# Third-party components

- libvterm 0.3.3, Paul Evans, MIT. Full licence and source in `third_party/libvterm-0.3.3/`. Lantern patch (marked "Lantern patch" in `src/state.c`): with left/right margins (DECLRMM), text wraps at the right margin to the left margin, and carriage return goes to the left margin.
- FreeRDP 3, Apache-2.0, https://www.freerdp.com/ . Dynamically linked for RDP sessions (Linux: the distribution's FreeRDP 3 packages). Windows packages bundle FreeRDP 3.32.2 built by `scripts/build-windows-freerdp.sh` (pinned with its SHA256 in `scripts/dependencies.json`); its licence is in `licenses/FreeRDP-Apache-2.0.txt`.
- Qt 6 (Core, GUI, Widgets, Network, SerialPort, PrintSupport): dynamically linked under the applicable LGPLv3/commercial terms. Qt source is available from https://download.qt.io/archive/qt/ . Users may replace compatible Qt shared libraries. Qt licences are included with bundled Windows libraries.
- libssh 0.11, LGPL-2.1, https://www.libssh.org/ . Dynamically linked for the built-in SSH engine (Linux: the distribution's libssh package). Users may replace the shared library with a compatible build.
- OpenSSH client tools: external/bundled executables under their BSD-style licences. https://www.openssh.com/ . No custom cryptography is implemented in the application.
- Python 3: optional external scripting interpreter under the Python Software Foundation licence. https://www.python.org/ .

Build scripts pin downloaded toolchain versions. First-party source is supplied to permit rebuilding and relinking the application.

Windows dependency packages are pinned with SHA256 checksums in `scripts/runtime-downloads.json`. The bundled fallback OpenSSH client is Microsoft's 10.4.0.0p1 Preview, with its upstream preview status preserved. System OpenSSH is preferred when available. The Windows Python runtime is 3.14.10.

Vulkan headers are included for portable Qt build configuration under their upstream Apache-2.0/MIT terms; see `third_party/vulkan-headers/COPYRIGHT` and per-file notices. They do not add a Vulkan rendering dependency to the terminal widget. Qt source for the packaged Windows version is available at https://download.qt.io/archive/qt/6.8/6.8.3/submodules/ .

- Lua 5.4.9, Lua.org / PUC-Rio, MIT licence. Vendored source and upstream notices are in `third_party/lua-5.4.9/`; licence text is also in `third_party/licenses/Lua-MIT.txt`. The Lua worker links this runtime statically and uses the existing authenticated local application API.
- Built-in VGA font ("Use the built-in VGA font"): 8×16 glyph bitmaps from the console-setup VGA16 console fonts, derived from u_vga16.bdf © 2000, 2001 Dmitry Bolkhovityanov under an MIT-style licence (console-setup states that console fonts are public domain). Two glyphs (► ◄) were drawn for Lantern Terminal. Licence text: `third_party/licenses/VGA-font-u_vga16.txt`; generator: `scripts/make-vga-font.py`.