From b995d6927e162e59f3f6ceb6c42b86186b73131f Mon Sep 17 00:00:00 2001 From: Seyed Yahya Shirazi Date: Sun, 19 Jul 2026 06:22:07 -0700 Subject: [PATCH 1/2] Include verbatim third-party license notices MIT, ISC, and the Boost Software License require the copyright and permission notice to accompany redistributed copies. The components were named in LICENSE and README but several notices were not shipped. - Add THIRD-PARTY-NOTICES.md with verbatim texts (liblsl MIT, asio BSL, Catch2 BSL, pugixml MIT, Loguru, libsodium ISC), assembled from the upstream files rather than transcribed - liblsl/LICENSE stated the proprietary terms over MIT-derived code and omitted the upstream notice; it now reproduces the original MIT license and scopes the proprietary grant to the additions and the integrated work - asio headers referenced an accompanying LICENSE_1_0.txt that was not present; added it - LICENSE: state that incorporated components remain under their own terms and point to the notices file - README: link the notices file Wording is legal-adjacent and should be confirmed with UCSD OIC. Closes #6 --- LICENSE | 4 +- README.md | 1 + THIRD-PARTY-NOTICES.md | 121 +++++++++++++++++++++++++ liblsl/LICENSE | 26 +++++- liblsl/thirdparty/asio/LICENSE_1_0.txt | 23 +++++ 5 files changed, 172 insertions(+), 3 deletions(-) create mode 100644 THIRD-PARTY-NOTICES.md create mode 100644 liblsl/thirdparty/asio/LICENSE_1_0.txt diff --git a/LICENSE b/LICENSE index b851177..06f5577 100644 --- a/LICENSE +++ b/LICENSE @@ -145,7 +145,9 @@ Available separately at: https://github.com/sccn/liblsl - Loguru: Logging (Public Domain) - Catch2: Testing framework (Boost Software License) -IMPORTANT: The availability of these components under open-source licenses does NOT grant any rights to Secure LSL beyond what is explicitly stated in this license. +Each incorporated component remains subject to its own license. This license governs the Secure LSL additions and the integrated work; it does not alter, and does not purport to alter, the terms under which those components were originally released. Their verbatim notices are reproduced in THIRD-PARTY-NOTICES.md in the repository root, as those licenses require. + +IMPORTANT: The availability of these components under open-source licenses does NOT grant any rights to the Secure LSL additions or to the integrated work beyond what is explicitly stated in this license. The integration, modification, and novel implementations in this Repository create a new proprietary product. To use the original open-source components, obtain them from their original sources. diff --git a/README.md b/README.md index f31dd79..f7610dd 100644 --- a/README.md +++ b/README.md @@ -204,4 +204,5 @@ Secure LSL is proprietary software. See [LICENSE](LICENSE) for terms. This software incorporates [liblsl](https://github.com/sccn/liblsl) (MIT License) and [libsodium](https://libsodium.org/) (ISC License). +Verbatim notices for all incorporated components are in [THIRD-PARTY-NOTICES.md](THIRD-PARTY-NOTICES.md). The original open-source components are available from their respective repositories. diff --git a/THIRD-PARTY-NOTICES.md b/THIRD-PARTY-NOTICES.md new file mode 100644 index 0000000..6018db8 --- /dev/null +++ b/THIRD-PARTY-NOTICES.md @@ -0,0 +1,121 @@ +# Third-Party Notices + +Secure LSL incorporates the open-source components listed below. +Each remains subject to its own license; the terms in `LICENSE` apply to the +Secure LSL additions and to the integrated work, not to these components in +their original form. The verbatim notices follow, as those licenses require. + +--- + +## liblsl (MIT License) + +Base Lab Streaming Layer library, originally by Christian A. Kothe. +Upstream: https://github.com/sccn/liblsl + +``` +Copyright (C) 2012 Christian A. Kothe + +Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + +This software uses the following libraries: + + +pugixml (https://pugixml.org), MIT. pugixml is Copyright (C) 2006-2018 Arseny Kapoulkine. +Boost (https://boost.org), Boost Software License +Loguru (https://github.com/emilk/loguru), Public Domain +Catch2 (https://github.com/catchorg/Catch2), Boost Software License +``` + +--- + +## asio (Boost Software License 1.0) + +Copyright (c) 2003-2021 Christopher M. Kohlhoff (chris at kohlhoff dot com) +Vendored at `liblsl/thirdparty/asio/`. + +``` +Boost Software License - Version 1.0 - August 17th, 