Third-Party Notices
Page version: 1.0
Source snapshot: SekuraJS revision 6dd5716a8f3bcf29d27ae9ca64800bb517601236.
This page records libraries and tools used to build, test, or run Sekura JS in the checked source environment. It does not change the proprietary license for Sekura JS or grant additional rights to its code. User-created SJP artifacts do not become Jupiter Soft’s property merely because Sekura JS tools created them; rights in each artifact depend on the applicable relationships and agreements among its creator, user, and customer.
Libraries linked to the command-line tools
| Component | Version observed in the checked environment | Use and distribution | License and upstream source |
|---|---|---|---|
| ZLIB | Homebrew 1.3.2 was installed; the checked sekura-sjv binary linked to the system /usr/lib/libz.1.dylib (macOS reports current version 1.2.12). |
Required for SJP containers and located through CMake find_package(ZLIB). The checked binary used the system library rather than the Homebrew copy. Versions on other target systems may differ. |
zlib license |
| libsodium | 1.0.22 (local build). | Required for Ed25519 operations in sekura-sjv; linked as an external system library. Versions on other target systems may differ. |
ISC license |
These libraries are not stored in the source repository. The build environment supplies them separately. If a Sekura JS distribution includes or repackages their binaries, the release must retain the applicable notices and record the versions actually included.
External command-line tools
| Component | Version observed in the checked environment | Use and distribution | License and upstream source |
|---|---|---|---|
| Z3 | 5.1.0 (local build). | Invoked through PATH to check SMT obligations; the executable is not included in the repository. |
MIT license |
| CVC5 | 1.4.0 (local build; cln=no, glpk=no). |
Optional external tool for the --cross-check-cvc5 replay cross-check; the executable is not included in the repository. |
Modified BSD license. Other builds may have additional dependencies and build options; some configurations may include GPL components. |
The versions above describe the environment used to check the source transfer. They are not minimum required versions for all users. Release notes should record the solver versions used for release verification and builds.
VS Code extension development and test dependencies
| Package | Locked version | Use and distribution | License and upstream notices |
|---|---|---|---|
vscode-textmate |
9.3.2 | Grammar-test dependency in sekura-sjs/package-lock.json; node_modules is excluded from the VSIX. |
MIT license |
vscode-oniguruma |
2.0.1 | Grammar-test dependency in sekura-sjs/package-lock.json; node_modules is excluded from the VSIX. |
MIT license and third-party notices |
Project implementation provenance
src-sjv/hash/blake3.cpp was transferred without changes from the baseline Sekura JS project. In the available history, mr8sim/blake3.cpp first appeared in commit 0132b2d1f02726220efc6b786b592e481c6a1bd6 on 2026-07-28. The project owner confirmed that Codex authored the implementation for that baseline project and that it was not copied from a third-party library. The history available for review shows that commit as the file’s first appearance.
The implementation follows the published BLAKE3 algorithm. The official reference implementation was consulted afterward to compare algorithm constants and steps; direct code copying was not found. This provenance statement records the project owner’s confirmation. The official BLAKE3 source is available under CC0-1.0 or Apache-2.0; those licenses are not attributed to this project implementation. See the BLAKE3 project and its reference implementation.
Sekura JS proprietary license
The root root LICENSE contains the proprietary terms supplied by the project owner and names Jupiter Soft as copyright holder. sekura-sjs/LICENSE contains the same text so that the terms are available with the extension package. Before public distribution, check any additional component license file, including sekura-sjs/LICENSE, for consistency with the root license. Separate third-party component licenses continue to apply to those components.
For the user-facing summary, see Licensing. The full Sekura JS license is also available on this site.