SafeFileManager 1.3.0 — third-party components

The SFM EULA governs SafeFileManager itself. It does not restrict rights granted
by the separate licenses of Java, native libraries, installer components or the
Docker base. Those licenses take precedence for their respective components.

Java 17: BellSoft Liberica 17.0.21.0.3+5.
Java 25: Eclipse Temurin 25.0.5+8.
OpenJDK uses GPLv2 with the Classpath Exception and additional component notices.
Their legal directories are retained in the private runtimes. Full vendor source
archives are offered alongside the downloads in sources/.

AppImage: type2-runtime fedfad51acc2860b2916a1eef32ba4a500ff31ef (MIT),
libfuse 3.15.0 (LGPLv2), squashfuse 0.5.2 (BSD); runtime source archive includes
build scripts and the libfuse patch. Their corresponding sources are in sources/.
The runtime also includes musl, zstd and zlib under their respective notices;
use --appimage-help for the embedded runtime notices.

AppImage/Snap/Docker desktop dependencies and the pinned Ubuntu Docker base:
copyright/license notices remain in usr/share/doc and the image filesystem.
Exact binary/source versions are in third-party-packages.json. Ubuntu source
DSCs, original source archives and distribution patches are in sources/ubuntu/
and sources/debian/ (the bundled fontconfig comes from Debian).
The DSC SHA-256 lists bind those files. Source URLs and local download hashes
are recorded in sources/index.json. No SFM Java source is included.

NSIS installer components retain their upstream license notices:
https://nsis.sourceforge.io/License
SFM's Java runtimes are private application dependencies, not system-wide Java.

Source companions: https://mindbytez.com/sfm/releases/1.3.0/sources/