{ "format": "xvm-licenses/1", "version": "javascript-2026.10.26.1", "environment": "javascript", "source_date_epoch": 1792972800, "paths": "relative to the site's licenses/ directory; guest// holds this index and every file it names. The copyleft components' source is in xvm-sources (`sources`; each hosted archive's `repo`, `ref`, `commit`), not on the site (D114)", "sources": { "repo": "https://github.com/xuwaters/xvm-sources", "commit": "29f297441da1023d6f96e192d42aa1cf4f07b5b4", "tree": "https://github.com/xuwaters/xvm-sources/tree/29f297441da1023d6f96e192d42aa1cf4f07b5b4", "index_sha256": "c59eb2e06fa167bae68844d124cb402529e1c5965929da3d4ce7b406b1eba7ab" }, "generated_from": { "apk_lock_sha256": "1e33951bfaefc980081e304fdb5876747a87c86979d5fadb20f99f626deea984", "javascript_apk_lock_sha256": "c86587c8e39654bb10902fcbbaf0765b850d6629364ff844cda2644c470be42e", "linux_lock_sha256": "46d8cfb3b508cc6ea2364d39cc49db63a9fc24cca4dccc1841af6336dbc23d4d", "sources_lock_sha256": "7652177a1cbd7e853a51df3c24723fb07e252b9ba838190d84a6851700ebf108", "cargo_lock_sha256": "2ad3af17e3d81e89e214c49b1221f0710ee2508f11afddbfb343a78273ec2a4c" }, "images": { "cold": { "root_sha256": "fb30905997e0468a3f1707ec6466dd56476800803908d7d5a5298ce7cef7f647", "kernel_sha256": "c072943134b89f27e14322f07796f19c031797a3d4539a8c6a84709610cd9d49", "home_template_sha256": "838a12804735071c53384e470b0f57063cce888ec5aa9d383749af6bd09215df" }, "snapshot": { "root_sha256": "fb30905997e0468a3f1707ec6466dd56476800803908d7d5a5298ce7cef7f647", "kernel_sha256": "c072943134b89f27e14322f07796f19c031797a3d4539a8c6a84709610cd9d49", "home_template_sha256": "838a12804735071c53384e470b0f57063cce888ec5aa9d383749af6bd09215df", "state_hash": "8dd720d0c3bc142ec33e8d1d695e2a09fe6ba49e74e2b3bec75784adf6aa0040" } }, "components": [ { "name": "linux", "version": "6.18.56", "licenses": [ "GPL-2.0-only WITH Linux-syscall-note" ], "in_image": [ "kernel Image (manifest object `kernel`; resident in the snapshot RAM)" ], "sources": [ { "file": "linux-6.18.56.tar.xz", "url": "https://cdn.kernel.org/pub/linux/kernel/v6.x/linux-6.18.56.tar.xz", "size": 154807564, "sha256": "4633bbda2ab95eaf2a7af4041236451d6759c72e6946265531af4b3aacefbf89", "hosted": true, "repo": "https://github.com/xuwaters/linux/tree/17ad2612c11a748b50d32eefc681344b26fea946", "ref": "v6.18.56", "commit": "17ad2612c11a748b50d32eefc681344b26fea946" } ], "changes": "libkrunfw patches 0001/0002 (authorship kept), the configuration `config` (= libkrunfw's riscv64 config + recipe/xvm.config, olddefconfig), built by recipe/kbuild.sh in recipe/Dockerfile's image (recipe/builders.lock pins it)", "files": [ "guest/javascript-2026.10.26.1/kernel/COPYING", "guest/javascript-2026.10.26.1/kernel/LICENSES/exceptions/Linux-syscall-note", "guest/javascript-2026.10.26.1/kernel/LICENSES/preferred/GPL-2.0", "guest/javascript-2026.10.26.1/kernel/config", "guest/javascript-2026.10.26.1/kernel/patches/0001-krunfw-Don-t-panic-when-init-dies.patch", "guest/javascript-2026.10.26.1/kernel/patches/0002-krunfw-Ignore-run_cmd-on-orderly-reboot.patch", "guest/javascript-2026.10.26.1/kernel/recipe/Dockerfile", "guest/javascript-2026.10.26.1/kernel/recipe/base/config-libkrunfw_riscv64", "guest/javascript-2026.10.26.1/kernel/recipe/builders.lock", "guest/javascript-2026.10.26.1/kernel/recipe/check-required-config.sh", "guest/javascript-2026.10.26.1/kernel/recipe/cmdline.txt", "guest/javascript-2026.10.26.1/kernel/recipe/defconfig-xvm_riscv64", "guest/javascript-2026.10.26.1/kernel/recipe/kbuild.sh", "guest/javascript-2026.10.26.1/kernel/recipe/kconfig-diff.sh", "guest/javascript-2026.10.26.1/kernel/recipe/linux.lock", "guest/javascript-2026.10.26.1/kernel/recipe/required-config.txt", "guest/javascript-2026.10.26.1/kernel/recipe/xvm-debug.config", "guest/javascript-2026.10.26.1/kernel/recipe/xvm.config" ], "xvm_sources": { "name": "linux", "path": "linux", "kind": "submodule", "repo": "https://github.com/xuwaters/linux/tree/17ad2612c11a748b50d32eefc681344b26fea946", "component_repo": "https://github.com/xuwaters/linux", "upstream": "https://github.com/gregkh/linux", "ref": "v6.18.56", "commit": "17ad2612c11a748b50d32eefc681344b26fea946" } }, { "name": "ada", "version": "3.3.0-r0", "licenses": [ "( Apache-2.0 OR MIT ) AND MPL-2.0" ], "alpine": { "packages": [ { "name": "ada-libs", "version": "3.3.0-r0", "arch": "riscv64", "apk_sha256": "f205478431369055e68ba25d83aa1cc991d062e5659901c38806ba01806ea4a7", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/ada-libs-3.3.0-r0.apk", "license": "( Apache-2.0 OR MIT ) AND MPL-2.0", "origin": "ada", "aports_commit": "d279ef8c31170898285e2a989f62909992bff448" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/d279ef8c31170898285e2a989f62909992bff448/main/ada" }, "in_image": [ "/usr/lib/libada.so.3 (the WHATWG URL parser of node:url and URL)" ], "sources": [ { "file": "ada-3.3.0.tar.gz", "url": "https://github.com/ada-url/ada/archive/v3.3.0/ada-3.3.0.tar.gz", "size": 465601, "sha256": "75565e2d4cc8e3ce2dd7927f5c75cc5ebbd3b620468cb0226501dae68d8fe1cd", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/ada/LICENSE-APACHE", "guest/javascript-2026.10.26.1/ada/LICENSE-MIT", "guest/javascript-2026.10.26.1/alpine/ada/APKBUILD", "guest/javascript-2026.10.26.1/alpine/ada/PKGINFO-ada-libs-3.3.0-r0.txt", "guest/javascript-2026.10.26.1/alpine/ada/use-any-simdjson-version.patch" ] }, { "name": "brotli", "version": "1.2.1-r0", "licenses": [ "MIT" ], "alpine": { "packages": [ { "name": "brotli-libs", "version": "1.2.1-r0", "arch": "riscv64", "apk_sha256": "d11f8030094bb25b917c1be0063bb4ec76eb2f7ae63d1af7faebc9588004fd73", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/brotli-libs-1.2.1-r0.apk", "license": "MIT", "origin": "brotli", "aports_commit": "8313352127992a9d82e2c2024494f6c38a4dffb4" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/8313352127992a9d82e2c2024494f6c38a4dffb4/main/brotli" }, "in_image": [ "/usr/lib/libbrotlicommon.so.1, libbrotlidec.so.1, libbrotlienc.so.1 (node:zlib)" ], "sources": [ { "file": "brotli-1.2.1.tar.gz", "url": "https://github.com/google/brotli/archive/refs/tags/v1.2.1.tar.gz", "size": 646598, "sha256": "98d35d11a78dc453aebb7d10c3748f3f73ff78c8267c0dc697b8631f67bf7e8f", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/brotli/APKBUILD", "guest/javascript-2026.10.26.1/alpine/brotli/PKGINFO-brotli-libs-1.2.1-r0.txt", "guest/javascript-2026.10.26.1/alpine/brotli/fix-lp64.patch", "guest/javascript-2026.10.26.1/alpine/brotli/optimize-mips.patch", "guest/javascript-2026.10.26.1/brotli/LICENSE" ] }, { "name": "busybox", "version": "1.37.0-r31", "licenses": [ "GPL-2.0-only" ], "alpine": { "packages": [ { "name": "busybox-static", "version": "1.37.0-r31", "arch": "riscv64", "apk_sha256": "300ecf7530b06c0dfaf56e8b7ed2bba9ccebac58984914518d77cc1a39a21413", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/busybox-static-1.37.0-r31.apk", "license": "GPL-2.0-only", "origin": "busybox", "aports_commit": "c3ef5d10e6ef6528852c51f0564963e2f8c1be19" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/c3ef5d10e6ef6528852c51f0564963e2f8c1be19/main/busybox" }, "in_image": [ "/bin/busybox and its applet links" ], "sources": [ { "file": "busybox-1.37.0.tar.bz2", "url": "https://busybox.net/downloads/busybox-1.37.0.tar.bz2", "size": 2565764, "sha256": "3311dff32e746499f4df0d5df04d7eb396382d7e108bb9250e7b519b837043a4", "hosted": true, "repo": "https://github.com/xuwaters/busybox/tree/be7d1b7b1701d225379bc1665487ed0871b592a5", "ref": "1_37_0", "commit": "be7d1b7b1701d225379bc1665487ed0871b592a5" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/busybox/0001-awk-fix-handling-of-literal-backslashes-in-replaceme.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-blkdiscard-ship-link-to-sbin-instead-of-usr-bin.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-hexdump-fix-regression-with-n4-e-u.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-init-add-support-for-separate-reboot-action.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-mount-fix-parsing-proc-mounts-with-long-lines.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-netstat-sanitize-process-names.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-tar-fix-16018-masking-of-potentially-malicious-tar-cpio-content.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-tar-fix-TOCTOU-symlink-race-condition.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-tunctl-fix-segfault-on-ioctl-failure.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0001-wget-add-header-Accept.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0002-adduser-default-to-sbin-nologin-as-shell-for-system-.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0003-ash-add-built-in-BB_ASH_VERSION-variable.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0004-Avoid-redefined-warnings-when-buiding-with-utmps.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0005-libbb-sockaddr2str-ensure-only-printable-characters-.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0006-modinfo-add-k-option-for-kernel-version.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0007-nologin-Install-applet-to-sbin-instead-of-usr-sbin.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0008-pgrep-add-support-for-matching-against-UID-and-RUID.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0009-properly-fix-wget-https-support.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0010-fsck-resolve-LABEL-.-UUID-.-spec-to-device.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0011-nslookup-sanitize-all-printed-strings-with-printable.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0012-ash-exec-busybox.static.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0013-app-location-for-cpio-vi-and-lspci.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0014-udhcpc-set-default-discover-retries-to-5.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0015-ping-make-ping-work-without-root-privileges.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0016-fbsplash-support-console-switching.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0017-fbsplash-support-image-and-bar-alignment-and-positio.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0018-depmod-support-generating-kmod-binary-index-files.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0019-Add-flag-for-not-following-symlinks-when-recursing.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0020-udhcpc-Don-t-background-if-n-is-given.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0021-tests-fix-tarball-creation.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0022-tests-musl-doesn-t-seem-to-recognize-UTC0-as-a-timez.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0023-Hackfix-to-disable-HW-acceleration-for-MD5-SHA1-on-x.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0024-umount-Implement-O-option-to-unmount-by-mount-option.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0025-find-fix-xdev-depth-and-delete.