Third-party components — source-only launcher/recompiler bundle

PSPRecomp independent code: MIT, licenses/PSPRecomp-MIT.txt. This includes the
launcher page in launcher-ui (HTML, CSS, JavaScript and the pointing-hand image).

Microsoft WebView2 SDK 1.0.2903.40 (NuGet Microsoft.Web.WebView2): its loader is
statically linked into BadmanLauncher.exe. BSD-style licence and notices:
licenses/WebView2-SDK-LICENSE.txt and licenses/WebView2-SDK-NOTICE.txt. The
WebView2 Runtime itself is a separately installed Windows component.

Pixelify Sans (launcher-ui/fonts/PixelifySans.ttf), Copyright 2021 The Pixelify
Sans Project Authors, SIL Open Font License 1.1: launcher-ui/fonts/OFL.txt.
Source: https://github.com/google/fonts/tree/main/ofl/pixelifysans
No compiled BadmanNative executable, AOT library, generated game C++ or commercial
input is included. Those are produced locally from the player's verified ISO.

CPython 3.13.12 Windows embeddable x64: Python Software Foundation license and
included third-party notices, python/LICENSE.txt. Original official archive:
https://www.python.org/ftp/python/3.13.12/python-3.13.12-embed-amd64.zip
Only python313._pth is changed to add ../tools, with user/site imports disabled.

7-Zip is a separately installed prerequisite: https://www.7-zip.org/ . No 7-Zip
binary is bundled. First preparation downloads the pinned original pspdecrypt1.0
release from https://github.com/John-K/pspdecrypt/releases/tag/1.0 into the user's
local cache, with GPL license and provenance. An owned working copy receives only
our UTF-8/asInvoker manifest resource using the user's installed Windows SDK tool.
Original files and hashes are retained. tools/decryptor-utf8.manifest is our
independent resource modification. No decryptor binary/source is supplied here.

Replacement PGFs: Ume-derived open-license fonts, assets/UME-FONT-LICENSE.txt.
Pinned URLs/hashes/contributor provenance: assets/replacement-font-manifest.json.
No PPSSPP implementation is linked/copied as part of these font assets.

FFmpeg external shared codec: LGPLv3-or-later, downloaded by first preparation
from the pinned publisher asset into the user's local tools cache. Matching
DLLs/public SDK and vendor LICENSE remain there. No FFmpeg binary, header or
implementation is included in this distribution. Pinned FFmpeg version:
n8.1.3-9-g29e619e767-20260930
Publisher release: autobuild-2026-09-30-13-08
Exact FFmpeg source commit: 29e619e767cde9045a75c29bc9a8278ae7b3a98b
https://github.com/FFmpeg/FFmpeg/tree/29e619e767cde9045a75c29bc9a8278ae7b3a98b
Publisher archive SHA-256: 3e47bda1607740550141e37c0e49d1e5182b34699f15adfd137ee266d346811a
Published build/archive/file identities: config/toolchain_dependencies.json,
config/video_codec.json and config/ffmpeg_sdk_files.json. Downloaded provenance
and licenses stay beside the locally extracted dependency files.
Build publisher/source scripts: https://github.com/BtbN/FFmpeg-Builds .

Visual Studio 2022 C++ Build Tools, Windows SDK and CMake: installed prerequisites,
not bundled or downloaded by this packager. Our launcher/recompiler and local
game-build command select the static MSVC runtime.

Khronos Vulkan-Headers: vendored API declarations only, SPDX Apache-2.0.
The upstream repository also supplies MIT licensing for applicable files.
Exact source commit: b379292b2ab6df5771ba9870d53cf8b2c9295daf
https://github.com/KhronosGroup/Vulkan-Headers/tree/b379292b2ab6df5771ba9870d53cf8b2c9295daf
Full upstream license notice and Apache-2.0/MIT texts: runtime-source/third_party/vulkan_headers/LICENSE.md
and runtime-source/third_party/vulkan_headers/LICENSES/. Per-file hashes/URLs: PROVENANCE.json there.
No Vulkan driver, SDK or DXC shader compiler is bundled. The independent shader is embedded as SPIR-V.
