Third-party notices and source provenance

Archive Witness depends on third-party software. Public release packaging must include the notices and source/provenance material required by the exact components that ship in that release.

Release-specific notices for Archive Witness 1.0.6.0

These immutable files are published beside the signed release artifact:

• Complete third-party component list
• Machine-readable release component inventory
• FFmpeg notice and source provenance
• FFmpeg build and checksum record
• FFmpeg LGPL 3.0 license
• MIT license
• BSD 2-Clause license
• Apache 2.0 license
• .NET license
• .NET third-party notices

FFmpeg / ffprobe

Archive Witness uses FFmpeg/ffprobe for media testing. Packaging verifies a pinned LGPL build by archive and executable SHA-256, requires its human notice to match the machine-readable bundle record, and includes the LGPL text and exact source/build provenance in the signed package.

The downloadable package and this page must agree about the FFmpeg build and licensing material. Release validation is intended to fail if required notice/source material is missing or unknown.

Python-Markdown

The static website build uses Python-Markdown 3.10.3 (BSD-3-Clause) as a build-time dependency. It is not a runtime dependency of the published static website.