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0026-awk.c-fix-CVE-2023-42366-bug-15874.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0027-awk-Mark-test-for-handling-of-start-of-word-pattern-.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0028-od-Skip-od-B-on-big-endian.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0029-ash-reject-unknown-long-options.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0030-hexdump-Skip-a-single-test-on-big-endian-systems.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0031-syslogd-fix-wrong-OPT_locallog-flag-detection.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0032-lineedit-fix-some-tab-completions-written-to-stdout.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0033-lineedit-use-stdout-for-shell-history-builtin.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0034-adduser-remove-preconfigured-GECOS-full-name-field.patch", "guest/javascript-2026.10.26.1/alpine/busybox/0035-cpio-map-F-to-file-long-option.patch", "guest/javascript-2026.10.26.1/alpine/busybox/APKBUILD", "guest/javascript-2026.10.26.1/alpine/busybox/PKGINFO-busybox-static-1.37.0-r31.txt", "guest/javascript-2026.10.26.1/alpine/busybox/acpid-poweroff.sh", "guest/javascript-2026.10.26.1/alpine/busybox/acpid.initd", "guest/javascript-2026.10.26.1/alpine/busybox/acpid.logrotate", "guest/javascript-2026.10.26.1/alpine/busybox/bbsuid.c", "guest/javascript-2026.10.26.1/alpine/busybox/busybox-extras.post-install", "guest/javascript-2026.10.26.1/alpine/busybox/busybox-extras.pre-deinstall", "guest/javascript-2026.10.26.1/alpine/busybox/busybox.post-install", "guest/javascript-2026.10.26.1/alpine/busybox/busybox.post-upgrade", "guest/javascript-2026.10.26.1/alpine/busybox/busybox.trigger", "guest/javascript-2026.10.26.1/alpine/busybox/busyboxconfig", "guest/javascript-2026.10.26.1/alpine/busybox/busyboxconfig-extras", "guest/javascript-2026.10.26.1/alpine/busybox/crond.confd", "guest/javascript-2026.10.26.1/alpine/busybox/crond.initd", "guest/javascript-2026.10.26.1/alpine/busybox/dad.if-up", "guest/javascript-2026.10.26.1/alpine/busybox/default.script", "guest/javascript-2026.10.26.1/alpine/busybox/dnsd.initd", "guest/javascript-2026.10.26.1/alpine/busybox/httpd.initd", "guest/javascript-2026.10.26.1/alpine/busybox/inetd.initd", "guest/javascript-2026.10.26.1/alpine/busybox/klogd.confd", "guest/javascript-2026.10.26.1/alpine/busybox/klogd.initd", "guest/javascript-2026.10.26.1/alpine/busybox/loadkmap.confd", "guest/javascript-2026.10.26.1/alpine/busybox/loadkmap.initd", "guest/javascript-2026.10.26.1/alpine/busybox/mdev.initd", "guest/javascript-2026.10.26.1/alpine/busybox/ntpd.confd", "guest/javascript-2026.10.26.1/alpine/busybox/ntpd.initd", "guest/javascript-2026.10.26.1/alpine/busybox/rdate.confd", "guest/javascript-2026.10.26.1/alpine/busybox/rdate.initd", "guest/javascript-2026.10.26.1/alpine/busybox/securetty", "guest/javascript-2026.10.26.1/alpine/busybox/ssl_client.c", "guest/javascript-2026.10.26.1/alpine/busybox/syslog.confd", "guest/javascript-2026.10.26.1/alpine/busybox/syslog.initd", "guest/javascript-2026.10.26.1/alpine/busybox/udhcpc.conf", "guest/javascript-2026.10.26.1/alpine/busybox/udhcpd.initd", "guest/javascript-2026.10.26.1/alpine/busybox/watchdog.confd", "guest/javascript-2026.10.26.1/alpine/busybox/watchdog.initd", "guest/javascript-2026.10.26.1/busybox/LICENSE" ], "xvm_sources": { "name": "busybox", "path": "busybox", "kind": "submodule", "repo": "https://github.com/xuwaters/busybox/tree/be7d1b7b1701d225379bc1665487ed0871b592a5", "component_repo": "https://github.com/xuwaters/busybox", "upstream": "https://github.com/sailfishos-mirror/busybox", "ref": "1_37_0", "commit": "be7d1b7b1701d225379bc1665487ed0871b592a5" } }, { "name": "c-ares", "version": "1.34.9-r0", "licenses": [ "MIT" ], "alpine": { "packages": [ { "name": "c-ares", "version": "1.34.9-r0", "arch": "riscv64", "apk_sha256": "57626f69b45782a3faf8f711c85a70df247ed57831542cab93eddab948cad547", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/c-ares-1.34.9-r0.apk", "license": "MIT", "origin": "c-ares", "aports_commit": "50f178d7a4c30ea44b54b7d4731ab58558c38b14" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/50f178d7a4c30ea44b54b7d4731ab58558c38b14/main/c-ares" }, "in_image": [ "/usr/lib/libcares.so.2 (node:dns)" ], "sources": [ { "file": "c-ares-1.34.9.tar.gz", "url": "https://github.com/c-ares/c-ares/releases/download/v1.34.9/c-ares-1.34.9.tar.gz", "size": 1083895, "sha256": "9364b70a12eb59a06830fb488d9357f90100dff0d98b23ea3593a183d43e6f2f", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/c-ares/APKBUILD", "guest/javascript-2026.10.26.1/alpine/c-ares/PKGINFO-c-ares-1.34.9-r0.txt", "guest/javascript-2026.10.26.1/c-ares/LICENSE.md" ] }, { "name": "gcc", "version": "15.2.0-r5", "licenses": [ "GPL-2.0-or-later AND LGPL-2.1-or-later", "GPL-3.0-or-later WITH GCC-exception-3.1" ], "alpine": { "packages": [ { "name": "libgcc", "version": "15.2.0-r5", "arch": "riscv64", "apk_sha256": "cff2a42ccdec635c115ccafb5efabf2b7c836df6a8eff133b63b98cd7c295cfa", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/libgcc-15.2.0-r5.apk", "license": "GPL-2.0-or-later AND LGPL-2.1-or-later", "origin": "gcc", "aports_commit": "fd4fecacbfd0cd40be42efa3c9d72bc03a88428c" }, { "name": "libstdc++", "version": "15.2.0-r5", "arch": "riscv64", "apk_sha256": "dd2fe67cc1a9dd0e69bc1b6f7e51f699419c1073f105f740fa71f3ee502c2daf", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/libstdc++-15.2.0-r5.apk", "license": "GPL-2.0-or-later AND LGPL-2.1-or-later", "origin": "gcc", "aports_commit": "fd4fecacbfd0cd40be42efa3c9d72bc03a88428c" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/fd4fecacbfd0cd40be42efa3c9d72bc03a88428c/main/gcc" }, "in_image": [ "/usr/lib/libstdc++.so.6 and /usr/lib/libgcc_s.so.1 (Alpine's libstdc++ and libgcc: the GCC runtime node links, GPL-3.0-or-later WITH GCC-exception-3.1 upstream)" ], "sources": [ { "file": "gcc-15.2.0.tar.xz", "url": "https://gcc.gnu.org/pub/gcc/releases/gcc-15.2.0/gcc-15.2.0.tar.xz", "size": 101056276, "sha256": "438fd996826b0c82485a29da03a72d71d6e3541a83ec702df4271f6fe025d24e", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/gcc/0001-LoongArch-Only-allow-valid-binary-op-when-optimize-c.