lvgl/sbom/third_party.json

{
  "$comment": "Single source of truth for LVGL's third-party dependencies. Edit this file when a dependency is added, removed, or relicensed, then run scripts/generate_copyrights.py and scripts/generate_sbom.py to regenerate COPYRIGHTS.md and the SPDX SBOM. 'supplier' names come from each library's copyright holder. 'version' is the vendored snapshot version (from an in-tree version macro/string) or NOASSERTION when the upstream copy carries no version. 'copyright' is the upstream copyright statement from the library's LICENSE/source header.",
  "project": {
    "name": "lvgl",
    "summary": "Light and Versatile Graphics Library",
    "license": "MIT",
    "copyright": "Copyright (c) 2025 LVGL Kft",
    "download_location": "https://github.com/lvgl/lvgl",
    "homepage": "https://lvgl.io",
    "supplier": {"name": "LVGL Kft", "type": "organization"}
  },
  "components": [
    {
      "key": "barcode",
      "name": "Barcode (Barcode generator)",
      "paths": ["src/libs/barcode"],
      "sources": [{"url": "https://github.com/fhunleth/code128"}],
      "version": "NOASSERTION",
      "license": "BSD-2-Clause",
      "copyright": "Copyright (c) 2013-2015 LKC Technologies, Inc.",
      "purl": "pkg:github/fhunleth/code128",
      "purpose": "library",
      "supplier": {"name": "LKC Technologies, Inc.", "type": "organization"}
    },
    {
      "key": "freetype",
      "name": "FreeType (Font rendering library)",
      "paths": ["src/libs/freetype"],
      "sources": [{"url": "https://github.com/freetype/freetype"}],
      "note": "Only the interfaces are used; FreeType itself is not part of LVGL.",
      "version": "NOASSERTION",
      "license": "FTL OR GPL-2.0-or-later",
      "copyright": "Copyright (C) 1996-2022 by David Turner, Robert Wilhelm, and Werner Lemberg (The FreeType Project)",
      "purl": "pkg:github/freetype/freetype",
      "purpose": "library",
      "supplier": {"name": "The FreeType Project", "type": "organization"}
    },
    {
      "key": "liberation-sans",
      "name": "Liberation Sans (default demo font)",
      "paths": ["src/libs/freetype/LiberationSans-Regular.ttf"],
      "sources": [{"url": "https://github.com/liberationfonts/liberation-fonts"}],
      "note": "Font asset bundled alongside the FreeType interface; licensed separately from FreeType.",
      "version": "NOASSERTION",
      "license": "OFL-1.1",
      "copyright": "Digitized data copyright (c) 2010 Google Corporation with Reserved Font Arimo, Tinos and Cousine; Copyright (c) 2012 Red Hat, Inc. with Reserved Font Name Liberation.",
      "purl": "pkg:github/liberationfonts/liberation-fonts",
      "purpose": "file",
      "supplier": {"name": "Red Hat, Inc.", "type": "organization"}
    },
    {
      "key": "lodepng",
      "name": "LodePNG (PNG decoder)",
      "paths": ["src/libs/lodepng"],
      "sources": [{"url": "https://github.com/lvandeve/lodepng"}],
      "version": "20230410",
      "license": "Zlib",
      "copyright": "Copyright (c) 2005-2023 Lode Vandevenne",
      "purl": "pkg:github/lvandeve/lodepng",
      "purpose": "library",
      "supplier": {"name": "Lode Vandevenne", "type": "person"}
    },
    {
      "key": "lz4",
      "name": "LZ4 (Compression/Decompression)",
      "paths": ["src/libs/lz4"],
      "sources": [{"url": "https://github.com/lz4/lz4"}],
      "version": "1.10.0",
      "license": "BSD-2-Clause",
      "copyright": "Copyright (c) 2011-2023 Yann Collet",
      "purl": "pkg:github/lz4/lz4",
      "purpose": "library",
      "supplier": {"name": "Yann Collet", "type": "person"}
    },
    {
      "key": "qrcode",
      "name": "QR Code (QR code generator)",
      "paths": ["src/libs/qrcode"],
      "sources": [{"url": "https://github.com/nayuki/QR-Code-generator"}],
      "version": "NOASSERTION",
      "license": "MIT",
      "copyright": "Copyright (c) Project Nayuki. (MIT License)",
      "purl": "pkg:github/nayuki/QR-Code-generator",
      "purpose": "library",
      "supplier": {"name": "Project Nayuki", "type": "organization"}
    },
    {
      "key": "thorvg",
      "name": "ThorVG (Vector graphics rendering)",
      "paths": ["src/libs/thorvg"],
      "sources": [{"url": "https://github.com/thorvg/thorvg"}],
      "version": "0.15.3",
      "license": "MIT",
      "copyright": "Copyright (c) 2020 - 2025 notice for the ThorVG Project (see CONTRIBUTORS)",
      "purl": "pkg:github/thorvg/thorvg",
      "purpose": "library",
      "supplier": {"name": "The ThorVG Project", "type": "organization"}
    },
    {
      "key": "rapidjson",
      "name": "RapidJSON (JSON parser/generator)",
      "paths": ["src/libs/thorvg/rapidjson"],
