Skip to content

MostlyText 1.0 dependency source materials — no app download

Pre-release
Pre-release

Choose a tag to compare

View all tags
@Joncallim Joncallim released this 24 Oct 10:17
v1.0.0-source
4aa46bf
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

MostlyText 1.0 dependency source materials — no app download

This source-only release distributes prepared corresponding-source material and third-party notices for dependencies planned for MostlyText 1.0. It is not a MostlyText 1.0 application release, signed build, notarized download, approval of the outstanding licence questions, or a claim that the app is ready for 1.0. There is no MostlyText app binary in the uploaded assets.

The tag points at the repository's existing master commit 4aa46bfa6b91bf1c1d218b9b1f67480312f66396 only as the GitHub release delivery anchor. GitHub's automatically offered repository ZIP/tar snapshots are not the dependency corresponding-source packages. Use the specifically named assets below. The prepared assets were checked against a separate, unmerged local app candidate e2434fab657df64b4742282218bfd955c79281c3; that app candidate has not been published by this release.

  • d2-source-review-bundle.tar.gz (SHA-256 4c8d20eb921caa6186a09bb99256fd1dc91146d0d050cf03bed8644c1192abc7): D2 0.1.33 npm/source inputs, 16 pinned Go module sources and licences, the Chroma Liberation Mono 2.1.5 correction, browser patch, corrected renderer bytes, and manifest.
  • viz-graphviz-source-review.tar.gz (SHA-256 cf06fe21fab914d269e395f1b1ecb5157bc379c6c64904d07af5eece6d46ec2e): Viz.js 3.30.0, Graphviz 16.0.0 and Expat 2.8.4 inputs, build records, nested notices, and manifest.
  • chroma-v2-font.patch, d2-browser.patch, d2-font-corrected-offer-manifest.json, and viz-graphviz-offer-manifest.json: standalone review aids; the patches and manifests also correspond to material in the archives.
  • THIRD_PARTY_NOTICES.md, sbom.cdx.json, and SHA256SUMS: the notices, component inventory and SHA-256 digests for the named assets at this preparation checkpoint.

The npm archives inside the bundles contain compiled renderer JavaScript/WebAssembly; “source-only” means that no MostlyText application binary is being published. Source-offer completeness, remaining Mermaid and Viz/D2 attribution, final signed-app correspondence, and the canonical mostlytext.app/opensource/1.0.0/ pages still require their own checks before an application release. Files in this source release are immutable; a later correction must use a new filename and digest rather than overwrite these assets.

Assets 11
Loading