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0001-posix_memalign.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0001-tree-object-size.cc-Fix-assert-constant-offset-in-ch.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0002-gcc-poison-system-directories.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0003-specs-turn-on-Wl-z-now-by-default.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0004-Turn-on-D_FORTIFY_SOURCE-2-by-default-for-C-C-ObjC-O.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0005-On-linux-targets-pass-as-needed-by-default-to-the-li.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0006-Enable-Wformat-and-Wformat-security-by-default.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0007-Enable-Wtrampolines-by-default.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0008-gcc-disable-SSP-on-ffreestanding-nostdlib-and-nodefa.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0009-gcc-params-set-default-ssp-buffer-size-to-4.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0010-Ensure-that-msgfmt-doesn-t-encounter-problems-during.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0011-Don-t-declare-asprintf-if-defined-as-a-macro.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0012-libiberty-copy-PIC-objects-during-build-process.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0013-libgcc_s.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0014-nopie.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0015-ada-fix-shared-linking.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0016-build-fix-CXXFLAGS_FOR_BUILD-passing.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0017-add-fortify-headers-paths.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0018-Alpine-musl-package-provides-libssp_nonshared.a.-We-.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0019-DP-Use-push-state-pop-state-for-gold-as-well-when-li.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0020-aarch64-disable-multilib-support.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0021-s390x-disable-multilib-support.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0022-ppc64-le-disable-multilib-support.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0023-x86_64-disable-multilib-support.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0024-riscv-disable-multilib-support.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0025-always-build-libgcc_eh.a.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0026-ada-libgnarl-remove-use-of-glibc-specific-pthread_rw.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0027-ada-libgnarl-use-posix_openpt-instead-of-glibc-speci.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0028-ada-libgnarl-adaint-fix-sched.h-inclusion-for-musl.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0029-configure-Add-enable-autolink-libatomic-use-in-LINK_.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0030-configure-fix-detection-of-atomic-builtins-in-libato.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0031-libstdc-do-not-throw-exceptions-for-non-C-locales-on.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0032-gdc-unconditionally-link-libgphobos-against-libucont.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0033-druntime-link-against-libucontext-on-all-platforms.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0034-libgnat-time_t-is-always-64-bit-on-musl-libc.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0035-libphobos-do-not-use-LFS64-symbols.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0036-libgo-fix-lfs64-use.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0037-loongarch-disable-multilib-support.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0038-static-PIE-ensure-static-reaches-the-linker.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0039-except-Don-t-use-the-cached-value-of-the-gcc_except_.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0040-ada-libgnat-use-stub-symbolic-module-name-functions.