# Klipros name and attribution review Reviewed: 2026-10-26. Scope: 28 linked technology references on the landing page, not every transitive dependency or legal clearance for distribution. ## Decision and limits Use factual project names and upstream links to identify technical components. Do not describe upstream authors as sponsors, partners, customers or endorsers. No upstream logos or personal author portraits are used in this section. Optional models are identified separately from core application components. Required copyright/license/NOTICE material remains in third-party notices; removing a promotional reference is not permission to remove required notices. No rights-holder removal request was supplied for this task. That is not proof that no request or additional policy exists elsewhere. Python and TAURI carry registered-mark symbols and owner legends based on published policies. No blanket trademark approval is asserted. Dedicated trademark policies for the other projects have not all been located or checked; software licenses alone do not authorize branding. A follow-up successfully retrieved the Rust policy: factual statements that software is written in Rust are allowed without implying affiliation or endorsement, including commercial uses. The product name remains Klipros. ## Per-component review Evidence means local metadata and preserved texts in `inventory.json` and `THIRD-PARTY-NOTICES.txt`, unless a policy or model snapshot is specified. An identified license family is not proof of exact shipped artifact terms. | Component | Evidence reviewed | Name/attribution decision and remaining limits | | --- | --- | --- | | FFmpeg & FFprobe | Local binaries: GPL-3.0-or-later | Plain technical reference; retain notices; exact corresponding source unresolved. | | yt-dlp | Python metadata: Unlicense; extras have separate terms | Plain project reference, no endorsement; review bundled extras separately. | | Whisper | Upstream MIT reference | Retain applicable code copyright/license; verify downloaded weights separately. | | faster-whisper | Installed MIT metadata/text | Factual reference; retain copyright/license. | | CTranslate2 | Installed metadata and tagged MIT reference | Factual reference; retain required notices. | | OpenCV | Apache-2.0 package metadata | Retain applicable notices; no trademark grant inferred; Haar and YuNet reviewed separately. | | RapidOCR | Apache-2.0 package metadata | Plain reference; preserve notices; models require separate review. | | ONNX Runtime | Installed MIT metadata/text | Plain reference; retain copyright/license and bundled-library notices. | | NumPy | BSD-3-Clause and wheel third-party terms | Do not use developer/contributor names to endorse or promote Klipros; retain legal notices. | | Pillow | Installed MIT-CMU metadata/text | Plain reference; retain copyright/permission and bundled notices. | | Tauri & plugins | MIT OR Apache-2.0 metadata; Tauri trademark policy | Display TAURI with registered mark and owner legend; factual relationship only, no logo; plugins have individual evidence. | | React | Installed MIT metadata/text | Plain reference; preserve copyright/license; no sponsorship implication. | | node-qrcode | Installed MIT metadata/text | Plain reference; preserve copyright/license. | | TypeScript | Installed Apache-2.0 metadata/text | Plain reference; preserve applicable NOTICE; no branding grant inferred. | | Vite | Installed MIT metadata/text | Plain reference; retain copyright/license and dependency notices. | | Tailwind CSS | Installed MIT metadata/text | Plain reference; retain copyright/license; review tooling separately. | | Python | PSF trademark policy | Display registered mark and PSF owner legend; identify the language, not a partnership; runtime notices need separate review. | | Rust | Rust Foundation trademark policy retrieved on follow-up | Factual written-in-Rust reference permitted by the policy; no logo, derivative product name or endorsement implication. | | PyInstaller | GPL with packaging exception | Preserve exact exception/notices; no exception inferred for unrelated libraries. | | YuNet | Pinned model-specific MIT reference | Plain model reference; preserve model notices; do not substitute OpenCV's main license. | | Silero VAD | Upstream MIT reference; mutable model URL | Plain model reference; exact hash/revision mapping verified, with MIT text at that revision; runtime URL remains mutable. | | WeSpeaker | Provider repository declaration: CC-BY-4.0 | Preserve applicable supplied attribution, source/license and modification information. Artifact hash/revision mapping verified; full attribution and other distribution obligations remain open; honor section 3(a)(3) requests. | | MiniLM (Xenova) | Provider snapshot: no license declaration | Neutral identifier is not clearance; resolve conversion, weights and tokenizer terms. | | Indonesian embedding (asmud) | Provider repository declaration: MIT | Plain repository/author-handle reference, not endorsement; weight/tokenizer mapping verified; base-model license chain and missing notices unresolved. | | Deno | Tagged MIT reference | Plain runtime reference; preserve copyright/license; collect bundled dependency notices. | | bgutil POT provider | Tagged GPLv3 reference | Plain reference; retain notices; source and embedded-plugin obligations unresolved. | | Manrope | Bundled SIL OFL and upstream OFL reference | Retain OFL/copyright; follow actual Reserved Font Name terms for modifications; no author endorsement of modified fonts. | | Space Grotesk | Bundled SIL OFL text | Retain OFL/copyright; follow actual Reserved Font Name declarations for modifications; no author endorsement of modified fonts. | ## Rights-holder requests Contact: founder@klipros.sbs, the existing public business contact. This route is published, but mailbox delivery was not tested. 1. Ask for the affected work, exact credit, request scope, relevant license or policy, and evidence of licensor/authorized-holder authority. Do not request identity documents, passwords or account secrets by default. 2. Distinguish optional public thanks/branding from required attribution. CC-BY-4.0 section 3(a)(3) requires removing information covered by section 3(a)(1)(A) on the licensor's request to the extent reasonably practicable. This does not mean deleting every license notice or source link. 3. Adjust affected references and notices under the actual terms, retain other required legal information, and record scope/decision without publishing private requester data. Clarify conflicts or uncertain authority before redistributing. No author name has been removed speculatively in this task. ## Policy sources and verification gaps `ATTRIBUTION-POLICY-SOURCES.json` records retrieval dates and SHA-256 hashes of policy responses, without redistributing their full web-page text. `MODEL-SOURCES.json` records repository declarations, not artifact clearance. - Python: https://www.python.org/psf/trademarks/ (word-mark use, circle-R and owner acknowledgment). - Tauri: https://tauri.app/about/trademark/ (truthful relationship, marking and foot-of-page legend). - NumPy: https://raw.githubusercontent.com/numpy/numpy/main/LICENSE.txt (BSD nonendorsement and notice retention). - Apache 2.0: https://www.apache.org/licenses/LICENSE-2.0 (sections 4 and 6). - CC BY 4.0 canonical: https://creativecommons.org/licenses/by/4.0/legalcode.en (direct retrieval blocked by HTTP 403). - CC BY 4.0 text checked via SPDX: https://raw.githubusercontent.com/spdx/license-list-data/main/text/CC-BY-4.0.txt (section 3(a)(3); standardized mirror, not a fresh canonical fetch). - Rust: https://rustfoundation.org/policy/rust-trademark-policy/ (factual language references and no implication of endorsement; successful follow-up retrieval). - Manrope OFL: https://raw.githubusercontent.com/googlefonts/manrope/master/OFL.txt (conditions 2-5; also consult bundled font licenses). Mutable upstream references are dated review evidence, not pinned release grants. Do not infer legal clearance, rights-holder approval or production deployment. GPL/source, proprietary GPU and model-license findings in `LICENSE-AUDIT.md` remain unresolved. License-required names/texts are not erased to satisfy a blanket no-name rule that has not actually been requested by a rights holder.