ekp/dictionaries/LICENSES.md
Kinneyzhang fd1210e557 fix: close repository audit findings
Complete task002 through task016 across cache correctness, editor lifecycle, C boundaries, build and release governance, dictionary provenance, performance, interactive workflows, tests, documentation, and final cleanup.
2026-07-28 22:43:10 +08:00

2.2 KiB

Dictionary provenance and license evidence

The dictionary bytes in this directory are third-party data, not covered solely by emacs-kp's COPYING. MANIFEST.tsv identifies the evidence for every bundled file:

  • embedded means the dictionary itself contains its copyright and license or redistribution notice.
  • README_hyph_*.txt names the checked-in companion notice.
  • LICENSES.md refers to one of the pinned upstream companion files below.

The pinned LibreOffice snapshot is 8fb8e794237cff49ec212023f96bcdb7d3fbf56c. Immutable source links:

Dictionaries Upstream license evidence
hyph_eo.dic eo/license-en.txt
hyph_id_ID.dic id/LICENSE-dict
hyph_mr_IN.dic mr_IN/COPYING
hyph_nl_NL.dic nl_NL/license_en_EN.txt
hyph_ru_RU.dic ru_RU/README_ru_RU.txt

hyph_eu.dic is a legacy checked-in source whose byte is not present in the pinned LibreOffice tree. Its origin, copyright, redistribution terms, and checksum are retained in README_hyph_eu.txt and MANIFEST.tsv; the updater copies that verified local byte instead of pretending it came from the snapshot.

hyph_sa_IN.dic is intentionally not bundled. At the pinned snapshot it has neither an in-file copyright/license notice nor a package companion that states terms for the hyphenation data. LibreOffice reverted a generic COPYING addition because spelling and hyphenation files may have different licenses. Re-add Sanskrit only after an authoritative license statement for that exact data is available.

License texts and notices remain the authority. This index is provenance metadata, not a reinterpretation of their terms.