-
Notifications
You must be signed in to change notification settings - Fork 2
Expand file tree
/
Copy pathNOTICE
More file actions
123 lines (103 loc) · 6.34 KB
/
Copy pathNOTICE
File metadata and controls
123 lines (103 loc) · 6.34 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
OhMyPerf
Copyright 2026 Hoài Nhớ <nhoxtvt@gmail.com>
This product includes software developed by the OhMyPerf project
(https://github.com/ohmyperf/ohmyperf).
================================================================================
Third-party software licensed under separate terms
================================================================================
This distribution links against and/or vendors the following third-party
software. Their respective licenses are reproduced or referenced below; users
of this distribution must comply with each.
--------------------------------------------------------------------------------
axe-core (MPL-2.0)
--------------------------------------------------------------------------------
Project: https://github.com/dequelabs/axe-core
License: Mozilla Public License 2.0
Usage: linked, not modified. Loaded at runtime in @ohmyperf/plugin-axe.
This Source Code Form is subject to the terms of the Mozilla Public License,
v. 2.0. If a copy of the MPL was not distributed with this file, you can
obtain one at https://mozilla.org/MPL/2.0/.
Per MPL-2.0 §3.3, recipients of MPL-licensed files retain MPL obligations on
those files. OhMyPerf does not modify axe-core source files; we re-export the
upstream package via @ohmyperf/plugin-axe. The unmodified axe-core source
remains under MPL-2.0.
--------------------------------------------------------------------------------
Playwright (Apache-2.0)
--------------------------------------------------------------------------------
Project: https://github.com/microsoft/playwright
License: Apache License, Version 2.0
Copyright: Copyright (c) Microsoft Corporation
Usage: runtime dependency of @ohmyperf/driver-playwright; orchestration
layer for browser launch + CDP session creation.
--------------------------------------------------------------------------------
web-vitals (Apache-2.0)
--------------------------------------------------------------------------------
Project: https://github.com/GoogleChrome/web-vitals
License: Apache License, Version 2.0
Copyright: Copyright (c) Google LLC
Usage: runtime dependency of @ohmyperf/plugin-cwv; the
"web-vitals/attribution" build is injected into measured pages
via CDP Page.addScriptToEvaluateOnNewDocument.
--------------------------------------------------------------------------------
Lighthouse audit modules (Apache-2.0, vendored subset)
--------------------------------------------------------------------------------
Project: https://github.com/GoogleChrome/lighthouse
License: Apache License, Version 2.0
Copyright: Copyright (c) Google LLC
Usage: a curated subset of audit modules (SEO, best-practices, HTTPS,
manifest, robots) is vendored into
@ohmyperf/plugins-builtin/lh-audits/ under the original Apache-2.0
license. The vendored copies preserve upstream copyright headers and
are updated on the OhMyPerf release schedule.
--------------------------------------------------------------------------------
tracium-equivalent (Apache-2.0, vendored)
--------------------------------------------------------------------------------
Project: https://github.com/aslushnikov/tracium (reference implementation)
License: Apache License, Version 2.0
Usage: trace-event utilities for MainThreadTasks parsing are vendored into
@ohmyperf/trace-utils. Upstream copyright headers preserved.
--------------------------------------------------------------------------------
Vendored open-design brand tokens (Apache-2.0)
--------------------------------------------------------------------------------
Project: https://github.com/nexu-io/open-design
License: Apache License, Version 2.0
Usage: CSS token files vendored into @ohmyperf/design-tokens/brands/<id>/
to power the --style flag (CLI), MCP rendering tool style arg, and
website /report brand picker. Vendored copies carry the upstream
SPDX-License-Identifier header and a provenance comment citing the
pinned upstream snapshot SHA and the local vendor date.
Brands vendored (3):
- linear-app (vendored from local-vendor-2026-05-18 snapshot)
- stripe (vendored from local-vendor-2026-05-18 snapshot)
- vercel (vendored from local-vendor-2026-05-18 snapshot)
Transforms applied at vendor time (do NOT alter Apache-2.0 obligations):
1. Font stacks reduced to system fallback (ohmyperf single-file
offline-portable constraint). Original brand fonts (Inter Variable,
Geist, etc.) are referenced by name in the system stack as a
lower-priority fallback for environments where they are installed.
2. CSS color-mix() calls resolved to static hex (browser back-compat
for archived reports). Original expression preserved as a CSS comment
adjacent to the resolved value.
No upstream component HTML, fixture, or prose DESIGN.md content is
redistributed. Only tokens.css per vendored brand.
Brand names (Linear, Stripe, Vercel) are referenced as design-system
identifiers, not endorsements. ohmyperf's footer attribution reads
"Styled like <brand> via Open Design Library" to avoid implying any
affiliation with or endorsement by the brand owners.
Pinned upstream SHA: see packages/design-tokens/brands/UPSTREAM_SHA
Schema digest: see packages/design-tokens/brands/.schema-digest
--------------------------------------------------------------------------------
Other Apache-2.0 dependencies
--------------------------------------------------------------------------------
citty (UnJS), Hono, Vite, React, Tailwind, source-map (Mozilla), and other
Apache-2.0 / MIT dependencies are listed in package.json files. Their
copyright notices remain intact in the npm registry distribution.
================================================================================
NOTICE file maintenance
================================================================================
This NOTICE file is regenerated by the `pnpm run license:audit` task in CI on
every release. New runtime dependencies with non-permissive licenses (anything
other than Apache-2.0, MIT, ISC, BSD-2/3-Clause, MPL-2.0) MUST be added to this
file with attribution before the dependency is allowed into the codebase.
For questions about licensing, file an issue at
https://github.com/ohmyperf/ohmyperf/issues.