# Third-party software notices

This inventory covers components currently known to be copied into the source
tree, bundled in the Android APK, or installed by DroidDesk. It must be updated
whenever a dependency, binary, bootstrap, wallpaper, or other asset changes.

## Bundled in the Android application

| Component | Location | License/status | Upstream |
|---|---|---|---|
| Termux:X11 Android and input code | `app/android/app/src/main/java/com/termux/x11/` | GPL-3.0, with retained BSD-style notices on files derived from Chromium code | <https://github.com/termux/termux-x11> |
| Termux:X11/Xlorie native server | `app/android/app/src/main/jniLibs/arm64-v8a/libXlorie.so` | Termux:X11 is GPL-3.0. Exact source revision, submodules, patches, and reproducible build instructions must be recorded before the next public binary release. | <https://github.com/termux/termux-x11> |
| PRoot and loader | `libproot.so`, `libproot-loader.so` | Upstream PRoot is GPL-2.0-or-later. Exact source revision, patches, and build instructions must be recorded before the next public binary release. | <https://github.com/termux/proot> |
| talloc | `libtalloc.so` | Exact upstream revision, license files, patches, and build instructions have not yet been identified. This is a release blocker. | <https://talloc.samba.org/> |
| Android shared-memory compatibility library | `libandroid-shmem.so` | Exact upstream repository, revision, license, patches, and build instructions have not yet been identified. This is a release blocker. | Pending |
| DroidDesk socket relocation hook | `libsocket_hook.so` | DroidDesk GPL-3.0 source is available at `app/assets/socket_hook.c`; the prebuilt binary should be reproducibly generated by the release process. | This repository |
| Termux bootstrap | `app/assets/bootstrap-aarch64.zip` | Contains multiple packages under their individual licenses. Package license files are retained inside `share/doc/`. Exact package versions, source archives, patches, build recipe, and custom-prefix rebuild remain pending. | <https://github.com/termux/termux-packages> |
| Ubuntu-style wallpaper | `app/assets/droiddesk/ubuntu-touch-wallpaper.jpg` | Redistribution license and original author have not been verified. Replace it with an original or clearly licensed asset before the next public release. | Previously obtained from WallpaperCave |

The complete GPL-3.0 text is in [LICENSE](LICENSE) and
[LICENSES/GPL-3.0.txt](LICENSES/GPL-3.0.txt). The GPL-2.0 text is in
[LICENSES/GPL-2.0.txt](LICENSES/GPL-2.0.txt).

## Installed at runtime

DroidDesk configures package repositories and lets the device owner download
packages directly from Termux, Termux:X11, TUR, Debian, and their mirrors.
Each downloaded package remains governed by its own license. License and
copyright files installed under the package prefix or Debian root filesystem
must not be deleted.

Relevant upstream projects include:

- Termux packages: <https://github.com/termux/termux-packages>
- Termux User Repository: <https://github.com/termux-user-repository/tur>
- PRoot-Distro: <https://github.com/termux/proot-distro>
- Debian copyright information: <https://www.debian.org/legal/licenses/>

Runtime download does not remove the need to comply with a package's license
when DroidDesk itself redistributes, modifies, mirrors, or preinstalls that
package.

## Flutter and Android dependencies

Flutter and Dart packages retain their individual licenses. Release builds
must preserve the license notices generated from `pubspec.lock`, Gradle
dependencies, AndroidX, and the Flutter engine. A release compliance job should
export these notices and include them with each release artifact.

## No endorsement

Third-party project and product names are descriptive references only.
DroidDesk is not an official Termux, Termux:X11, TUR, Debian, Ubuntu, Mozilla,
or Microsoft product.