Include verbatim third-party license notices

LICENSE

@@ -145,7 +145,15 @@ Available separately at: https://github.com/sccn/liblsl
 - Loguru: Logging (Public Domain)
 - Catch2: Testing framework (Boost Software License)
 
-IMPORTANT: The availability of these components under open-source licenses does NOT grant any rights to Secure LSL beyond what is explicitly stated in this license.
+COMPONENT LICENSING POLICY
+
+Incorporated components retain their original licenses. Where a component was released under the MIT License, it remains under the MIT License in this Repository; the same applies to components under the ISC License, the Boost Software License, or a public-domain dedication. Their verbatim notices are reproduced in THIRD-PARTY-NOTICES.md in the repository root, and each component directory retains its own license file.
+
+Client applications and language bindings distributed as components of this Repository, together with the integration code added to them, are made available under the license of the upstream project each derives from, not under the proprietary terms of this license. That integration code consists of interface declarations and status-display logic that call the public library API; it contains no cryptographic implementation.
+
+This license governs the Secure LSL security implementation, the modifications made to the core library, and the integrated work as a whole. It does not alter, and does not purport to alter, the terms under which any incorporated component was originally released.
+
+IMPORTANT: The availability of these components under open-source licenses does NOT grant any rights to the Secure LSL additions or to the integrated work beyond what is explicitly stated in this license.
 The integration, modification, and novel implementations in this Repository create a new proprietary product.
 To use the original open-source components, obtain them from their original sources.
 

README.md

@@ -204,4 +204,5 @@ Secure LSL is proprietary software.
 See [LICENSE](LICENSE) for terms.
 
 This software incorporates [liblsl](https://github.com/sccn/liblsl) (MIT License) and [libsodium](https://libsodium.org/) (ISC License).
+Verbatim notices for all incorporated components are in [THIRD-PARTY-NOTICES.md](THIRD-PARTY-NOTICES.md).
 The original open-source components are available from their respective repositories.

THIRD-PARTY-NOTICES.md

@@ -0,0 +1,126 @@
+# Third-Party Notices
+
+Secure LSL incorporates the open-source components listed below.
+Each retains its original license: MIT components remain MIT, ISC remain ISC,
+and so on. The proprietary terms in `LICENSE` apply to the Secure LSL security
+implementation and the integrated work, not to these components. Client
+applications and language bindings shipped as components of this repository are
+likewise available under their upstream licenses, including the integration
+code added to them, which calls the public library API and contains no
+cryptographic implementation. The verbatim notices follow, as those licenses
+require.
+
+---
+
+## liblsl (MIT License)
+
+Base Lab Streaming Layer library, originally by Christian A. Kothe.
+Upstream: https://github.com/sccn/liblsl
+
+```
+Copyright (C) 2012 Christian A. Kothe
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+This software uses the following libraries:
+
+
+pugixml (https://pugixml.org), MIT. pugixml is Copyright (C) 2006-2018 Arseny Kapoulkine.
+Boost (https://boost.org), Boost Software License
+Loguru (https://github.com/emilk/loguru), Public Domain
+Catch2 (https://github.com/catchorg/Catch2), Boost Software License
+```
+
+---
+
+## asio (Boost Software License 1.0)
+
+Copyright (c) 2003-2021 Christopher M. Kohlhoff (chris at kohlhoff dot com)
+Vendored at `liblsl/thirdparty/asio/`.
+
+```
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
+```
+
+---
+
+## Catch2 (Boost Software License 1.0)
+
+Vendored at `liblsl/thirdparty/catch2/`; notice retained in that directory.
+
+---
+
+## pugixml (MIT License)
+
+Vendored at `liblsl/thirdparty/pugixml/`.
+
+```
+#if defined(PUGIXML_HEADER_ONLY) && !defined(PUGIXML_SOURCE)
+#	define PUGIXML_SOURCE "pugixml.cpp"
+#	include PUGIXML_SOURCE
+#endif
+
+/**
+Copyright (c) 2006-2020 Arseny Kapoulkine
+
+Permission is hereby granted, free of charge, to any person
+obtaining a copy of this software and associated documentation
+files (the "Software"), to deal in the Software without
+restriction, including without limitation the rights to use,
+copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+OTHER DEALINGS IN THE SOFTWARE.
+```
+
+---
+
+## Loguru (Public Domain)
+
+Vendored at `liblsl/thirdparty/loguru/`; notice retained in that directory.
+
+---
+
+## libsodium (ISC License)
+
+Linked as an external dependency (located via pkg-config at build time) and not
+vendored in this repository. Binary distributions that bundle libsodium must
+include its ISC notice; see https://github.com/jedisct1/libsodium.

liblsl/LICENSE

@@ -14,8 +14,30 @@ This directory contains code derived from liblsl (Lab Streaming Layer),
 originally authored by Christian A. Kothe under the MIT License. The original,
 unmodified liblsl is available at: https://github.com/sccn/liblsl
 
-All code in this directory, including both modifications and original
-components, is governed by the Secure LSL License in the repository root.
+The Secure LSL License in the repository root governs the modifications and
+security additions made here, and the integrated work as a whole. It does not
+purport to alter the terms under which the original liblsl code was released:
+that code remains available under the MIT License from its upstream source, and
+the MIT notice is reproduced below as that license requires. See also
+THIRD-PARTY-NOTICES.md in the repository root.
+
+ORIGINAL liblsl MIT LICENSE
+
+Copyright (C) 2012 Christian A. Kothe
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+This software uses the following libraries:
+
+
+pugixml (https://pugixml.org), MIT. pugixml is Copyright (C) 2006-2018 Arseny Kapoulkine.
+Boost (https://boost.org), Boost Software License
+Loguru (https://github.com/emilk/loguru), Public Domain
+Catch2 (https://github.com/catchorg/Catch2), Boost Software License
 
 THIRD-PARTY LIBRARIES
 

liblsl/thirdparty/asio/LICENSE_1_0.txt

@@ -0,0 +1,23 @@
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.