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0041-ada-libgnat-recognize-linux-musleabi-and-linux-muslg.patch", "guest/javascript-2026.10.26.1/alpine/gcc/0042-libsanitizer-struct_sock_fprog_sz.patch", "guest/javascript-2026.10.26.1/alpine/gcc/APKBUILD", "guest/javascript-2026.10.26.1/alpine/gcc/PKGINFO-libgcc-15.2.0-r5.txt", "guest/javascript-2026.10.26.1/alpine/gcc/PKGINFO-libstdc++-15.2.0-r5.txt", "guest/javascript-2026.10.26.1/gcc/COPYING.RUNTIME", "guest/javascript-2026.10.26.1/gcc/COPYING3" ], "note": "libstdc++ and libgcc are GCC's runtime libraries, GPL-3.0-or-later with the GCC Runtime Library Exception 3.1 (gcc/COPYING3, gcc/COPYING.RUNTIME; Alpine labels the packages GPL-2.0-or-later AND LGPL-2.1-or-later). Alpine's build files and patches are in alpine/gcc/; the upstream archive is listed with its SHA-256." }, { "name": "icu", "version": "78.1-r0", "licenses": [ "ICU" ], "alpine": { "packages": [ { "name": "icu-data-en", "version": "78.1-r0", "arch": "noarch", "apk_sha256": "f3cc2162383b5ccd659a3b483dac9872ce719f2c2b1efb6c849b6fa34489bbf6", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/icu-data-en-78.1-r0.apk", "license": "ICU", "origin": "icu", "aports_commit": "6755fdb21483ba250d374c3244f0f48bc63447e2" }, { "name": "icu-libs", "version": "78.1-r0", "arch": "riscv64", "apk_sha256": "69fe605744b3e36a6495ec85ce8ca642642a01a16218d5bd0014ab43b6288dfa", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/icu-libs-78.1-r0.apk", "license": "ICU", "origin": "icu", "aports_commit": "6755fdb21483ba250d374c3244f0f48bc63447e2" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/6755fdb21483ba250d374c3244f0f48bc63447e2/main/icu" }, "in_image": [ "/usr/lib/libicuuc.so.78, libicui18n.so.78, libicudata.so.78 and /usr/share/icu (icu-data-en: English locale data only, R3); libicuio and the ICU tools are not in the image (nodejs/recipe/drop.txt)" ], "sources": [ { "file": "icu4c-78.1-sources.tgz", "url": "https://github.com/unicode-org/icu/releases/download/release-78.1/icu4c-78.1-sources.tgz", "size": 27979449, "sha256": "6217f58ca39b23127605cfc6c7e0d3475fe4b0d63157011383d716cb41617886", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" }, { "file": "icu4c-78.1-data.zip", "url": "https://github.com/unicode-org/icu/releases/download/release-78.1/icu4c-78.1-data.zip", "size": 20187894, "sha256": "e7b652244f27194e0ea46a0d21cfc714ee8a818e1fd82d51a93bc91516fdcf65", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" }, { "file": "icu4c-78.1-data-bin-b.zip", "url": "https://github.com/unicode-org/icu/releases/download/release-78.1/icu4c-78.1-data-bin-b.zip", "size": 13134893, "sha256": "bb35da6c14df2da52e0cda7739d0a4418464859ae5c64b6565e96a098b033d54", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" }, { "file": "icu4c-78.1-data-bin-l.zip", "url": "https://github.com/unicode-org/icu/releases/download/release-78.1/icu4c-78.1-data-bin-l.zip", "size": 12834033, "sha256": "0f7b03e88759b04b0d8e3b27efa5ccd6d01d2f7a03348e0de9317004ac167f51", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/icu/APKBUILD", "guest/javascript-2026.10.26.1/alpine/icu/PKGINFO-icu-data-en-78.1-r0.txt", "guest/javascript-2026.10.26.1/alpine/icu/PKGINFO-icu-libs-78.1-r0.txt", "guest/javascript-2026.10.26.1/alpine/icu/data-filter-en.yml", "guest/javascript-2026.10.26.1/alpine/icu/fix-32-bit-test.patch", "guest/javascript-2026.10.26.1/alpine/icu/icu-data-en.post-install", "guest/javascript-2026.10.26.1/alpine/icu/pc.patch", "guest/javascript-2026.10.26.1/alpine/icu/standardize-vtzone-output.patch", "guest/javascript-2026.10.26.1/icu/LICENSE" ] }, { "name": "musl", "version": "1.2.6-r2", "licenses": [ "MIT" ], "alpine": { "packages": [ { "name": "musl", "version": "1.2.6-r2", "arch": "riscv64", "apk_sha256": "5bea4aa90f58568f6d69e1eaf800a66347d9cf71e19fd6f1047cb8b36169f319", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/musl-1.2.6-r2.apk", "license": "MIT", "origin": "musl", "aports_commit": "f5640d3a10f664c9119720c60515265d3d6f6d01" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/f5640d3a10f664c9119720c60515265d3d6f6d01/main/musl" }, "in_image": [ "/lib/ld-musl-riscv64.so.1 (libc)" ], "sources": [ { "file": "musl-1.2.6.tar.gz", "url": "https://musl.libc.org/releases/musl-1.2.6.tar.gz", "size": 1082499, "sha256": "d585fd3b613c66151fc3249e8ed44f77020cb5e6c1e635a616d3f9f82460512a", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/musl/0001-add-stub-for-pthread_mutexattr_setprioceiling.patch", "guest/javascript-2026.10.26.1/alpine/musl/APKBUILD", "guest/javascript-2026.10.26.1/alpine/musl/CVE-2026-40200.patch", "guest/javascript-2026.10.26.1/alpine/musl/CVE-2026-6042.patch", "guest/javascript-2026.10.26.1/alpine/musl/PKGINFO-musl-1.2.6-r2.txt", "guest/javascript-2026.10.26.1/alpine/musl/__stack_chk_fail_local.c", "guest/javascript-2026.10.26.1/alpine/musl/fix-loongarch64-zero-len-extcontext.patch", "guest/javascript-2026.10.26.1/alpine/musl/getconf.c", "guest/javascript-2026.10.26.1/alpine/musl/getent.c", "guest/javascript-2026.10.26.1/alpine/musl/handle-aux-at_base.patch", "guest/javascript-2026.10.26.1/alpine/musl/iconv.c", "guest/javascript-2026.10.26.1/alpine/musl/ldconfig", "guest/javascript-2026.10.26.1/musl/COPYRIGHT" ] }, { "name": "nghttp2", "version": "1.70.0-r0", "licenses": [ "MIT" ], "alpine": { "packages": [ { "name": "nghttp2-libs", "version": "1.70.0-r0", "arch": "riscv64", "apk_sha256": "af2fd97dd2b3c8625917ff84a02536e3940e66cff88b09727df299e4ae4f52b3", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/nghttp2-libs-1.70.0-r0.apk", "license": "MIT", "origin": "nghttp2", "aports_commit": "d5a34efc88bbe8d18737fda28125071c4aef8517" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/d5a34efc88bbe8d18737fda28125071c4aef8517/main/nghttp2" }, "in_image": [ "/usr/lib/libnghttp2.so.14 (node:http2)" ], "sources": [ { "file": "nghttp2-1.70.0.tar.xz", "url": "https://github.com/nghttp2/nghttp2/releases/download/v1.70.0/nghttp2-1.70.0.tar.xz", "size": 2018996, "sha256": "e05cb1388eaca3830aded4ccf20044b6e1ac1a61411dcca11b0437c4285c8bc2", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/nghttp2/APKBUILD", "guest/javascript-2026.10.26.1/alpine/nghttp2/PKGINFO-nghttp2-libs-1.70.0-r0.txt", "guest/javascript-2026.10.26.1/nghttp2/COPYING" ] }, { "name": "nodejs", "version": "24.18.1-r0", "licenses": [ "MIT" ], "alpine": { "packages": [ { "name": "nodejs", "version": "24.18.1-r0", "arch": "riscv64", "apk_sha256": "4af3c792c50ca739c1e1979d69e44a5bcf2dca86b07348ca034f5a7aea73f148", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/nodejs-24.18.1-r0.apk", "license": "MIT", "origin": "nodejs", "aports_commit": "48d72323daf83509b541059c994366393ec68e63" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/48d72323daf83509b541059c994366393ec68e63/main/nodejs" }, "in_image": [ "/usr/bin/node (Node.js with V8, libuv, llhttp and the other dependencies its LICENSE lists, built in; the rest are the shared libraries below), less nothing: Alpine's package is the binary alone" ], "sources": [ { "file": "node-v24.18.1.tar.gz", "url": "https://nodejs.org/dist/v24.18.1/node-v24.18.1.tar.gz", "size": 112903683, "sha256": "b62cd76de0a0a28dd9ff88580c92344bdeb008f21c1d7479c5d8659cd96ef4e2", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/nodejs/APKBUILD", "guest/javascript-2026.10.26.1/alpine/nodejs/PKGINFO-nodejs-24.18.1-r0.txt", "guest/javascript-2026.10.26.1/alpine/nodejs/node_sea.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/node_snapshotable.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/nodejs.pc.in", "guest/javascript-2026.10.26.1/alpine/nodejs/nodejs.post-upgrade", "guest/javascript-2026.10.26.1/alpine/nodejs/remove-unused-openssl-config.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/v8-disable-trap-handler-on-riscv-sv39.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/v8-int64-lowering-reducer.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/v8-no-static-zlib.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/v8-ppc64le-compat.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/v8-ppc_vsx-inl.patch", "guest/javascript-2026.10.26.1/alpine/nodejs/v8-riscv-trap-handler.patch", "guest/javascript-2026.10.26.1/nodejs/LICENSE", "guest/javascript-2026.10.26.1/nodejs/recipe/apk.lock", "guest/javascript-2026.10.26.1/nodejs/recipe/drop.txt", "guest/javascript-2026.10.26.1/nodejs/recipe/env", "guest/javascript-2026.10.26.1/nodejs/recipe/mkroot.sh", "guest/javascript-2026.10.26.1/nodejs/recipe/profile" ], "changes": "Alpine's build (alpine/nodejs/), installed without its install scripts; its closure trimmed by nodejs/recipe/drop.txt and /home/package.json added (mkroot.sh MODE=javascript)" }, { "name": "openssl", "version": "3.5.9-r0", "licenses": [ "Apache-2.0" ], "alpine": { "packages": [ { "name": "libcrypto3", "version": "3.5.9-r0", "arch": "riscv64", "apk_sha256": "c6d54d429a4edf7d08904be26c7ed6f4d5509f367b84f16982ec99aff26c1925", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/libcrypto3-3.5.9-r0.apk", "license": "Apache-2.0", "origin": "openssl", "aports_commit": "29b9ec24b1b5b39aeef51fa2a044210e2ec5258e" }, { "name": "libssl3", "version": "3.5.9-r0", "arch": "riscv64", "apk_sha256": "3271613a205fea23db94fd26a50c489ca75cf7534d0dc6319f61c3db5aff564d", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/libssl3-3.5.9-r0.apk", "license": "Apache-2.0", "origin": "openssl", "aports_commit": "29b9ec24b1b5b39aeef51fa2a044210e2ec5258e" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/29b9ec24b1b5b39aeef51fa2a044210e2ec5258e/main/openssl" }, "in_image": [ "/usr/lib/libcrypto.so.3, /usr/lib/libssl.so.3 (node:crypto); the engines, providers and /etc/ssl are not in the image (nodejs/recipe/drop.txt)" ], "sources": [ { "file": "openssl-3.5.9.tar.gz", "url": "https://github.com/openssl/openssl/releases/download/openssl-3.5.9/openssl-3.5.9.tar.gz", "size": 53279637, "sha256": "603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/openssl/APKBUILD", "guest/javascript-2026.10.26.1/alpine/openssl/PKGINFO-libcrypto3-3.5.9-r0.txt", "guest/javascript-2026.10.26.1/alpine/openssl/PKGINFO-libssl3-3.5.9-r0.txt", "guest/javascript-2026.10.26.1/alpine/openssl/auxv.patch", "guest/javascript-2026.10.26.1/alpine/openssl/openssl-fips.post-install", "guest/javascript-2026.10.26.1/openssl/LICENSE.txt" ] }, { "name": "simdjson", "version": "4.2.4-r0", "licenses": [ "Apache-2.0 OR MIT" ], "alpine": { "packages": [ { "name": "simdjson", "version": "4.2.4-r0", "arch": "riscv64", "apk_sha256": "4c47ee0191d9e14745b5c506dc9b0f407119fdc987e9e91aec647563fa5127d1", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/simdjson-4.2.4-r0.apk", "license": "Apache-2.0 OR MIT", "origin": "simdjson", "aports_commit": "a7627d81649ac8d3a81982a1998e0ce9a26ae827" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/a7627d81649ac8d3a81982a1998e0ce9a26ae827/main/simdjson" }, "in_image": [ "/usr/lib/libsimdjson.so.29 (JSON parsing inside node)" ], "sources": [ { "file": "simdjson-4.2.4.tar.gz", "url": "https://github.com/simdjson/simdjson/archive/v4.2.4/simdjson-4.2.4.tar.gz", "size": 6042120, "sha256": "6f942d018561a6c30838651a386a17e6e4abbfc396afd0f62740dea1810dedea", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/simdjson/APKBUILD", "guest/javascript-2026.10.26.1/alpine/simdjson/PKGINFO-simdjson-4.2.4-r0.txt", "guest/javascript-2026.10.26.1/simdjson/LICENSE", "guest/javascript-2026.10.26.1/simdjson/LICENSE-MIT" ] }, { "name": "simdutf", "version": "9.0.0-r0", "licenses": [ "Apache-2.0 OR MIT" ], "alpine": { "packages": [ { "name": "simdutf", "version": "9.0.0-r0", "arch": "riscv64", "apk_sha256": "d59cb4b540366560e23ecff3bc20d9e280df9abb417d10ac40abadc087fd880b", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/simdutf-9.0.0-r0.apk", "license": "Apache-2.0 OR