← Back to Waveforge · v1.4.0
Open-Source Notices & Binary Compliance
Waveforge v1.4.0 runs its ITU-R BS.1770-4 loudness analysis, 4× polyphase true-peak detection, WAV PCM rendering, and lossless MP3 global_gain frame adjustment natively in Rust crates. Below is our Software Bill of Materials (SBOM), upstream copyright attributions, and formal LGPL written offer policy.
1. Process-Isolated Multimedia Encoding
Waveforge does not statically link against or embed FFmpeg libraries (libavcodec, libavformat, libavutil), and official Waveforge installers do not redistribute GPL-licensed FFmpeg binaries. When exporting FLAC, AIFF, M4A/AAC, or Match Target re-encoded MP3 outputs, Waveforge spawns the user's installed ffmpeg CLI strictly as an isolated OS subprocess over standard I/O pipes (stdin / stdout / stderr). WAV PCM export and lossless MP3 FrameGain run completely natively with zero external binary dependencies.
2. Core Rust & Frontend Dependencies
| Component | License | Role in Waveforge |
|---|---|---|
hound 3.5.1 | Apache-2.0 | Pure-Rust WAV PCM reader & 16/24/32-bit writer |
symphonia 0.5.5 | MPL-2.0 | Pure-Rust audio container decoding & demuxing |
ed25519-dalek 2.x | BSD-3-Clause | Offline Ed25519 workstation licence signature verification |
sha2 / hex / tempfile | MIT / Apache-2.0 | Source SHA-256 verification & atomic staging |
serde / serde_json / thiserror | MIT / Apache-2.0 | Typed DSP & IPC contracts |
tauri 2.x | MIT / Apache-2.0 | Cross-platform native desktop window & IPC shell |
react / lucide-react / vite | MIT / ISC | Desktop workstation interface |
3. LGPL v2.1 / v3 Formal Written Offer
Should any authorized Waveforge distribution package bundle an LGPL-compiled multimedia utility component under LGPL v2.1 Section 6 or LGPL v3 Section 4, Waveforge maintains a formal written offer valid for at least three (3) years from binary distribution to supply complete corresponding machine-readable source code and exact build configuration scripts upon request:
Compliance Contact: compliance@waveforge-app.com Canonical Compliance URL: https://waveforge-app.com/opensource/ Required Reference: LGPL Written Offer / Binary Provenance (Waveforge v1.4.0)