Files
penguin-harness/THIRD-PARTY-NOTICES.md
2026-07-29 16:49:40 +08:00

2.4 KiB

Third-party notices

PenguinHarness itself is licensed under Apache-2.0 (see LICENSE). Some distributed release artifacts additionally bundle third-party programs, which keep their own licenses. This file records those, and how to obtain their source.

Nothing listed here is part of this repository — the components are downloaded by the release workflow (.github/workflows/release.yml) and placed alongside the application inside the release archives. Installing from npm (@prismshadow/penguin-cli) bundles none of them.

Node.js runtime — node/

Present in every archive except penguin-universal.tar.gz. Downloaded unmodified from the official distribution at https://nodejs.org/dist/. Node.js is MIT-licensed with additional notices for its dependencies; the full text ships inside the bundle (node/LICENSE, and on Windows node/LICENSE).

Source: https://github.com/nodejs/node — the tag matching the bundled version, which is pinned as NODE_RUNTIME_VERSION in the release workflow.

MinGit (Git for Windows) — git/

Present in penguin-win32-x64.zip only.

The Windows package bundles MinGit, the minimal redistributable build of Git for Windows, unmodified, as published by the Git for Windows project. It supplies the POSIX shell that the agent's exec_command runs (git/usr/bin/sh.exe, which is GNU bash), roughly sixty core utilities, and git.exe. It is used only when the machine has no Git for Windows installation of its own; a user-installed one always takes precedence.

License: GNU General Public License version 2 (with the additional per-component licenses that Git for Windows ships). The complete license texts are included inside the bundle at git/LICENSE.txt and git/mingw64/share/licenses/.

Version bundled: the release attached to the Git for Windows tag pinned as MINGIT_TAG in the release workflow.

Written offer / source availability. The complete corresponding source code for the bundled MinGit is published by the Git for Windows project at:

The bundled binaries are byte-identical to the MinGit-<version>-64-bit.zip asset of that tag; no patches are applied. If you need the corresponding source and cannot obtain it from the URLs above, open an issue on this repository and we will provide it.