vocaboot
Copyright (c) the vocaboot contributors.

This product includes software licensed under the Apache License,
Version 2.0 (LICENSE).

================================================================
Third-party assets the runtime depends on
================================================================

The vocaboot runtime depends on third-party assets that are NOT bundled
with vocaboot. They are downloaded or apt-installed by the end user on
first use. Their licenses apply to those assets, not to vocaboot itself.
This NOTICE lists them so that downstream redistributors know which
attributions must travel with their distribution if they choose to
re-bundle.

1. WavLM-base (Tier 2 verify, optional via [verify-similarity] extra)
   - Source: https://huggingface.co/microsoft/wavlm-base
     (revision: efa81aae7ff777e464159e0f877d54eac5b84f81)
   - Upstream license: CC-BY-SA-3.0
     (https://github.com/microsoft/UniSpeech/blob/main/LICENSE)
   - vocaboot does NOT redistribute the weights. The weights are
     downloaded into the user's home cache directory
     (~/.cache/vocaboot/models/wavlm-base/) and consumed by metrics
     only. Section 4(b) ShareAlike does not propagate to vocaboot
     under this consumption pattern.

2. OpenJTalk reference-voice sample (Tier 2 canary, optional)
   - Engine: open_jtalk (BSD-3-Clause, NIT 2008-2013)
   - Voice data: hts-voice-nitech-jp-atr503-m001 (CC-BY-3.0, NIT /
     Tokyo Tech 2003-2012)
   - When the reference wav at examples/voice/tier2_reference_ja.wav
     is present in a distribution, the CC-BY-3.0 attribution travels
     with it. Per-run LICENSE_NOTICE.txt is emitted by
     vocaboot.license_check.

3. SVS engine adapters (Stage 1+, optional)
   - vocaboot adapts upstream singing-voice-synthesis engines whose
     checkpoint licenses vary (Apache-2.0 / MIT / CC-BY-NC-SA-4.0).
     The runtime license gate (vocaboot.license_check) refuses
     non-commercial weights without the --accept-nc opt-in. See
     docs/ckpt_registry.md for the per-checkpoint allow-list and
     attribution requirements.

4. Python runtime dependencies (declared in pyproject.toml)
   The vocaboot runtime (base install + all currently defined extras —
   [verify], [verify-similarity], [diffsinger], [svc], [mcp], [dev])
   collectively pulls in libraries with the SPDX identifiers below.
   All are OSI-approved and Apache-2.0 compatible; vocaboot
   redistributes none of them — pip resolves them at install time from
   PyPI. Listed here so a downstream redistributor wheel-bundling
   vocaboot knows which attributions travel with the bundle.
   - pyworld         (MIT)               https://github.com/JeremyCCHsu/Python-Wrapper-for-World-Vocoder
   - scipy           (BSD-3-Clause)      https://scipy.org/
   - librosa         (ISC)               https://librosa.org/
   - onnxruntime     (MIT)               https://onnxruntime.ai/
   - transformers    (Apache-2.0)        https://github.com/huggingface/transformers
   - huggingface_hub (Apache-2.0)        https://github.com/huggingface/huggingface_hub
   - torch           (BSD-3-Clause)      https://pytorch.org/
   - torchaudio      (BSD-2-Clause)      https://github.com/pytorch/audio
   - soundfile       (BSD-3-Clause)      https://github.com/bastibe/python-soundfile
   - click           (BSD-3-Clause)      https://click.palletsprojects.com/
   - pyyaml          (MIT)               https://pyyaml.org/
   - numpy           (BSD-3-Clause)      https://numpy.org/
   - mcp             (MIT)               https://github.com/modelcontextprotocol/python-sdk
   The verify-similarity extra further triggers the WavLM-base
   download (item 1 above, CC-BY-SA-3.0); attribution for that artefact
   is the load-bearing chain a redistributor must satisfy.

================================================================

Apache License contributors are listed in the git history. By
contributing to vocaboot you license your contribution under the
Apache License, Version 2.0; vocaboot does not require a separate CLA.
