# Browser FFmpeg runtime — third-party notice

This product distributes `@ffmpeg/core@0.12.10` (JS + WebAssembly) to the browser
for local-only chroma-key export and alpha detection. Those files are served from
`/ffmpeg/ffmpeg-core.js` and `/ffmpeg/ffmpeg-core.wasm`.

## Licenses

- **`@ffmpeg/core` package metadata:** `GPL-2.0-or-later`
- **FFmpeg / GPL text shipped with this product:** see `LICENSE.GPL-2.0` in this
  directory and at `/ffmpeg/LICENSE.GPL-2.0` after build sync
- **ffmpeg.wasm JavaScript wrapper repository license:** MIT — see
  `LICENSE.ffmpegwasm-wrapper.MIT`

Serving the GPL-marked core to browsers is intentional for the local C / D tools.
No user media processed by those tools is uploaded to the server.

## Exact binary identity (release freeze)

Synced from the npm `@ffmpeg/core@0.12.10` UMD artifacts by
`scripts/sync-ffmpeg-core.mjs`.

| Artifact | SHA-256 |
|---|---|
| `ffmpeg-core.js` | `b266ab5b952555881dd6310663986994a182acb2b7ff25cf10a25f7a37ac2b21` |
| `ffmpeg-core.wasm` | `9f57947a5bd530d8f00c5b3f2cb2a3492faa7e5d823315342d6a8656d0a6b7b7` |

### Production delivery note

Cloudflare Workers static assets reject files larger than 25 MiB. The pinned
`ffmpeg-core.wasm` is ~31 MiB, so production builds set `FFMPEG_INCLUDE_WASM=0`
and load the **same** npm `0.12.10` UMD wasm from:

`https://cdn.jsdelivr.net/npm/@ffmpeg/core@0.12.10/dist/umd/ffmpeg-core.wasm`

via `NEXT_PUBLIC_FFMPEG_WASM_URL`. Same-origin `/ffmpeg/` still serves
`ffmpeg-core.js`, `NOTICE.md`, and the GPL/MIT license texts. User media for
C / D tools remains local-only; only the runtime binary is fetched.

## Corresponding source / build provenance

Corresponding source and build scripts for this core version are available from
the official `ffmpegwasm/ffmpeg.wasm` release that identifies core `0.12.10`:

- Release: `v12.15` (title: `RELEASE: v12.15 (main), v12.10 (core, core-mt)`)
- Tag commit: `71aa99d37c02a7b4c435275ca9ef50e612f6efa1`
- Source: https://github.com/ffmpegwasm/ffmpeg.wasm/tree/71aa99d37c02a7b4c435275ca9ef50e612f6efa1
- npm package: https://www.npmjs.com/package/@ffmpeg/core/v/0.12.10

If you received this product on a medium without network access, contact the
operator of this deployment and request the corresponding source for the
exact `@ffmpeg/core@0.12.10` build identified above.

## Owner decision

Recorded 2026-09-18: release owner confirmed full commercial ShipAny
entitlement and elected GPL compliance option **A** (ship license text +
corresponding-source notice with the browser core) for the complete four-tool
product release. See
`.qa/t18-release/T18-LICENSE-OWNER-DECISION-BRIEF-2026-09-18.md`.