ZScripter includes LGPL-covered software in embedded dynamic frameworks and
in its independently relinkable shared Ren'Py architecture.

The dynamic frameworks contain libsndfile 1.2.2 and mpg123 1.33.7 under the
GNU Lesser General Public License version 2.1.

The only permitted Ren'Py shipping topology is exactly three CPython
substrates, three CPython-keyed native-module unions, 20 content-addressed
lineage bases, and 115 direct exact-release overlays. This static notice does
not claim that those artifacts are present. A build may expose Ren'Py license
sections only after all six native artifacts and the exact compiled catalog
are promoted into that build.

For a promoted Ren'Py build, generated shipping manifests publish the exact
component source locks, linked-framework inventory, local modifications,
build inputs, relink instructions, and applicable notices. Those generated
manifests, rather than this target-description text, are authoritative for
exact revisions, hashes, and relink material.

Upstream source archives used by the app-level dynamic frameworks are:

libsndfile 1.2.2:
https://github.com/libsndfile/libsndfile/releases/download/1.2.2/libsndfile-1.2.2.tar.xz

mpg123 1.33.7:
https://www.mpg123.de/download/mpg123-1.33.7.tar.bz2

The KiriKiri shared runtime statically embeds a private, hidden-symbol
FreeType 2.6.3 closure pinned through krkrsdl2/krkrz. Its exact source,
ordered 38-unit build authority, license, and per-file receipt are included
under engines/kirikiri/third_party/kirikiroid2-1.3.9/freetype. Upstream:
https://github.com/krkrz/freetype/tree/09d514321424e5ddf30f3dc84a559efaa6c99415

The KiriKiri WaveSoundBuffer slice statically embeds the memory-backed
stb_vorbis 1.20 decoder with hidden symbols. The exact header, its extracted
MIT/public-domain dual-license text, FAudio source-tree notice, behavioral
authority snapshots, and per-file receipt are included under
engines/kirikiri/third_party/kirikiroid2-1.3.9/audio. The platform FAudio host
is not linked. Pinned upstream source authority:
https://github.com/FNA-XNA/FAudio/tree/e787ed76558db49927e2cce6f08735b93870bb16

The KiriKiri image slice statically embeds a hidden-symbol, scalar,
decode-only libwebp 1.6.0 closure. The exact 29 build units, internal headers,
portable configuration, copyright license, patent grant, and per-file receipt
are included under engines/kirikiri/third_party/libwebp-1.6.0. Pinned official
upstream source:
https://chromium.googlesource.com/webm/libwebp/+/4fa21912338357f89e4fd51cf2368325b59e9bd9

The KiriKiri image slice also statically embeds the hidden-symbol, scalar,
decode-only libbpg 0.9.8 closure used by Kirikiroid2. BSD-licensed libbpg and
the modified LGPL-2.1-or-later FFmpeg HEVC subset, exact 20-unit build list,
portable configuration, notices, receipt, and relink inputs are included under
engines/kirikiri/third_party/libbpg-0.9.8. Encoder, x265/JCTVC, tools, viewer,
JavaScript, and system-FFmpeg paths are not linked. Official upstream source:
https://bellard.org/bpg/

The KiriKiri movie slice statically links a focused, network-disabled FFmpeg
6.1.6 profile under LGPL-2.1-or-later; the KiriKiri movie API uses its decode
surface only. The reproducible
component-selection, license guards, and relink recipe are in
tools/build_ffmpeg_lite.sh; every build emits the exact enabled-component
receipt. The build explicitly excludes GPL, version-3-only, and nonfree
components. Official corresponding source:
https://ffmpeg.org/releases/ffmpeg-6.1.6.tar.xz
SHA-256: d4fcb164028dd3beee5d92c0ac72e46aac6973c75ea12dc14de07bf8f407370a

The KiriKiri PVRv3 slice statically embeds Cocos2d-x 3.6's two-file PVRTC1
software decoder with hidden symbols. The exact source blobs, MIT notice,
receipt, and relink inputs are included under
engines/kirikiri/third_party/cocos2d-x-3.6-pvrtc. No Cocos renderer or texture
encoder is linked. Official upstream source:
https://github.com/cocos2d/cocos2d-x/tree/cocos2d-x-3.6/cocos/base

The KiriKiri portable-archive slice statically embeds the public-domain,
extraction-only 7z decoder closure from LZMA SDK 26.02. The exact 32 source and
header files, per-file hashes, compile definitions, symbol-namespace contract,
and regeneration recipe are included under
engines/kirikiri/third_party/lzma-sdk-26.02 and
engines/kirikiri/scripts/stage_lzma_sdk_sources.py. Pinned upstream source:
https://github.com/ip7z/7zip/tree/f9d78aff31a5f2521ae7ddbdc97c4a8855808959

For at least three years after distribution of this app build, the app
distributor will provide the exact corresponding source, local patches,
license notices, build instructions, and relink materials for every bundled
LGPL-covered component on request through the App Store support contact.