quick_search/packaging/copyright

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: quicksearch
Upstream-Contact: Jeremy <jeremy@karsttech.com>
Source: https://code.karsttech.com/jeremy/quick_search.git

Files: *
Copyright: 2025-2026 Jeremy <jeremy@karsttech.com>
License: GPL-3.0-or-later

Files: crates/quicksearch-gui/assets/icons/*
Copyright: 2026 Jeremy <jeremy@karsttech.com>
License: GPL-3.0-or-later

Files: crates/quicksearch-gui/assets/fonts/Ubuntu-Light.ttf
Copyright: 2010-2011 Canonical Ltd.
License: Ubuntu-font-1.0
 The full text is shipped beside the font as
 crates/quicksearch-gui/assets/fonts/UFL.txt. The file is redistributed
 unmodified, so the licence's naming conditions on Modified Versions do not
 arise.

Files: crates/quicksearch-gui/assets/fonts/Hack-Regular.ttf
Copyright: 2018 Source Foundry Authors
           2003 Bitstream, Inc.
License: MIT and Bitstream-Vera
 Hack is MIT-licensed work over the public-domain DejaVu project, which is in
 turn derived from Bitstream Vera Sans Mono under the Bitstream Vera License
 with Reserved Font Names "Bitstream" and "Vera". The full text of both is
 shipped beside the font as
 crates/quicksearch-gui/assets/fonts/Hack-Regular.txt. The file is
 redistributed unmodified, so the Bitstream renaming condition does not arise.

License: GPL-3.0-or-later
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU General Public License as published by
 the Free Software Foundation, either version 3 of the License, or
 (at your option) any later version.
 .
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 GNU General Public License for more details.
 .
 You should have received a copy of the GNU General Public License
 along with this program.  If not, see <https://www.gnu.org/licenses/>.
 .
 On Debian systems the full text of the GNU General Public License
 version 3 can be found in /usr/share/common-licenses/GPL-3.

Comment:
 /usr/bin/quicksearch and /usr/bin/quicksearch-cli are statically linked Rust
 binaries built from the same crates. Their third-party components are not
 shipped as separate files, so they are summarised here
 rather than given individual stanzas. Every one of the 525 crates in
 Cargo.lock is under a permissive licence, all of which are compatible with
 GPL-3.0-or-later:
 .
   * MIT and/or Apache-2.0 (the large majority)
   * Unicode-3.0, BSD-2-Clause, BSD-3-Clause, ISC, Zlib, 0BSD,
     BSL-1.0, CC0-1.0, Unlicense
 .
 There are no GPL-only, LGPL-only, MPL or proprietary dependencies. Note
 that a dozen crates (winit, glutin, ab_glyph, owned_ttf_parser and
 related) are Apache-2.0 only; Apache-2.0 is compatible with GPL version 3
 but not with GPL version 2, which is why this package is
 GPL-3.0-or-later rather than GPL-2.0-or-later.
 .
 Bundled C sources compiled into the binary: SQLCipher, including SQLite
 (BSD-3-Clause; SQLite is public domain; via libsqlite3-sys), OpenSSL
 (Apache-2.0, via openssl-src), Zstandard (BSD-3-Clause arm of its
 BSD/GPL-2.0 dual licence, via zstd-sys), libdbus (AFL-2.1 or
 GPL-2.0-or-later, via libdbus-sys) and mimalloc (MIT, via
 libmimalloc-sys).
 .
 The binary also embeds the two font files under
 crates/quicksearch-gui/assets/fonts/, which have their own stanzas above.
 egui is built with default-features = false so that it bundles no fonts of
 its own; the OFL-1.1 emoji faces it would otherwise embed are not shipped,
 and OFL-1.1 accordingly no longer applies to this package. The FSF regards
 the Ubuntu Font Licence as free but GPL-incompatible; it is included here as
 font data rather than as linked program code, which is the same basis on
 which Debian ships these fonts and other egui-based applications.
 .
 Two dependencies are carried in-tree rather than fetched. vendor/pdf-extract
 is pdf-extract 0.12.0 (MIT, Jeff Muizelaar,
 https://github.com/jrmuizel/pdf-extract), patched to bound what a crafted
 PDF can cost: a depth limit on its two recursions (/Parent inheritance and
 Form XObjects), a work budget per document, and caps on CMap sizes and the
 graphics-state stack. The patches also drop colour handling and the
 adobe-cmap-parser dependency (CMaps are read with lopdf's tokenizer), cache
 each font's parsed streams, and decode CID fonts whose Encoding CMap is not
 Identity. vendor/notify is notify 6.1.1 (CC0-1.0, Felix
 Saparelli, Daniel Faust and Aron Heinecke,
 https://github.com/notify-rs/notify) with its Windows backend reporting an
 overflowed change buffer instead of dropping it. Every change is marked
 "LOCAL PATCH" in the source and no licence is changed: MIT for pdf-extract
 and CC0-1.0 for notify, both among the licences listed above.
 .
 Run `cargo metadata --all-features` against the source tree to reproduce
 the per-crate licence list.