Global Executables
Copyright (c) 2026 Asopitech

The code in this repository is licensed under the MIT License (see LICENSE).
This file lists third-party material that is copied into this repository and
the notices its licenses require. docs/DATA_SOURCES.md lists every upstream
source the collectors read and the terms that apply to each.

-------------------------------------------------------------------------------
data/production/npm-critical-packages.txt

This file is a list of npm package names taken from the "critical" npm
packages pages of ecosyste.ms Packages
(https://packages.ecosyste.ms/critical?registry=npmjs.org), by ecosyste.ms.
ecosyste.ms publishes its data under the Creative Commons
Attribution-ShareAlike 4.0 International license (CC BY-SA 4.0,
https://creativecommons.org/licenses/by-sa/4.0/).
Changes made: package names were extracted from the HTML pages, de-duplicated
and sorted one per line by tools/npm_critical_catalog.py. No other data from
those pages is kept.
Global Executables is not associated with ecosyste.ms.
The licensing of this file within this repository is an open question; see
the ecosyste.ms section of docs/DATA_SOURCES.md.

-------------------------------------------------------------------------------
fixtures/collectors/vcpkg-mnn-portfile.cmake
fixtures/collectors/vcpkg-openexr-portfile.cmake

These test fixtures contain excerpts of files from microsoft/vcpkg
(https://github.com/microsoft/vcpkg), used under the following license:

MIT License

Copyright (c) Microsoft Corporation

Permission is hereby granted, free of charge, to any person obtaining a copy of this
software and associated documentation files (the "Software"), to deal in the Software
without restriction, including without limitation the rights to use, copy, modify,
merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to the following
conditions:

The above copyright notice and this permission notice shall be included in all copies
or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE
OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

-------------------------------------------------------------------------------
fixtures/collectors/xmake-meson.lua

This test fixture contains an excerpt of packages/m/meson/xmake.lua from
xmake-io/xmake-repo (https://github.com/xmake-io/xmake-repo), licensed under
the Apache License, Version 2.0 (see LICENSES/Apache-2.0.txt). The excerpt is
unmodified apart from the comment line naming its origin. The NOTICE file of
xmake-repo reads in part:

  A package repository based on xmake
  Copyright 2017-2018 The Xmake Open Source Community

  This product includes software developed by The Xmake Open Source Community
  (https://xmake.io/).
