The native sid._snippet extension statically links third-party Rust crates.
Their exact resolved versions and registry checksums are recorded in
Cargo.lock; release CI also emits CycloneDX SBOMs from the locked dependency
graph.
Transitive crates retain their respective copyright notices and license terms. The source distributions supplied by crates.io and the generated release SBOM are the authoritative inventory for a particular release artifact.