      "sources": [{"url": "https://github.com/Tencent/rapidjson"}],
      "note": "Bundled inside the ThorVG tree (used by ThorVG's Lottie parser); licensed separately from ThorVG. The bundled msinttypes helper (rapidjson/msinttypes) is BSD-3-Clause (Copyright (c) 2006-2013 Alexander Chemeris), hence the combined license expression.",
      "version": "1.1.0",
      "license": "MIT AND BSD-3-Clause",
      "copyright": "Copyright (C) 2015 THL A29 Limited, a Tencent company, and Milo Yip.; Copyright (c) 2006-2013 Alexander Chemeris (msinttypes)",
      "purl": "pkg:github/Tencent/rapidjson@1.1.0",
      "purpose": "library",
      "supplier": {"name": "THL A29 Limited, a Tencent company", "type": "organization"}
    },
    {
      "key": "tiny_ttf",
      "name": "TinyTTF",
      "paths": ["src/libs/tiny_ttf"],
      "sources": [
        {"url": "https://github.com/nothings/stb", "note": "Only parts are integrated"},
        {"url": "https://github.com/codewitch-honey-crisis/tiny_ttf", "note": "Modified version of the original STB library"}
      ],
      "version": "1.26",
      "license": "MIT OR Unlicense",
      "copyright": "Copyright (c) 2017 Sean Barrett; Copyright (c) 2022 honey the codewitch",
      "purl": "pkg:github/nothings/stb",
      "purpose": "library",
      "supplier": {"name": "Sean Barrett", "type": "person"}
    },
    {
      "key": "tjpgd",
      "name": "TJPGD (JPEG decoder)",
      "paths": ["src/libs/tjpgd"],
      "sources": [{"url": "http://elm-chan.org/fsw/tjpgd/00index.html"}],
      "version": "R0.03",
      "license": "LicenseRef-TJpgDec",
      "license_file": "src/libs/tjpgd/LICENSE.txt",
      "copyright": "Copyright (C) 2021, ChaN, all right reserved.",
      "purl": "pkg:generic/tjpgd?download_url=http://elm-chan.org/fsw/tjpgd/00index.html",
      "purpose": "library",
      "supplier": {"name": "ChaN", "type": "person"}
    },
    {
      "key": "tlsf",
      "name": "TLSF (Two-Level Segregate Fit memory allocator)",
      "paths": ["src/stdlib/builtin"],
      "sources": [{"url": "https://github.com/mattconte/tlsf"}],
      "version": "3.1",
      "license": "BSD-3-Clause",
      "copyright": "Copyright (c) 2006-2016 Matthew Conte",
      "purl": "pkg:github/mattconte/tlsf",
      "purpose": "library",
      "supplier": {"name": "Matthew Conte", "type": "person"}
    },
    {
      "key": "printf",
      "name": "Printf (Printf formatting library)",
      "paths": ["src/stdlib/builtin"],
      "sources": [{"url": "https://github.com/mpaland/printf"}],
      "version": "NOASSERTION",
      "license": "MIT",
      "copyright": "Copyright (c) 2014 Marco Paland",
      "purl": "pkg:github/mpaland/printf",
      "purpose": "library",
      "supplier": {"name": "Marco Paland", "type": "person"}
    },
    {
      "key": "ft800-ft813",
      "name": "FT800-FT813 (EVE GPU driver)",
      "paths": ["src/libs/FT800-FT813"],
      "sources": [{"url": "https://github.com/RudolphRiedel/FT800-FT813"}],
      "version": "5.0",
      "license": "MIT",
      "copyright": "Copyright (c) 2016-2024 Rudolph Riedel",
      "purl": "pkg:github/RudolphRiedel/FT800-FT813",
      "purpose": "library",
      "supplier": {"name": "Rudolph Riedel", "type": "person"}
    },
    {
      "key": "gif",
      "name": "AnimatedGIF (GIF decoder library)",
      "paths": ["src/libs/gif"],
      "sources": [{"url": "https://github.com/bitbank2/AnimatedGIF"}],
      "version": "NOASSERTION",
      "license": "Apache-2.0",
      "copyright": "Copyright (c) 2020 BitBank Software, Inc. All rights reserved.",
      "purl": "pkg:github/bitbank2/AnimatedGIF",
      "purpose": "library",
      "supplier": {"name": "BitBank Software, Inc.", "type": "organization"}
    },
    {
      "key": "nanovg",
      "name": "NanoVG (Anti-aliased vector graphics rendering)",
      "paths": ["src/libs/nanovg"],
      "sources": [{"url": "https://github.com/memononen/nanovg"}],
      "note": "Compiled when LV_USE_NANOVG (or the LV_USE_DRAW_NANOVG backend) is enabled.",
      "version": "NOASSERTION",
      "license": "Zlib",
      "copyright": "Copyright (c) 2013 Mikko Mononen memon@inside.org",
      "purl": "pkg:github/memononen/nanovg",
      "purpose": "library",
      "supplier": {"name": "Mikko Mononen", "type": "person"}
    },
    {
      "key": "frogfs",
      "name": "FrogFS (read-only filesystem)",
      "paths": ["src/libs/frogfs"],
      "sources": [{"url": "https://github.com/jkent/frogfs"}],
      "version": "1.0",
      "license": "MPL-2.0",
      "copyright": "Copyright (c) Jeff Kent",
      "purl": "pkg:github/jkent/frogfs",
      "purpose": "library",
      "supplier": {"name": "Jeff Kent", "type": "person"}
    }
  ]
}