PinnaPetta third-party software

Media engine
FFmpeg 8.0.3 (LGPL 2.1), LAME 3.100 (LGPL) libwebp 1.6.0 (BSD), and dav1d 1.5.4 (BSD) are built
from the upstream archives identified in sources.json, for both Apple silicon
and Intel. They ship as separate executables in PinnaPetta.app/Contents/Helpers.
FFmpeg is configured without GPL or non-free components, and its networking is
disabled.

PinnaPetta-ThirdPartySources.zip is published with every release. It contains
the exact upstream source archives, a SHA-256 manifest and the build script
used for these tools. To rebuild them on a Mac with Xcode installed, run:

    python3 Scripts/build-media-engine.py

The script verifies the archive hashes before extracting, then writes the
Universal tools to Resources/Tools. You may replace the executables in a local
copy of the app with your own builds. Modifying the bundle invalidates its
signature, so re-sign that local copy for your own use. Your rebuilds do not
replace the official signed and notarized release.

Software updates
Sparkle 2 (MIT license) provides software updates. See Sparkle-MIT.txt.

Link downloads use yt-dlp 2026.08.19 (https://github.com/yt-dlp/yt-dlp),
its official Universal macOS standalone distribution and bundled dependencies,
and QuickJS-NG 0.17.0 (https://github.com/quickjs-ng/quickjs), built for macOS 14.
See yt-dlp-Unlicense.txt, yt-dlp-ThirdParty.txt, QuickJS-MIT.txt and
download-sources.json. The official standalone yt-dlp executable contains
GPL-licensed third-party components; it is a separate command-line process.
PinnaPetta does not incorporate CornerCat code or artwork.