MIT", "origin": "simdutf", "aports_commit": "752189178a5d79d5c1593825b389526f1fd684fd" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/752189178a5d79d5c1593825b389526f1fd684fd/main/simdutf" }, "in_image": [ "/usr/lib/libsimdutf.so.34 (Unicode transcoding inside node)" ], "sources": [ { "file": "simdutf-9.0.0.tar.gz", "url": "https://github.com/simdutf/simdutf/archive/v9.0.0/simdutf-9.0.0.tar.gz", "size": 2437537, "sha256": "fd2ce975f29809a975a8da8843cfb3a7265af3f71be548f199d23cf65e101764", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/simdutf/APKBUILD", "guest/javascript-2026.10.26.1/alpine/simdutf/PKGINFO-simdutf-9.0.0-r0.txt", "guest/javascript-2026.10.26.1/simdutf/LICENSE-APACHE", "guest/javascript-2026.10.26.1/simdutf/LICENSE-MIT" ] }, { "name": "sqlite", "version": "3.53.4-r0", "licenses": [ "blessing" ], "alpine": { "packages": [ { "name": "sqlite-libs", "version": "3.53.4-r0", "arch": "riscv64", "apk_sha256": "ac748dbb847fa2445be0897502466302980ab9bb122ae6eab79a5328dd482121", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/sqlite-libs-3.53.4-r0.apk", "license": "blessing", "origin": "sqlite", "aports_commit": "a9c3ba8b9129ec0f294d0a9bf538c2f1632bb016" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/a9c3ba8b9129ec0f294d0a9bf538c2f1632bb016/main/sqlite" }, "in_image": [ "/usr/lib/libsqlite3.so.0 (node:sqlite)" ], "sources": [ { "file": "sqlite-autoconf-3530400.tar.gz", "url": "https://www.sqlite.org/2026/sqlite-autoconf-3530400.tar.gz", "size": 3283177, "sha256": "0e9483900e92cd5de8fd48d16bf9200145a61f7fd5be542a5ac81d8a9516eb9c", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" }, { "file": "sqlite-src-3530400.zip", "url": "https://www.sqlite.org/2026/sqlite-src-3530400.zip", "size": 14557315, "sha256": "d18fa15aec74d8c17e1463f861095adc01b5ad190256acb4f91d22f0368d232b", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/sqlite/APKBUILD", "guest/javascript-2026.10.26.1/alpine/sqlite/PKGINFO-sqlite-libs-3.53.4-r0.txt" ] }, { "name": "zlib", "version": "1.3.2-r1", "licenses": [ "Zlib" ], "alpine": { "packages": [ { "name": "zlib", "version": "1.3.2-r1", "arch": "riscv64", "apk_sha256": "df0fed8bca1579423b1a78f3dde7e8130ea81908bcaacf179d452ae81cc4fdda", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/zlib-1.3.2-r1.apk", "license": "Zlib", "origin": "zlib", "aports_commit": "0afa2da0e8c8051c6f8f64a7a388e5a259904245" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/0afa2da0e8c8051c6f8f64a7a388e5a259904245/main/zlib" }, "in_image": [ "/usr/lib/libz.so.1.3.2" ], "sources": [ { "file": "zlib-1.3.2.tar.gz", "url": "https://zlib.net/fossils/zlib-1.3.2.tar.gz", "size": 1502830, "sha256": "bb329a0a2cd0274d05519d61c667c062e06990d72e125ee2dfa8de64f0119d16", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/zlib/APKBUILD", "guest/javascript-2026.10.26.1/alpine/zlib/CVE-2026-85091.patch", "guest/javascript-2026.10.26.1/alpine/zlib/PKGINFO-zlib-1.3.2-r1.txt", "guest/javascript-2026.10.26.1/zlib/LICENSE" ] }, { "name": "zstd", "version": "1.5.7-r2", "licenses": [ "BSD-3-Clause OR GPL-2.0-or-later" ], "alpine": { "packages": [ { "name": "zstd-libs", "version": "1.5.7-r2", "arch": "riscv64", "apk_sha256": "6d1b83640dae191c1efb34cbef49fafe6eda507c49232efa4948c8dfad4eab87", "apk_url": "https://dl-cdn.alpinelinux.org/alpine/v3.24/main/riscv64/zstd-libs-1.5.7-r2.apk", "license": "BSD-3-Clause OR GPL-2.0-or-later", "origin": "zstd", "aports_commit": "3c6e2ee2b16f403d53eab39c4426eb61f003c322" } ], "aport": "https://gitlab.alpinelinux.org/alpine/aports/-/tree/3c6e2ee2b16f403d53eab39c4426eb61f003c322/main/zstd" }, "in_image": [ "/usr/lib/libzstd.so.1 (node:zlib; zstd-libs, used under BSD-3-Clause)" ], "sources": [ { "file": "zstd-1.5.7.tar.gz", "url": "https://github.com/facebook/zstd/archive/v1.5.7.tar.gz", "size": 2451884, "sha256": "37d7284556b20954e56e1ca85b80226768902e2edabd3b649e9e72c0c9012ee3", "hosted": false, "note": "permissive licence: no source obligation; the archive is listed, not hosted" } ], "files": [ "guest/javascript-2026.10.26.1/alpine/zstd/APKBUILD", "guest/javascript-2026.10.26.1/alpine/zstd/PKGINFO-zstd-libs-1.5.7-r2.txt", "guest/javascript-2026.10.26.1/zstd/LICENSE" ] }, { "name": "xvm", "version": "javascript-2026.10.26.1", "licenses": [ "MIT OR Apache-2.0" ], "in_image": [ "/sbin/xvm-agent (PID 1), statically linked with Rust's standard library, the crates below and musl (Rust's self-contained copy, MIT: musl/COPYRIGHT)", "/etc (passwd, group, profile, xvm/env, ...), the home template's .profile" ], "crates": [ { "name": "itoa", "version": "1.0.18", "license": "MIT OR Apache-2.0", "repository": "https://github.com/dtolnay/itoa", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/itoa-1.0.18/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/itoa-1.0.18/LICENSE-MIT" ] }, { "name": "libc", "version": "0.2.190", "license": "MIT OR Apache-2.0", "repository": "https://github.com/rust-lang/libc", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/libc-0.2.190/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/libc-0.2.190/LICENSE-MIT" ] }, { "name": "memchr", "version": "2.8.3", "license": "Unlicense OR MIT", "repository": "https://github.com/BurntSushi/memchr", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/memchr-2.8.3/COPYING", "guest/javascript-2026.10.26.1/xvm/crates/memchr-2.8.3/LICENSE-MIT" ] }, { "name": "proc-macro2", "version": "1.0.107", "license": "MIT OR