Public source mirror for third-party libraries shipped in idnerdidx products.
This repository exists to satisfy the source-availability obligations of the LGPL-2.1 and MPL-2.0 licenses: recipients of our binaries are entitled to a durable, fetchable copy of the exact corresponding source. Upstream URLs can rot; this mirror is the org-owned, public copy those offers point at.
The archives are pristine, unmodified upstream release archives — byte-for-byte identical to the upstream originals, verified by SHA-256 before upload. Nothing of ours (no build files, patches, flags, or wrappers) is included.
Archives (release v1)
| Library | Version | License | Archive | SHA-256 | Upstream origin |
|---|---|---|---|---|---|
| FFmpeg | 7.1.2 | LGPL-2.1 | ffmpeg-7.1.2.tar.xz |
089bc60fb59d6aecc5d994ff530fd0dcb3ee39aa55867849a2bbc4e555f9c304 |
https://ffmpeg.org/releases/ffmpeg-7.1.2.tar.xz |
| libsrt | 1.5.3 | MPL-2.0 | srt-1.5.3.tar.gz |
befaeb16f628c46387b898df02bc6fba84868e86a6f6d8294755375b9932d777 |
https://github.com/Haivision/srt/archive/refs/tags/v1.5.3.tar.gz |
Verify a download:
curl -LO https://github.com/idnerdidx/third-party-sources/releases/download/v1/ffmpeg-7.1.2.tar.xz
sha256sum ffmpeg-7.1.2.tar.xz # must print 089bc60f…c304- Assets in a published release are immutable: never replace or delete an
archive a shipped notice points at. New/updated dependencies get a new release
tag (
v2, …) and repointed notices. - Each shipped product's
THIRD-PARTY-NOTICES.md/BUILD-PROVENANCE.mdnames the exact release-asset URL and SHA-256 it was built from.