Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Upstream-Name: quicksearch Upstream-Contact: Jeremy Source: https://code.karsttech.com/jeremy/quick_search.git Files: * Copyright: 2025-2026 Jeremy License: GPL-3.0-or-later Files: crates/quicksearch-gui/assets/icons/* Copyright: 2026 Jeremy License: GPL-3.0-or-later Files: crates/quicksearch-gui/assets/fonts/Ubuntu-Light.ttf Copyright: 2010-2011 Canonical Ltd. License: Ubuntu-font-1.0 The full text is shipped beside the font as crates/quicksearch-gui/assets/fonts/UFL.txt. The file is redistributed unmodified, so the licence's naming conditions on Modified Versions do not arise. Files: crates/quicksearch-gui/assets/fonts/Hack-Regular.ttf Copyright: 2018 Source Foundry Authors 2003 Bitstream, Inc. License: MIT and Bitstream-Vera Hack is MIT-licensed work over the public-domain DejaVu project, which is in turn derived from Bitstream Vera Sans Mono under the Bitstream Vera License with Reserved Font Names "Bitstream" and "Vera". The full text of both is shipped beside the font as crates/quicksearch-gui/assets/fonts/Hack-Regular.txt. The file is redistributed unmodified, so the Bitstream renaming condition does not arise. License: GPL-3.0-or-later This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. . This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. . You should have received a copy of the GNU General Public License along with this program. If not, see . . On Debian systems the full text of the GNU General Public License version 3 can be found in /usr/share/common-licenses/GPL-3. Comment: /usr/bin/quicksearch and /usr/bin/quicksearch-cli are statically linked Rust binaries built from the same crates. Their third-party components are not shipped as separate files, so they are summarised here rather than given individual stanzas. Every one of the 525 crates in Cargo.lock is under a permissive licence, all of which are compatible with GPL-3.0-or-later: . * MIT and/or Apache-2.0 (the large majority) * Unicode-3.0, BSD-2-Clause, BSD-3-Clause, ISC, Zlib, 0BSD, BSL-1.0, CC0-1.0, Unlicense . There are no GPL-only, LGPL-only, MPL or proprietary dependencies. Note that a dozen crates (winit, glutin, ab_glyph, owned_ttf_parser and related) are Apache-2.0 only; Apache-2.0 is compatible with GPL version 3 but not with GPL version 2, which is why this package is GPL-3.0-or-later rather than GPL-2.0-or-later. . Bundled C sources compiled into the binary: SQLCipher, including SQLite (BSD-3-Clause; SQLite is public domain; via libsqlite3-sys), OpenSSL (Apache-2.0, via openssl-src), Zstandard (BSD-3-Clause arm of its BSD/GPL-2.0 dual licence, via zstd-sys), libdbus (AFL-2.1 or GPL-2.0-or-later, via libdbus-sys) and mimalloc (MIT, via libmimalloc-sys). . The binary also embeds the two font files under crates/quicksearch-gui/assets/fonts/, which have their own stanzas above. egui is built with default-features = false so that it bundles no fonts of its own; the OFL-1.1 emoji faces it would otherwise embed are not shipped, and OFL-1.1 accordingly no longer applies to this package. The FSF regards the Ubuntu Font Licence as free but GPL-incompatible; it is included here as font data rather than as linked program code, which is the same basis on which Debian ships these fonts and other egui-based applications. . Two dependencies are carried in-tree rather than fetched. vendor/pdf-extract is pdf-extract 0.12.0 (MIT, Jeff Muizelaar, https://github.com/jrmuizel/pdf-extract), patched to bound what a crafted PDF can cost: a depth limit on its two recursions (/Parent inheritance and Form XObjects), a work budget per document, and caps on CMap sizes and the graphics-state stack. The patches also drop colour handling and the adobe-cmap-parser dependency (CMaps are read with lopdf's tokenizer), cache each font's parsed streams, and decode CID fonts whose Encoding CMap is not Identity. vendor/notify is notify 6.1.1 (CC0-1.0, Felix Saparelli, Daniel Faust and Aron Heinecke, https://github.com/notify-rs/notify) with its Windows backend reporting an overflowed change buffer instead of dropping it. Every change is marked "LOCAL PATCH" in the source and no licence is changed: MIT for pdf-extract and CC0-1.0 for notify, both among the licences listed above. . Run `cargo metadata --all-features` against the source tree to reproduce the per-crate licence list.