Pelagia — third-party notices
==============================

Pelagia is free software, licensed under the GNU General Public License,
version 3 or (at your option) any later version (SPDX: GPL-3.0-or-later; the
license text is in LICENSE). This file lists the third-party components
that are compiled into the PS5 binary (eboot.elf), or into the Linux build,
with their licenses. "Verified" means checked in the files named in
brackets; "not verified" means the information could not be established from
the available files and must be confirmed from the upstream project.

Pelagia is an unofficial project. It is not affiliated with, endorsed by or
sponsored by the Jellyfin project or by Sony Interactive Entertainment.
Jellyfin is a trademark of the Jellyfin project. PlayStation and PS5 are
trademarks of Sony Interactive Entertainment Inc. All other names are the
property of their respective owners. They are used here only to say what
Pelagia works with.


1. How the PS5 binary is built
------------------------------

The PS5 build links the libraries below statically, as provided by PacBrew
release v0.40.2 of https://github.com/ps5-payload-dev/pacbrew-repo (archive
SHA-256 a85f65de418a8e6a898c6c3e3c870d50fff7618a200e4dd59ea9692af6ecec4d,
checked by ci/install-ps5-sdk.sh). Only the open-source homebrew SDK is used;
no Sony SDK, header or library is included or needed (the console's own system
libraries are loaded on the console through the SDK's stub libraries).

FFmpeg in that archive is configured with --enable-gpl --enable-version3
--enable-libx264 --enable-openssl --enable-libass (and no --enable-nonfree)
[verified: configuration string in lib/libavutil.a; libavutil reports
"GPL version 3 or later"]. The x264 encoder is present in the final binary
[verified: "x264 - core" string in eboot.elf]. The combined work is therefore
distributed under the GPL, which is why Pelagia itself is GPL-3.0-or-later: the source
code of this release, including the build scripts, is the corresponding source
offered with every binary release.


2. Components
-------------

FFmpeg 7.0.x — libavformat 61.1, libavcodec 61.3, libswscale 8.1,
  libswresample 5.1, libavutil 59.8
  https://ffmpeg.org — GPL-3.0-or-later as built (see above); the same
  libraries are LGPL-2.1-or-later when built without --enable-gpl. On Linux,
  Pelagia links the system FFmpeg dynamically.

x264 — https://www.videolan.org/developers/x264.html
  GPL-2.0-or-later (not verified: no license file in the archive). Linked
  through FFmpeg; Pelagia only decodes and does not use the encoder.

OpenSSL 3.5.2 — https://www.openssl.org
  Apache-2.0 (OpenSSL 3.x series; not verified: no license file in the
  archive; version verified in lib/libcrypto.a). Used by FFmpeg and curl.
  Apache-2.0 is compatible with GPL-3.0.

libcurl 8.18.0 — https://curl.se
  curl license (MIT/X-derivative) [verified: SPDX-License-Identifier: curl in
  the SDK headers].

SDL2 2.30.x — https://libsdl.org
  zlib license [verified: licenses/SDL2-zlib.txt, copied from the archive].
  Copyright (C) 1997-2025 Sam Lantinga.

zlib 1.3.2 — https://zlib.net — zlib license (not verified in the archive).

liblzma (XZ Utils 5.4.6) — https://tukaani.org/xz
  Public domain [verified: share/doc/xz/COPYING in the archive].

cJSON 1.7.18 — https://github.com/DaveGamble/cJSON
  MIT license, Copyright (c) 2009-2017 Dave Gamble and cJSON contributors
  [verified: third_party/cjson/LICENSE]. Source included in this repository
  (PacBrew does not provide it).

stb_truetype v1.26 — https://github.com/nothings/stb
  MIT or public domain (your choice) [verified: end of
  third_party/stb/stb_truetype.h]. Source included in this repository.

Noto Sans (Regular and Bold, Latin subset) — https://fonts.google.com/noto
  SIL Open Font License 1.1, Copyright 2010-2020 Google LLC
  [verified: assets/fonts/OFL.txt]. Embedded in the binary; see
  assets/fonts/README.md for the subset and its origin.

PS5 Payload SDK (ps5-payload-dev) — https://github.com/ps5-payload-dev/sdk
  Toolchain (clang/LLVM 18.1.3), C runtime, libc, libc++ and system stubs
  linked into the payload. License of the SDK itself: NOT VERIFIED (the PacBrew
  archive contains no license file for it; check the SDK repository before
  relying on any statement here). SPDX identifiers found in the SDK headers
  and sources of the archive: Apache-2.0 WITH LLVM-exception, BSD-2-Clause,
  BSD-3-Clause, BSD-2-Clause-FreeBSD, BSD-2-Clause OR GPL-2.0, MIT, Apache-2.0,
  curl. The LLVM-exception covers code generated by the compiler and the
  runtime libraries linked into the binary.


3. Not distributed with Pelagia
-------------------------------

The following are not part of Pelagia and are neither included nor modified
by it; they have their own licenses: the PS5 exploit chain and loaders
(etaHEN, kstuff, ...), websrv, ftpsrv, ShadowMountPlus and the Jellyfin server.
Test and build tools (FFmpeg command line, Python, gitleaks) are used during
development only and are not part of the release.


4. Reporting a licensing problem
--------------------------------

If a component is missing or described wrongly, please open an issue.
