used in accordance with its respective license. Basilisk is
grateful to their authors and maintainers.

The runtime graph uses MIT, Apache-2.0, ISC, BSD, Zlib, Unicode,
CDLA-Permissive-2.0, CDDL-1.0, and MPL-2.0 terms. The file-level copyleft
components are `inferno` (CDDL-1.0) and `colored` (MPL-2.0), both linked
unmodified as published crates and listed below. There is no
GPL/AGPL/LGPL-only code in the distribution.

The most significant incorporated components are listed below. The complete
locked release-target inventory, copyright notices, and license texts ship in
`RUST-DEPENDENCY-LICENSES`; `runtime-license-manifest.json` binds that generated
carrier to the locked third-party Cargo graph while ignoring release-stamped
workspace version fields.

-------------------------------------------------------------------------------

Ruff  —  https://github.com/astral-sh/ruff
Author:  Astral Software Inc. (Charles Marsh and the Ruff contributors)
Pin:     rev 7c645a9a1be8258b9f9e005208a55a0b7e8e18f0 (== release 0.15.17)
License: MIT

Basilisk is built on the Ruff project by Astral. The `basilisk` binary embeds
the following crates from the Ruff workspace — declared directly in Cargo.toml
and pulled in transitively — pinned to a single immutable git rev:

  ruff_python_parser     ruff_python_ast        ruff_text_size
  ruff_python_formatter  ruff_formatter         ruff_python_stdlib
  ruff_python_trivia     ruff_source_file       ruff_annotate_snippets
  ruff_cache             ruff_db                ruff_diagnostics
  ruff_macros            ruff_memory_usage      ruff_notebook

The parser and AST power every stage of the pipeline; the formatter engine
([LSPFMT-ENGINE]) and the stdlib-module table for import sorting
([LSPFMT-IMPORTS]) are the same crates Ruff ships. The external `ruff` CLI is
never spawned — these crates are linked in-process. No Ruff source is copied
into this repository; it is consumed only as a Cargo dependency.

  MIT License

  Copyright (c) 2022 Charles Marsh

  Permission is hereby granted, free of charge, to any person obtaining a copy
  of this software and associated documentation files (the "Software"), to deal
  in the Software without restriction, including without limitation the rights
  to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
  copies of the Software, and to permit persons to whom the Software is
  furnished to do so, subject to the following conditions:

  The above copyright notice and this permission notice shall be included in all
  copies or substantial portions of the Software.

  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
  OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  SOFTWARE.

Ruff's own LICENSE file additionally lists the externally maintained libraries
Ruff derives from; see https://github.com/astral-sh/ruff/blob/main/LICENSE for
the complete text.

-------------------------------------------------------------------------------

typeshed  —  https://github.com/python/typeshed
Author:  The typeshed contributors
License: Apache-2.0 (parts MIT)

Basilisk ships an unmodified standard-library snapshot from the following exact
Typeshed source identity, repackaged as a deterministic stored ZIP:

  Commit:       83c2518a9e6abbda0c44592c3483de459198f887
  Root tree:    66408ffce2750980efc6da09e8a6652733f852e4
  Bundle SHA-256:
                e5141e63b6b1932dc2b648591b41f842604155e63f6af8ebd0a2f096fdb3c189
  LICENSE SHA-256:
                295f8538c94ae5c3043301cf7cff1c852dab6a786a8ddee471e061b40d5ecabe
  VERSIONS SHA-256:
                8a236d098757a04bdaeb40bb78545d0f9becc8db6a834c21b3d86e8d4d82bce3
  Bundle files: every `stdlib/` `.pyi`, `stdlib/VERSIONS`, and root `LICENSE`

The reviewed source has no root `NOTICE` and no nested `stdlib/` license or
notice file. Upstream file bytes are not modified. The bundle's sidecar records
the commit, root tree, ZIP digest, `VERSIONS` digest, and approved exact
path-and-SHA-256 legal-file identity. The source identity is authenticated by
GitHub TLS and Git-tree reconstruction; it is not a signed release.

The ZIP is embedded verbatim as the offline snapshot. Its import-root →
stub-distribution sidecar (from Typeshed's `stubs/<DIST>/` directories) is
generated from the same exact commit for BSK-0152 quick fixes; the bundle
manifest identity-binds its 274 entries and SHA-256
`dc995d1599210db5b5f472d6eb6869130e229c1c9a0d3a4bf158e28db25c5639`.

typeshed is also the Tier-1 baseline for standard-library stubs
([CHKARCH-STUBS-TYPESHED]); users may replace it wholesale via the
`typeshed-path` config.

Typeshed's LICENSE is a single composite file: it states the project is "licensed
under the terms of the Apache license" and that "Parts of typeshed are licensed
under different licenses (like the MIT license)" (Copyright (c) 2015 Jukka
Lehtosalo and contributors). The composite text — Apache-2.0 plus the MIT parts —
is pinned for a stable reference at commit 83c2518a9e6abbda0c44592c3483de459198f887:
https://github.com/python/typeshed/blob/83c2518a9e6abbda0c44592c3483de459198f887/LICENSE
(the standalone Apache-2.0 text is at https://www.apache.org/licenses/LICENSE-2.0).

