# Third-party code and research notices

Audit date: 2026-10-24. This document records known attribution; it does not grant rights to game assets or certify release-license compliance.

## ndspy

Copyright 2019 RoadrunnerWMC (as credited in the adapted modules).
Project: https://github.com/RoadrunnerWMC/ndspy
License: GNU General Public License version 3 or, at your option, any later version.
License text shipped at `dist/converter/LICENSE-GPL-3.0.txt`.

`dist/converter/code_reader.mjs` adapts ndspy `codeCompression.py` and `code.py`; `code_compressor.mjs` adapts `codeCompression.py` and `_lzCommon.py`. These are modified JavaScript ports, not upstream releases. `nitro_textures.mjs` credits ndspy `_common` dictionary-layout research; retain that notice without treating format compatibility alone as proof of a derivative implementation.

The covered software is provided without warranty, including implied merchantability or fitness for a particular purpose; see the full license. Preserve applicable attribution and license terms when redistributing. The existence of this notice and license file alone does not establish that the complete distribution satisfies the license, including any applicable corresponding-source obligations.

Primary verification: https://raw.githubusercontent.com/RoadrunnerWMC/ndspy/master/ndspy/codeCompression.py and https://raw.githubusercontent.com/RoadrunnerWMC/ndspy/master/LICENSE . No exact imported upstream commit was established in this audit.

## DSDecmp ancestry

ndspy's `codeCompression.py` identifies its decompressor as a port from DSDecmp: https://github.com/Barubary/dsdecmp . The JavaScript reader preserves this ancestry credit. This is not an independently verified DSDecmp license determination; do not erase the attribution or infer an additional license grant from it.

## Native ABI research

The follower runtime credits native layouts/function names researched from:
- https://github.com/fuddlesworth/pokebw2 — repository identifies GNU GPL v3.0, including symbol names imported from swan.
- https://github.com/ds-pokemon-hacking/swan — repository identifies GPL-3.0 and describes generated interface headers and external symbol databases.

Bundled reference: `dist/mods/native_followers/source/src/follower_runtime.c`.
These are research-source acknowledgments, not a claim that an official game engine was copied into the project or that upstream maintainers can license third-party game content. Exact incorporated material, revision, and applicable licensing scope remain to be reconciled before public distribution.

## Project sources and game material

Project C/assembly, recipes, and editable sources have separate provenance recorded in `AUDIT_CODE_PROVENANCE.md`. No blanket project license is asserted here. Native game resources must continue to come from the user's local verified inputs; a local-input design is not by itself legal clearance for the project or its output.


## Recovered research-record clarification

Recovered project records pin pokebw2 to `e3a896c8e870a84bd9ddf701e9837405db0db044` and swan to `4324f73a7659353a21bf4c523905c5d09cf6a066`. Their recovered GPL3 license texts are byte-identical to `dist/converter/LICENSE-GPL-3.0.txt`. These are historical research references, not verified exact provenance for every distributed binary. Recovered vendor ndspy identifies version 4.2.0.

The private research archive also includes DSPRE AGPL3 references and records for Pokemon-DS-Map-Studio and pokeheartgold without a detected license. No claim is made here that their code is incorporated into the shipped site; investigate actual reuse before assigning license obligations or asserting clearance. See the audit's follow-up section for pins and hashes.