# Third-party notices

## Browser core

plup builds **Cranked-PoC v0.1 sources**, by Justin Marentette and contributors,
with the explicitly marked `vendor/frame-ack.patch` and `vendor/system-menu.patch`.
The latter adds a built-in Resume action, B-to-close and correct visible-item
selection to the core menu; it does not bundle Playdate firmware. plup does not claim authorship
of that ARM interpreter or SDK implementation. MIT license and dependency notices
are preserved in `licenses/core/` and `licenses/Cranked.txt`.

Source: https://github.com/TheLogicMaster/Cranked-PoC at
`14ef1b9dd927461c3bccea79bc31c0833246fdfb`, applying its patch series to Cranked
`6d29957733641e43cd789b1b1a31f17a0852ac54`. `vendor/core.json` pins source, compiler
and SDK inputs. The generated `web/core/provenance.json` records output hashes
and the plup patch hashes. No prebuilt release binary is substituted on build failure.

The web build uses the built-in ARM interpreter, **not Unicorn**. It embeds
Playdate system fonts by Panic Inc. under CC BY 4.0:
https://creativecommons.org/licenses/by/4.0/ . Other SDK system assets are
upstream-generated stand-ins. Builds explicitly set `SDK_ASSETS=fonts`; the
preserved `licenses/core/NOTICE.md` explains this distribution mode.
No Panic firmware, keys, or standalone SDK tools are shipped.

Core dependencies include Playdate-compatible Lua, libffi, libzip/libzippp,
zlib, cpp-unicodelib, magic_enum, nlohmann/json, Tracy, gif-h, minimp3,
Emscripten and its C++ runtime. Their notices are bundled in `licenses/`.
The Lua fork is https://github.com/scratchminer/lua54 at
`c47f7fe1f14b1c424b0835e6c4fb2df892f358e4`, with the PoC's patches;
Lua copyright © 1994–2020 Lua.org, PUC-Rio, MIT license (`licenses/Lua.txt`).

No endorsement or support from Panic or Cranked is implied. Cranked-PoC describes
itself as an unsupported proof of concept; plup owns its integration/verification.

## Bobby fixture

Unmodified Bobby 1.0.4 by Yannick A., downloaded from
https://yannicka.itch.io/bobby-playdate (upload 8221920).
SHA-256: `7c812eacef33d1f484f310674cafa7c8131dd05a0cdf7158f4cc7e5935405557`.
Source: https://github.com/yannicka/bobby-playdate at
`ee7676932cb5197660e58e8b9a41a80a49e3bc8e` (pdxinfo version 1.0.4).
The source archive and AGPLv3 license are provided beside the fixture.
The itch page identifies assets as CC BY-SA 4.0:
https://creativecommons.org/licenses/by-sa/4.0/ . No game assets are modified.

## Singularity fixture

Unchanged Singularity by Rani367, MIT licensed, from
https://github.com/Rani367/singularity at
`e22897194cd7f8ac0c11859528d326d62e11b19f`.
SHA-256: `bb5f2901d99abc5248705e9992bb3da4dd8ee4f920e016b8d699c8d8470ced21`.
The original license accompanies the package in `tests/fixtures/`.

## Snooze or Lose fixture

Unchanged Snooze or Lose 1.1.0 by Team Snooze, release:
https://github.com/britalmeida/project_snooze/releases/tag/v1.1.0 .
Source: https://github.com/britalmeida/project_snooze at
`e91963cbfe0b8cab89889555fc8089c0c38245ed`.
That release's LICENSE is **CC0 1.0 Universal** (the current default branch's
license is not substituted for the pinned release's license).
SHA-256: `58a3ed77ac024b746fb255aed804ceb9efe5af2c6be2d7b75602646ac0c6f824`.
The original release license accompanies the ZIP in `tests/fixtures/`.
Game page: https://iralmeida.itch.io/snooze-or-lose .

These game packages contain the compiled CoreLibs supplied by their authors.
They are distributed unchanged, separately from plup's original code.

## Authored conformance fixtures

`tests/fixtures/audio-check.lua`, `tests/fixtures/sdk/`, and the generated tone,
ApiCheck and MixedCheck packages are MIT-licensed plup probes, **not additional
third-party games**. Native fixtures use SDK build support under its 0BSD license
(`licenses/core/Playdate-buildsupport.txt`). Test compilation uses the SDK but
does not distribute its tools. The generated waveforms contain no SDK audio.

PDA format reference (CC0):
https://github.com/cranksters/playdate-reverse-engineering/blob/main/formats/pda.md .
PDZ validation was informed by Cranked's MIT `core/Rom.cpp`; its notice is retained.

## JavaScript dependencies

fflate 0.8.2 — MIT, copyright © 2020 Arjun Barrett.
Playwright — Apache-2.0 (development/test dependency).
Dependency notices are included in their npm distributions.