Kitedesk third-party notices

Deterministic inventory schema 1. Inventory SHA-256: d20d04bf06a04492c5776097d039f24cd94c12a8856073d9b17dd077d2d03543.

Kitedesk is an independent fork of RustDesk. It is not affiliated with, endorsed by, or approved by the RustDesk project. Kitedesk and the reviewed RustDesk combined-work scope are distributed under AGPL-3.0-only. The AGPL text and corresponding-source route are bundled as LICENSE-AGPL-3.0.txt and SOURCE-CODE.txt.

Reviewed hbb_common project-license scope

Core pins rustdesk/hbb_common@69cea8dafee147848ae88702029f4bf7df7224c3. The audit records its in-tree origin, initial extraction, current parent selection, exact trees, and RustDesk contribution policy. This is a narrow project-scope conclusion; it is not a claim that every historical commit has a complete DCO trailer chain. Pin drift blocks release.

Core codec boundary

Public Core requests the flutter Cargo feature; Cargo resolves root features dasp, default, flutter, flutter_rust_bridge, use_dasp. The Core vcpkg manifest and resolved graph exclude ffmpeg, mfx-dispatch, optional hwcodec, and the hwcodec/mediacodec/vram implementation features. Protocol capability names may remain for interoperability. H.264/H.265 implementation is not shipped in Core. Enhanced distribution remains unpublished pending written product classification and any applicable pool contracts.

Flutter supplemental notices

Each Flutter application bundle also contains generated flutter_assets/NOTICES.Z, rendered by the in-app open-source licenses screen. Its artifact-specific hash and section count are verified by the release workflow. This inventory supplements rather than replaces Flutter supplemental notices.

Coverage

cargo=840, cocoapods=6, dart=234, deno=9, maven=84, vcpkg=7; total=1180; deduplicated texts=544.

The component table is deliberately conservative: non-development Cargo build edges and resolved Flutter packages are listed even where a tool is used only while constructing a binary. CocoaPods marked ios-development are not public Core artifacts. Managed-service Deno packages are listed separately from downloadable binaries.