Additional component notices and verified font credits
=====================================================

This supplement preserves complete original license texts, copyright notices,
source pins and explicit font credits. Each component retains its own terms.
The common archive contains reference credits for several platforms; inclusion
is not a claim that every listed component ships on every platform.

MPVKit source at the pinned commit is GNU LGPL v3. The earlier MIT description
was incorrect. The incorporated GNU GPL v3 text is supplied as required by
LGPL v3; this does not license original application/CPPlayerKit player source
as GPL. The BSD uavs3d COPYING corresponds to the immutable replacement source
and current native artifact pins, not the incorrect historical source snapshot.

Purchase components retain their respective complete original MIT notices:
expo-iap: Copyright (c) 2025 hyochan; OpenIAP Apple and Google/Core:
Copyright (c) 2025 hyo.dev. Google/Core source tag google-4.0.6 is verified at
f6372aa2957f32f7088fdecb0ff1ed17236e9379. Both actual cached AARs match the
official release artifacts, and all 28 non-generated Maven source files match
that commit's Git blobs. Their original license is byte-identical to the
previously preserved OpenIAP Apple MIT file; the explicit Google/Core file and
full verification record are now included as well.

Google Play Billing declares the Android SDK License. Its complete embedded
third-party notices are preserved here, with the published Maven POM evidence.
Apple SDK terms apply to StoreKit and Google SDK terms apply to their SDKs.

Icon/font files retain artwork/font licenses independently of the MIT wrapper.
Font Awesome and Fontisto fonts use SIL OFL; Entypo+ artwork uses CC BY-SA;
Material icon fonts and Roboto use Apache 2.0. Other identified icon families
retain the included individual MIT notices. FONT-ATTRIBUTIONS.txt records the
authors and terms; all 19 icon fonts match the exact pinned Expo source bytes
in both official Google-signed Android APKs and both final local exported Apple
device candidates. FONT-ASSETS.json and APPLE-DEVICE-FONT-VERIFICATION.json
record those final IPA hashes and per-font matches. This is not a statement
that Apple has processed or approved a particular App Store build.

This notice supplement does not replace component-specific corresponding
source, patches, build instructions, relinking materials or installation
information when required. Current native source/build materials are published
separately at:
https://couchpotatosuite.com/wp-content/uploads/2026/10/cpp-apple-native-sources-2026-10-28-84c02ec4791f.zip
Device object-only relink materials are separately matched to their final
archive/IPA identities. Historical published materials remain historical and
must not be substituted for the artifact mapping in current download indexes.

The installed npm inventory includes build tools as well as runtime modules.
Remaining per-package root-notice gaps are not automatically evidence that
every such package ships in an app. This focused supplement is not an
exhaustive audit or legal certification of all dependencies/distributions.

SUPPLEMENT-2026-10-28.json records the original source URLs and SHA-256 hashes.
Original upstream texts are preserved except for explicitly documented
extractions of an original comment header or the normative full license body.
