MostlyText 1.0 dependency source materials — no app download

MostlyText 1.0 dependency source materials — no app download

This source-only release distributes prepared corresponding-source material and third-party notices for dependencies planned for MostlyText 1.0. It is not a MostlyText 1.0 application release, signed build, notarized download, approval of the outstanding licence questions, or a claim that the app is ready for 1.0. There is no MostlyText app binary in the uploaded assets.

The tag points at the repository's existing master commit 4aa46bfa6b91bf1c1d218b9b1f67480312f66396 only as the GitHub release delivery anchor. GitHub's automatically offered repository ZIP/tar snapshots are not the dependency corresponding-source packages. Use the specifically named assets below. The prepared assets were checked against a separate, unmerged local app candidate e2434fab657df64b4742282218bfd955c79281c3; that app candidate has not been published by this release.

• d2-source-review-bundle.tar.gz (SHA-256 4c8d20eb921caa6186a09bb99256fd1dc91146d0d050cf03bed8644c1192abc7): D2 0.1.33 npm/source inputs, 16 pinned Go module sources and licences, the Chroma Liberation Mono 2.1.5 correction, browser patch, corrected renderer bytes, and manifest.
• viz-graphviz-source-review.tar.gz (SHA-256 cf06fe21fab914d269e395f1b1ecb5157bc379c6c64904d07af5eece6d46ec2e): Viz.js 3.30.0, Graphviz 16.0.0 and Expat 2.8.4 inputs, build records, nested notices, and manifest.
• chroma-v2-font.patch, d2-browser.patch, d2-font-corrected-offer-manifest.json, and viz-graphviz-offer-manifest.json: standalone review aids; the patches and manifests also correspond to material in the archives.
• THIRD_PARTY_NOTICES.md, sbom.cdx.json, and SHA256SUMS: the notices, component inventory and SHA-256 digests for the named assets at this preparation checkpoint.

The npm archives inside the bundles contain compiled renderer JavaScript/WebAssembly; “source-only” means that no MostlyText application binary is being published. Source-offer completeness, remaining Mermaid and Viz/D2 attribution, final signed-app correspondence, and the canonical mostlytext.app/opensource/1.0.0/ pages still require their own checks before an application release. Files in this source release are immutable; a later correction must use a new filename and digest rather than overwrite these assets.

MostlyText alpha 1 — MacDown 2 source build

MostlyText alpha 1 — MacDown 2 source build

An early source build for people who want to try the app and report problems.
The app still opens as MacDown 2; the transition to MostlyText is on the
roadmap. There are no prebuilt app downloads in this alpha.

Build from source

Requirements: macOS 26 or later, Apple Silicon for these verified commands,
Xcode 26, and XcodeGen.

git clone --branch v0.1.0-alpha.1 --single-branch https://github.com/Joncallim/macdown_2.git
cd macdown_2/MacDown2
xcodegen generate
scripts/pin-xcode-package-versions.sh
xcodebuild \
  -project MacDown2.xcodeproj \
  -scheme MacDown2 \
  -configuration Release \
  -destination 'platform=macOS,arch=arm64' \
  -onlyUsePackageVersionsFromResolvedFile \
  -derivedDataPath build/DerivedData \
  CODE_SIGNING_ALLOWED=NO \
  build

The unsigned local build is at
build/DerivedData/Build/Products/Release/MacDown2.app.

Known limitations

• Use copies of documents while testing.
• Syntax-highlighting correctness and larger-file responsiveness remain under
  investigation: #459,
  #203, and
  #472.
• Experimental background-reparse work is excluded from this alpha.
• Local builds are unsigned and there are no automatic updates. Signed
  downloads are planned through App Store and direct distribution.

Verification

This prerelease tags source commit
268bee5f588dc8c8a19eb3b7009040f8c182585a.
An isolated unsigned arm64 Release build completed for that source. This note
does not claim a fresh full test-suite pass.

Third-party source and notices

MostlyText-v0.1.0-alpha.1-corresponding-source.tar.gz provides
overinclusive pinned source and notice coverage for the bundled D2, Mermaid,
and Viz.js/Graphviz material. It is evidence for those bundled components, not
a blanket legal certification. SHA-256:

b082aa2e9328e7feebfa83b0e8f2db4516e9aee497e3bc7a4379619a9bb1c759

Feedback

Please report reproducible problems at
https://github.com/Joncallim/macdown_2/issues with the tag, macOS version,
Xcode version, and steps to reproduce. Do not include personal documents or
secrets.