From 81a4b0ebb3ddfd9dba50232448e22fff55374e0e Mon Sep 17 00:00:00 2001 From: Joob1n Date: Mon, 17 Aug 2026 14:36:40 +0800 Subject: [PATCH 1/3] docs: declare the bundled Geist webfonts in LICENSE MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Part of #2974. The renderer bundle emits Geist Variable and Geist Mono Variable `.woff2` files, so binary artifacts redistribute OFL-1.1 material that LICENSE did not declare. Worth noting for the checklist: a dependency scan does not find this. Both `@fontsource-variable/*` packages are declared as devDependencies and neither appears in `app.asar` — only the font files vite emits into `dist-renderer` ship. Verified by listing `dist-renderer/assets/*.woff2` (11 files across both families) against the packaged bundle. The same check clears the other two entries the audit listed for this item. `lightningcss` and `caniuse-lite` are build-time only and reach no artifact, so neither needs a LICENSE declaration for binary releases; `caniuse-lite` is also CC-BY-4.0 rather than MPL-2.0. Claude-Session: https://claude.ai/code/session_014ajaRxC4jydavY9nYUFj5J --- LICENSE | 96 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 96 insertions(+) diff --git a/LICENSE b/LICENSE index 7d278d03413..68d2e1c334b 100644 --- a/LICENSE +++ b/LICENSE @@ -234,3 +234,99 @@ AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. + + +Geist and Geist Mono (bundled webfonts) + +Source: https://github.com/vercel/geist-font +Copyright 2024 The Geist Project Authors +License: SIL Open Font License, Version 1.1 + +Maka's desktop renderer bundle embeds Geist Variable and Geist Mono Variable +webfont files. The packages that carry them are build-time dependencies, but +the `.woff2` files themselves are emitted into the renderer bundle and are +therefore redistributed in binary artifacts. The following SIL Open Font +License, Version 1.1 applies to that material: + +PREAMBLE +The goals of the Open Font License (OFL) are to stimulate worldwide +development of collaborative font projects, to support the font creation +efforts of academic and linguistic communities, and to provide a free and +open framework in which fonts may be shared and improved in partnership +with others. + +The OFL allows the licensed fonts to be used, studied, modified and +redistributed freely as long as they are not sold by themselves. The +fonts, including any derivative works, can be bundled, embedded, +redistributed and/or sold with any software provided that any reserved +names are not used by derivative works. The fonts and derivatives, +however, cannot be released under any other type of license. The +requirement for fonts to remain under this license does not apply +to any document created using the fonts or their derivatives. + +DEFINITIONS +"Font Software" refers to the set of files released by the Copyright +Holder(s) under this license and clearly marked as such. This may +include source files, build scripts and documentation. + +"Reserved Font Name" refers to any names specified as such after the +copyright statement(s). + +"Original Version" refers to the collection of Font Software components as +distributed by the Copyright Holder(s). + +"Modified Version" refers to any derivative made by adding to, deleting, +or substituting -- in part or in whole -- any of the components of the +Original Version, by changing formats or by porting the Font Software to a +new environment. + +"Author" refers to any designer, engineer, programmer, technical +writer or other person who contributed to the Font Software. + +PERMISSION & CONDITIONS +Permission is hereby granted, free of charge, to any person obtaining +a copy of the Font Software, to use, study, copy, merge, embed, modify, +redistribute, and sell modified and unmodified copies of the Font +Software, subject to the following conditions: + +1) Neither the Font Software nor any of its individual components, +in Original or Modified Versions, may be sold by itself. + +2) Original or Modified Versions of the Font Software may be bundled, +redistributed and/or sold with any software, provided that each copy +contains the above copyright notice and this license. These can be +included either as stand-alone text files, human-readable headers or +in the appropriate machine-readable metadata fields within text or +binary files as long as those fields can be easily viewed by the user. + +3) No Modified Version of the Font Software may use the Reserved Font +Name(s) unless explicit written permission is granted by the corresponding +Copyright Holder. This restriction only applies to the primary font name as +presented to the users. + +4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font +Software shall not be used to promote, endorse or advertise any +Modified Version, except to acknowledge the contribution(s) of the +Copyright Holder(s) and the Author(s) or with their explicit written +permission. + +5) The Font Software, modified or unmodified, in part or in whole, +must be distributed entirely under this license, and must not be +distributed under any other license. The requirement for fonts to +remain under this license does not apply to any document created +using the Font Software. + +TERMINATION +This license becomes null and void if any of the above conditions are +not met. + +DISCLAIMER +THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, +EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF +MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT +OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE +COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, +INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL +DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING +FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM +OTHER DEALINGS IN THE FONT SOFTWARE. From 210d8814e3e27b1bbacd828aaaf4d6aa5d3a52ec Mon Sep 17 00:00:00 2001 From: Joob1n Date: Mon, 17 Aug 2026 15:08:00 +0800 Subject: [PATCH 2/3] docs: include the OFL header with the bundled font license text MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The copied license started at PREAMBLE and dropped the standard header — license name, version, date, and the upstream FAQ URL. For a declaration whose whole purpose is reproducing the license the fonts ship under, a truncated copy undercuts the point. The embedded text is now byte-identical to the upstream `@fontsource-variable/geist` LICENSE from the header onward, and the introducing sentence no longer restates what that header already says. Claude-Session: https://claude.ai/code/session_014ajaRxC4jydavY9nYUFj5J --- LICENSE | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/LICENSE b/LICENSE index 68d2e1c334b..d62861f9cbe 100644 --- a/LICENSE +++ b/LICENSE @@ -245,8 +245,17 @@ License: SIL Open Font License, Version 1.1 Maka's desktop renderer bundle embeds Geist Variable and Geist Mono Variable webfont files. The packages that carry them are build-time dependencies, but the `.woff2` files themselves are emitted into the renderer bundle and are -therefore redistributed in binary artifacts. The following SIL Open Font -License, Version 1.1 applies to that material: +therefore redistributed in binary artifacts. The upstream license text for +that material follows verbatim: + +This Font Software is licensed under the SIL Open Font License, Version 1.1. +This license is copied below, and is also available with a FAQ at: +http://scripts.sil.org/OFL + + +----------------------------------------------------------- +SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007 +----------------------------------------------------------- PREAMBLE The goals of the Open Font License (OFL) are to stimulate worldwide From 33f0e6984dd7e9e98b255711ded48758907c4bc7 Mon Sep 17 00:00:00 2001 From: Joob1n Date: Mon, 17 Aug 2026 15:15:26 +0800 Subject: [PATCH 3/3] docs: pin the font package versions in the LICENSE entry The entry named a source and a copyright but no version, so the attribution could not be checked against what actually shipped. The `trycua/cua` entry above pins a revision for the same reason. Records the emitting package versions from package-lock.json rather than a font-repo revision: the `.woff2` files are built by those packages, so they are what a reader would have to fetch to reproduce the bundled bytes. Claude-Session: https://claude.ai/code/session_014ajaRxC4jydavY9nYUFj5J --- LICENSE | 1 + 1 file changed, 1 insertion(+) diff --git a/LICENSE b/LICENSE index d62861f9cbe..15e4064fdb9 100644 --- a/LICENSE +++ b/LICENSE @@ -239,6 +239,7 @@ SOFTWARE. Geist and Geist Mono (bundled webfonts) Source: https://github.com/vercel/geist-font +Emitted by: @fontsource-variable/geist 5.3.0, @fontsource-variable/geist-mono 5.3.0 Copyright 2024 The Geist Project Authors License: SIL Open Font License, Version 1.1