From 0c13cbc25524b3365e16fa5b2b53a90fb1c8c5e2 Mon Sep 17 00:00:00 2001 From: "Olof Lagerkvist (LTRData)" Date: Mon, 14 Sep 2026 21:11:36 +0200 Subject: [PATCH 1/3] Add third-party licensing notices --- THIRD-PARTY-NOTICES.md | 100 +++++++++++++++++++++++++++++++++++++++++ 1 file changed, 100 insertions(+) create mode 100644 THIRD-PARTY-NOTICES.md diff --git a/THIRD-PARTY-NOTICES.md b/THIRD-PARTY-NOTICES.md new file mode 100644 index 0000000..b653bea --- /dev/null +++ b/THIRD-PARTY-NOTICES.md @@ -0,0 +1,100 @@ +# Third-Party Notices + +LTRData Library is distributed under the [MIT License](LICENSE), except where +third-party material is identified separately below. Third-party software and +source code remain subject to their respective licenses. + +This document also records licensing context for dependencies where automated +license scanners may report license texts carried in an upstream package's +third-party notices rather than the primary license of that package or of this +repository. + +## MightyLittleGeodesy + +Portions of `LTRData.Geodesy` are derived from +[MightyLittleGeodesy](https://github.com/bjornsallarp/MightyLittleGeodesy) by +Björn Sållarp and have subsequently been modified and extended by Olof +Lagerkvist, LTR Data. + +The affected source files retain the original copyright and license notice: + +- `LTRData.Geodesy/Conversion/GaussKreuger.cs` +- `LTRData.Geodesy/Positions/LatLonPosition.cs` +- `LTRData.Geodesy/Positions/RT90Position.cs` +- `LTRData.Geodesy/Positions/SWEREF99Position.cs` +- `LTRData.Geodesy/Positions/WGS84Position.cs` + +The original material is licensed as follows: + +> Copyright (C) 2009 Björn Sållarp +> +> Permission is hereby granted, free of charge, to any person obtaining a copy of +> this software and associated documentation files (the "Software"), to deal in +> the Software without restriction, including without limitation the rights to +> use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of +> the Software, and to permit persons to whom the Software is furnished to do so, +> subject to the following conditions: +> +> The above copyright notice and this permission notice shall be included in all +> copies or substantial portions of the Software. +> +> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +> SOFTWARE. + +## SkiaSharp + +`LTRData.Graphics.SkiaSharp` references +[SkiaSharp](https://www.nuget.org/packages/SkiaSharp), which is distributed under +the MIT License. + +The non-packable `Rendering.Tests` project also references +[`SkiaSharp.NativeAssets.Linux`](https://www.nuget.org/packages/SkiaSharp.NativeAssets.Linux) +to execute rendering tests on Linux. `Rendering.Tests` declares +`IsPackable=false` and is not included in LTRData NuGet packages. + +SkiaSharp native-asset packages carry an upstream `THIRD-PARTY-NOTICES.txt` +containing license notices for third-party material associated with SkiaSharp and +its upstream dependencies. That notice includes, among others, MPL, GPL, LGPL +and eCos license text. Automated scanners can therefore report those licenses +against `SkiaSharp.NativeAssets.Linux` even though the package itself is +published under the MIT License. + +The presence of those upstream license texts does not make LTRData Library +licensed under each detected license. Applications that redistribute SkiaSharp +native binaries should retain and comply with the third-party notices supplied +with the corresponding SkiaSharp distribution. + +### FOSSA scanner context + +A FOSSA licensing report generated for this repository on 2026-09-14 reported +MPL-1.1, GPL-2.0-or-later, LGPL-2.1-or-later, eCos-2.0 and LGPL-2.1-only against +`SkiaSharp.NativeAssets.Linux` 4.151.2. Those findings correspond to license text +present in SkiaSharp's bundled third-party notices. The direct +`SkiaSharp.NativeAssets.Linux` reference in this repository is confined to the +non-packable `Rendering.Tests` project. + +## Microsoft ASP.NET Core packages + +Some target frameworks use Microsoft ASP.NET Core NuGet packages. These remain +subject to their upstream licenses. + +In particular, +[`Microsoft.AspNetCore.Mvc.Core`](https://www.nuget.org/packages/Microsoft.AspNetCore.Mvc.Core) +2.3.13 is licensed under the Apache License 2.0. A FOSSA licensing report +generated for this repository on 2026-09-14 identified that version as +"Unlicensed". That classification does not reflect the upstream package license. + +## Other NuGet dependencies + +Projects in this repository use additional NuGet packages under their respective +upstream licenses. Package references in project files and restored dependency +metadata determine the dependency versions used by a particular build. + +This document is intended to identify embedded third-party source and licensing +situations requiring additional explanation. It is not intended to duplicate a +complete generated software bill of materials. From 36ac86d4acf9012a130b38c56fefa4c724af6d6e Mon Sep 17 00:00:00 2001 From: "Olof Lagerkvist (LTRData)" Date: Mon, 14 Sep 2026 21:11:55 +0200 Subject: [PATCH 2/3] Include licensing files in NuGet packages --- Directory.Build.props | 2 ++ 1 file changed, 2 insertions(+) diff --git a/Directory.Build.props b/Directory.Build.props index ee9f4a4..1787100 100644 --- a/Directory.Build.props +++ b/Directory.Build.props @@ -35,6 +35,8 @@ + + From 7940a74210cfadd5ca654e2c3196dd095ee889d9 Mon Sep 17 00:00:00 2001 From: "Olof Lagerkvist (LTRData)" Date: Mon, 14 Sep 2026 21:12:17 +0200 Subject: [PATCH 3/3] Link licensing and third-party notices --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 7e911fa..63e1c14 100644 --- a/README.md +++ b/README.md @@ -126,3 +126,10 @@ explain how netexpr and GraphViewer use the newer APIs here. Geodesy includes work derived from Björn Sållarp's [MightyLittleGeodesy](https://github.com/bjornsallarp/MightyLittleGeodesy), extended by Olof Lagerkvist. Existing source headers retain authorship and license notices. + +## License and third-party notices + +LTRData Library is distributed under the [MIT License](LICENSE). See +[THIRD-PARTY-NOTICES.md](THIRD-PARTY-NOTICES.md) for embedded third-party source, +attribution requirements, and additional context for dependency-license findings +reported by automated scanners such as FOSSA.