-------------------------------------------------------------------------------

Typeshed acquisition runtime
Source:  https://github.com/algesten/ureq (v3.3.0)
         https://github.com/rustls/rustls (v0.23.43)
         https://github.com/dalek-cryptography/subtle (v2.6.1)
         https://github.com/zip-rs/zip2 (v8.6.0)
License: MIT OR Apache-2.0 (ureq)
         Apache-2.0 OR ISC OR MIT (rustls)
         BSD-3-Clause (subtle)
         MIT (zip)

Typeshed metadata and archives are fetched through Ureq's Rustls-backed
authenticated-HTTPS adapter and decoded with zip. The directly relevant
acquisition crates in the locked release graph are:

  ureq 3.3.0                    MIT OR Apache-2.0
  ureq-proto 0.6.0              MIT OR Apache-2.0
  utf8-zero 0.8.1               MIT OR Apache-2.0
  rustls 0.23.43                Apache-2.0 OR ISC OR MIT
  rustls-pki-types 1.15.1       MIT OR Apache-2.0
  rustls-webpki 0.103.13        ISC
  subtle 2.6.1                  BSD-3-Clause
  ring 0.17.14                  Apache-2.0 AND ISC
  untrusted 0.9.0               ISC
  webpki-roots 1.0.9            CDLA-Permissive-2.0
  zip 8.6.0                     MIT

The corresponding MIT, BSD-3-Clause, ISC, Apache-2.0, and
CDLA-Permissive-2.0 license texts and copyright notices are retained in
`THIRD-PARTY-LICENSES`.

-------------------------------------------------------------------------------

Salsa  —  https://github.com/salsa-rs/salsa
License: MIT OR Apache-2.0

The incremental, demand-driven query engine that powers Basilisk's sub-10ms
re-checks ([CHKARCH-INCREMENTAL-SALSA]); the same framework underpins
rust-analyzer.

Licensed under the MIT License or the Apache License, Version 2.0, at your
option. See https://opensource.org/licenses/MIT and
https://www.apache.org/licenses/LICENSE-2.0 for the full license texts.

-------------------------------------------------------------------------------

Rayon  —  https://github.com/rayon-rs/rayon
License: MIT OR Apache-2.0

Work-stealing data parallelism for file-level checking.

Licensed under the MIT License or the Apache License, Version 2.0, at your
option. See https://opensource.org/licenses/MIT and
https://www.apache.org/licenses/LICENSE-2.0 for the full license texts.

-------------------------------------------------------------------------------

tower-lsp  —  https://github.com/ebkalderon/tower-lsp
License: MIT OR Apache-2.0

The Language Server Protocol scaffolding for the LSP server.

Licensed under the MIT License or the Apache License, Version 2.0, at your
option. See https://opensource.org/licenses/MIT and
https://www.apache.org/licenses/LICENSE-2.0 for the full license texts.

-------------------------------------------------------------------------------

clap (Command Line Argument Parser)
Source:  https://github.com/clap-rs/clap (v4.x)
License: MIT OR Apache-2.0

Copyright (c) 2015-2022 Kevin K. <kbknapp@gmail.com> and clap contributors

Licensed under the MIT License or the Apache License, Version 2.0, at your
option. See https://opensource.org/licenses/MIT and
https://www.apache.org/licenses/LICENSE-2.0 for the full license texts.

-------------------------------------------------------------------------------

thiserror
Source:  https://github.com/dtolnay/thiserror (v2.0)
License: MIT OR Apache-2.0

Copyright (c) 2019 David Tolnay <dtolnay@gmail.com>

Licensed under the MIT License or the Apache License, Version 2.0, at your
option. See https://opensource.org/licenses/MIT and
https://www.apache.org/licenses/LICENSE-2.0 for the full license texts.

-------------------------------------------------------------------------------

walkdir
Source:  https://github.com/BurntSushi/walkdir (v2.5)
License: MIT OR Unlicense

Copyright (c) 2015 Andrew Gallant

Licensed under the MIT License or the Unlicense, at your option.
See https://opensource.org/licenses/MIT and https://unlicense.org for the
full license texts.

-------------------------------------------------------------------------------

serde  —  https://github.com/serde-rs/serde
License: MIT OR Apache-2.0

Serialization framework, with serde_json and toml, used for configuration and
protocol messages.

Licensed under the MIT License or the Apache License, Version 2.0, at your
option. See https://opensource.org/licenses/MIT and
https://www.apache.org/licenses/LICENSE-2.0 for the full license texts.

-------------------------------------------------------------------------------

tracing  —  https://github.com/tokio-rs/tracing
License: MIT

Copyright (c) 2019 Tokio Contributors

Structured, level-based diagnostics logging.
See https://opensource.org/licenses/MIT for the full license text.

-------------------------------------------------------------------------------

inferno
Source:        https://github.com/jonhoo/inferno.git (v0.12.7)
License:       CDDL-1.0
Modifications: NONE. Used unmodified as a Cargo dependency.

This software contains the `inferno` crate, distributed under the Common
Development and Distribution License, Version 1.0 (CDDL-1.0). The full
text of the CDDL-1.0 is available at:
https://opensource.org/licenses/CDDL-1.0

Source code for the exact `inferno 0.12.7` crate is available at
https://github.com/jonhoo/inferno.git and from its crates.io package. Basilisk
links the unmodified published crate.

-------------------------------------------------------------------------------

colored
Source:        https://github.com/mackwic/colored (v3.1.1)
License:       MPL-2.0
Modifications: NONE. Used unmodified as a Cargo dependency.

This software contains the `colored` crate, distributed under the Mozilla
Public License, Version 2.0 (MPL-2.0). The full text of the MPL-2.0 is
available at:
https://www.mozilla.org/en-US/MPL/2.0/

Source code for the exact `colored 3.1.1` crate is available at
https://github.com/mackwic/colored and from its crates.io package. Basilisk
links the unmodified published crate.

-------------------------------------------------------------------------------
