Packaging documentation: source and notice mapping for six bundled libraries in 4.11.0.86 Linux contrib wheel

[sanshixiansheng]

Expected behaviour

The third-party notices or linked build metadata should make it possible to associate bundled native libraries with their source versions and copyright/licence notices.

Actual behaviour

While reviewing the official artifact opencv_contrib_python-4.11.0.86-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl, I could not locate a specific source/version and notice mapping for the six files below in its LICENSE-3RD-PARTY.txt.

Wheel SHA-256: c47c0ef1098461cdc6fa1cdce4c942b8ec974c87423f4b5951443d26bb9ae407

PyPI release

These members are under opencv_contrib_python.libs/:

Bundled filename	SHA-256
libquadmath-96973f99.so.0.0.0	934c22ded0e7d169c4d4678876c96051adf3d94545da962f60b41659b075da3b
libgfortran-91cc3cb1.so.3.0.0	55e3eb67306c2ff17e6f8a0810eaa0dcb26e94cd83924c5065d5040e87814608
libxkbcommon-x11-c65ed502.so.0.0.0	34b0726b008fe059b70204265080e5db34afacc0af2a12698ad6c38ae1166d54
libxkbcommon-71ae2972.so.0.0.0	1fcb38a646bd1ce1daaf682ad29b72e65bfdf67a06335b278f8e99d0b7530212
libX11-xcb-0e257303.so.1.0.0	a8cf52f67fb6844bfa19d47fdfb6781a02af3ca6afe78ba9fb58a314b9365d72
libopenblas-r0-f650aae0.3.3.so	79ec02b53f573cd7116a89f04c397473018e7fda05720b354d43505c19d47958

I found the aggregate notices for FFmpeg, Qt, OpenSSL, PNG and xcb-related components, but could not associate the six files above precisely. This is not a claim that they cannot be used commercially; I am trying to complete the artifact-to-notice mapping.

Steps to reproduce / artifact scope

Inspect the above wheel's opencv_contrib_python.libs/ directory and LICENSE-3RD-PARTY.txt without importing or rebuilding the package.

• Platform: Linux x86_64, manylinux2014 / manylinux_2_17 wheel.
• Version: opencv-contrib-python 4.11.0.86, cp37-abi3 wheel used with CPython 3.11.
• The request deliberately concerns this published version; I have not asserted that it is the latest release.

Could you provide links to the exact source packages/versions, build recipe and corresponding notices for these files? A build SBOM and indication of additional statically linked components would also help, if available. Another wheel's similarly named library would not establish this artifact's provenance.

I checked #855 and searched for SBOM and the bundled library/licence names; I did not find an existing artifact-specific mapping. I am not requesting legal advice or a rebuild.

Issue submission checklist

• This is a binary packaging/documentation issue, not a generic OpenCV coding question.
• I read the README and understand that this repository provides the Python package build toolchain.
• The request relates to the pre-built binaries and their build/notice metadata.
• Latest version: intentionally reviewing the fixed 4.11.0.86 release described above.