Apache-2.0", "repository": "https://github.com/dtolnay/proc-macro2", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/proc-macro2-1.0.107/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/proc-macro2-1.0.107/LICENSE-MIT" ] }, { "name": "quote", "version": "1.0.47", "license": "MIT OR Apache-2.0", "repository": "https://github.com/dtolnay/quote", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/quote-1.0.47/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/quote-1.0.47/LICENSE-MIT" ] }, { "name": "serde", "version": "1.0.229", "license": "MIT OR Apache-2.0", "repository": "https://github.com/serde-rs/serde", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/serde-1.0.229/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde-1.0.229/LICENSE-MIT" ] }, { "name": "serde_core", "version": "1.0.229", "license": "MIT OR Apache-2.0", "repository": "https://github.com/serde-rs/serde", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/serde_core-1.0.229/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde_core-1.0.229/LICENSE-MIT" ] }, { "name": "serde_derive", "version": "1.0.229", "license": "MIT OR Apache-2.0", "repository": "https://github.com/serde-rs/serde", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/serde_derive-1.0.229/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde_derive-1.0.229/LICENSE-MIT" ] }, { "name": "serde_json", "version": "1.0.154", "license": "MIT OR Apache-2.0", "repository": "https://github.com/serde-rs/json", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/serde_json-1.0.154/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde_json-1.0.154/LICENSE-MIT" ] }, { "name": "syn", "version": "3.0.9", "license": "MIT OR Apache-2.0", "repository": "https://github.com/dtolnay/syn", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/syn-3.0.9/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/syn-3.0.9/LICENSE-MIT" ] }, { "name": "unicode-ident", "version": "1.0.27", "license": "(MIT OR Apache-2.0) AND Unicode-3.0", "repository": "https://github.com/dtolnay/unicode-ident", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/unicode-ident-1.0.27/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/unicode-ident-1.0.27/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/unicode-ident-1.0.27/LICENSE-UNICODE" ] }, { "name": "zmij", "version": "1.0.23", "license": "MIT", "repository": "https://github.com/dtolnay/zmij", "files": [ "guest/javascript-2026.10.26.1/xvm/crates/zmij-1.0.23/LICENSE-MIT" ] } ], "sources": [], "note": "Our own code, MIT OR Apache-2.0: no source obligation. The scripts that build the GPL components are in their own directories here (kernel/recipe/).", "files": [ "guest/javascript-2026.10.26.1/xvm/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/NOTICE", "guest/javascript-2026.10.26.1/xvm/crates/itoa-1.0.18/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/itoa-1.0.18/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/libc-0.2.190/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/libc-0.2.190/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/memchr-2.8.3/COPYING", "guest/javascript-2026.10.26.1/xvm/crates/memchr-2.8.3/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/proc-macro2-1.0.107/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/proc-macro2-1.0.107/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/quote-1.0.47/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/quote-1.0.47/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/serde-1.0.229/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde-1.0.229/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/serde_core-1.0.229/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde_core-1.0.229/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/serde_derive-1.0.229/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde_derive-1.0.229/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/serde_json-1.0.154/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/serde_json-1.0.154/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/syn-3.0.9/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/syn-3.0.9/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/unicode-ident-1.0.27/LICENSE-APACHE", "guest/javascript-2026.10.26.1/xvm/crates/unicode-ident-1.0.27/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/crates/unicode-ident-1.0.27/LICENSE-UNICODE", "guest/javascript-2026.10.26.1/xvm/crates/zmij-1.0.23/LICENSE-MIT", "guest/javascript-2026.10.26.1/xvm/rust/COPYRIGHT-library.html", "guest/javascript-2026.10.26.1/xvm/rust/COPYRIGHT.html", "guest/javascript-2026.10.26.1/xvm/rust/README.md", "guest/javascript-2026.10.26.1/xvm/rust/licenses/Apache-2.0.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/BSD-2-Clause.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/CC-BY-SA-4.0.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/GCC-exception-3.1.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/GPL-2.0-only.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/GPL-3.0-or-later.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/ISC.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/LLVM-exception.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/MIT.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/NCSA.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/OFL-1.1.txt", "guest/javascript-2026.10.26.1/xvm/rust/licenses/Unicode-3.0.txt", "guest/javascript-2026.10.26.1/xvm/rust/rustc-vV.txt" ] } ], "not_distributed": "guest/javascript-2026.10.26.1/tools.txt", "offer": "guest/javascript-2026.10.26.1/README.html" }