Update Third Party Notices

.gitattributes

@@ -0,0 +1,3 @@
+# Preserve hash-pinned third-party license texts byte-for-byte.
+LICENSES/*.txt -text -whitespace
+**/LICENSES/*.txt -text -whitespace

.github/codeql/codeql-config.yml

@@ -10,7 +10,6 @@ paths-ignore:
   - conformance/generated/**
   - docs-site/public/assets/asyncapi/**
   - packages/verifast/src/wasm/bdk-core.*
-  - packages/wallet/wallet-toolbox/docs/open-rpc/index.html
   - infra/uhrp-server-basic/src/security/edgePolicy.ts
   - infra/uhrp-server-cloud-bucket/src/security/edgePolicy.ts
   - infra/message-box-server/src/security/edgePolicy.ts

.github/workflows/release.yaml

@@ -89,6 +89,9 @@ jobs:
       - name: Verify package license payloads
         run: pnpm license:pack-check
 
+      - name: Require incorporated-material rights clearance
+        run: pnpm license:release-check
+
       - name: Verify package artifacts and clean consumers
         run: pnpm -r --if-present --filter '!@bsv/ts-stack' run pack:check
 

.sonarcloud.properties

@@ -5,7 +5,7 @@
 # detection: parallel test suites (e.g. SQLite vs IndexedDB variants of the same
 # storage tests) legitimately duplicate large blocks, and tests are already
 # excluded from sources/coverage analysis.
-sonar.exclusions=packages/verifast/src/wasm/bdk-core.*,conformance/generated/**,docs-site/public/assets/asyncapi/**,packages/wallet/wallet-toolbox/docs/open-rpc/index.html,governance/Dockerfile.container-bases
+sonar.exclusions=packages/verifast/src/wasm/bdk-core.*,conformance/generated/**,docs-site/public/assets/asyncapi/**,governance/Dockerfile.container-bases
 # The shared rate-limit and edge policies are canonical sources synchronized
 # into self-contained Docker/package build contexts and checked byte-for-byte
 # in CI. Analyze the code for issues, but do not report intentional generated

LICENSES/BIP-0032-BSD-2-Clause.txt

@@ -0,0 +1,28 @@
+BIP 32: Hierarchical Deterministic Wallets
+
+Author: Pieter Wuille
+License: BSD-2-Clause
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above attribution, this
+   list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above attribution, this
+   list of conditions and the following disclaimer in the documentation and/or
+   other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
+FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
+CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
+OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+Upstream licensing statement:
+https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki

LICENSES/BIP-0039-MIT.txt

@@ -0,0 +1,26 @@
+BIP 39: Mnemonic code for generating deterministic keys
+
+Authors: Marek Palatinus, Pavol Rusnak, Aaron Voisine, and Sean Bowe
+License: MIT
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above attribution, this permission notice and the statement that BIP 39
+falls under the MIT License shall be included in all copies or substantial
+portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Upstream licensing statement:
+https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki

LICENSES/Boost-1.0.txt

@@ -0,0 +1,23 @@
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.