2003 + +Permission is hereby granted, free of charge, to any person or organization +obtaining a copy of the software and accompanying documentation covered by +this license (the "Software") to use, reproduce, display, distribute, +execute, and transmit the Software, and to prepare derivative works of the +Software, and to permit third-parties to whom the Software is furnished to +do so, all subject to the following: + +The copyright notices in the Software and this entire statement, including +the above license grant, this restriction and the following disclaimer, +must be included in all copies of the Software, in whole or in part, and +all derivative works of the Software, unless such copies or derivative +works are solely in the form of machine-executable object code generated by +a source language processor. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT +SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE +FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE, +ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER +DEALINGS IN THE SOFTWARE. +``` + +--- + +## Catch2 (Boost Software License 1.0) + +Vendored at `liblsl/thirdparty/catch2/`; notice retained in that directory. + +--- + +## pugixml (MIT License) + +Vendored at `liblsl/thirdparty/pugixml/`. + +``` +#if defined(PUGIXML_HEADER_ONLY) && !defined(PUGIXML_SOURCE) +# define PUGIXML_SOURCE "pugixml.cpp" +# include PUGIXML_SOURCE +#endif + +/** +Copyright (c) 2006-2020 Arseny Kapoulkine + +Permission is hereby granted, free of charge, to any person +obtaining a copy of this software and associated documentation +files (the "Software"), to deal in the Software without +restriction, including without limitation the rights to use, +copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the +Software is furnished to do so, subject to the following +conditions: + +The above copyright notice and this permission notice shall be +included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES +OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND +NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT +HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, +WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR +OTHER DEALINGS IN THE SOFTWARE. +``` + +--- + +## Loguru (Public Domain) + +Vendored at `liblsl/thirdparty/loguru/`; notice retained in that directory. + +--- + +## libsodium (ISC License) + +Linked as an external dependency (located via pkg-config at build time) and not +vendored in this repository. Binary distributions that bundle libsodium must +include its ISC notice; see https://github.com/jedisct1/libsodium. diff --git a/liblsl/LICENSE b/liblsl/LICENSE index 4cabed2..cc9f039 100644 --- a/liblsl/LICENSE +++ b/liblsl/LICENSE @@ -14,8 +14,30 @@ This directory contains code derived from liblsl (Lab Streaming Layer), originally authored by Christian A. Kothe under the MIT License. The original, unmodified liblsl is available at: https://github.com/sccn/liblsl -All code in this directory, including both modifications and original -components, is governed by the Secure LSL License in the repository root. +The Secure LSL License in the repository root governs the modifications and +security additions made here, and the integrated work as a whole. It does not +purport to alter the terms under which the original liblsl code was released: +that code remains available under the MIT License from its upstream source, and +the MIT notice is reproduced below as that license requires. See also +THIRD-PARTY-NOTICES.md in the repository root. + +ORIGINAL liblsl MIT LICENSE + +Copyright (C) 2012 Christian A. Kothe + +Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + +This software uses the following libraries: + + +pugixml (https://pugixml.org), MIT. pugixml is Copyright (C) 2006-2018 Arseny Kapoulkine. +Boost (https://boost.org), Boost Software License +Loguru (https://github.com/emilk/loguru), Public Domain +Catch2 (https://github.com/catchorg/Catch2), Boost Software License THIRD-PARTY LIBRARIES diff --git a/liblsl/thirdparty/asio/LICENSE_1_0.txt b/liblsl/thirdparty/asio/LICENSE_1_0.txt new file mode 100644 index 0000000..36b7cd9 --- /dev/null +++ b/liblsl/thirdparty/asio/LICENSE_1_0.txt @@ -0,0 +1,23 @@ +Boost Software License - Version 1.0 - August 17th, 2003 + +Permission is hereby granted, free of charge, to any person or organization +obtaining a copy of the software and accompanying documentation covered by +this license (the "Software") to use, reproduce, display, distribute, +execute, and transmit the Software, and to prepare derivative works of the +Software, and to permit third-parties to whom the Software is furnished to +do so, all subject to the following: + +The copyright notices in the Software and this entire statement, including +the above license grant, this restriction and the following disclaimer, +must be included in all copies of the Software, in whole or in part, and +all derivative works of the Software, unless such copies or derivative +works are solely in the form of machine-executable object code generated by +a source language processor. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT +SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE +FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE, +ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER +DEALINGS IN THE SOFTWARE. From 955a73b620387ce4619e7330c006ddd3125c1015 Mon Sep 17 00:00:00 2001 From: Seyed Yahya Shirazi Date: Sun, 19 Jul 2026 09:54:41 -0700 Subject: [PATCH 2/2] State that components retain their original licenses --- LICENSE | 8 +++++++- THIRD-PARTY-NOTICES.md | 11 ++++++++--- 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/LICENSE b/LICENSE index 06f5577..1e47e41 100644 --- a/LICENSE +++ b/LICENSE @@ -145,7 +145,13 @@ Available separately at: https://github.com/sccn/liblsl - Loguru: Logging (Public Domain) - Catch2: Testing framework (Boost Software License) -Each incorporated component remains subject to its own license. This license governs the Secure LSL additions and the integrated work; it does not alter, and does not purport to alter, the terms under which those components were originally released. Their verbatim notices are reproduced in THIRD-PARTY-NOTICES.md in the repository root, as those licenses require. +COMPONENT LICENSING POLICY + +Incorporated components retain their original licenses. Where a component was released under the MIT License, it remains under the MIT License in this Repository; the same applies to components under the ISC License, the Boost Software License, or a public-domain dedication. Their verbatim notices are reproduced in THIRD-PARTY-NOTICES.md in the repository root, and each component directory retains its own license file. + +Client applications and language bindings distributed as components of this Repository, together with the integration code added to them, are made available under the license of the upstream project each derives from, not under the proprietary terms of this license. That integration code consists of interface declarations and status-display logic that call the public library API; it contains no cryptographic implementation. + +This license governs the Secure LSL security implementation, the modifications made to the core library, and the integrated work as a whole. It does not alter, and does not purport to alter, the terms under which any incorporated component was originally released. IMPORTANT: The availability of these components under open-source licenses does NOT grant any rights to the Secure LSL additions or to the integrated work beyond what is explicitly stated in this license. The integration, modification, and novel implementations in this Repository create a new proprietary product. diff --git a/THIRD-PARTY-NOTICES.md b/THIRD-PARTY-NOTICES.md index 6018db8..d86d36a 100644 --- a/THIRD-PARTY-NOTICES.md +++ b/THIRD-PARTY-NOTICES.md @@ -1,9 +1,14 @@ # Third-Party Notices Secure LSL incorporates the open-source components listed below. -Each remains subject to its own license; the terms in `LICENSE` apply to the -Secure LSL additions and to the integrated work, not to these components in -their original form. The verbatim notices follow, as those licenses require. +Each retains its original license: MIT components remain MIT, ISC remain ISC, +and so on. The proprietary terms in `LICENSE` apply to the Secure LSL security +implementation and the integrated work, not to these components. Client +applications and language bindings shipped as components of this repository are +likewise available under their upstream licenses, including the integration +code added to them, which calls the public library API and contains no +cryptographic implementation. The verbatim notices follow, as those licenses +require. ---