> Cinder 0.1.0 documentation: Third-party notices
> Canonical page: https://cinder.ash10.dev/docs/third-party-notices/ · Source: `THIRD_PARTY_NOTICES.md` in the engine repository (engine commit 47c9352, imported 2026-11-09)
> Index of every page for agents: https://cinder.ash10.dev/llms.txt

# Third-party notices

Every dependency is vendored as a git submodule under `third_party/` at the exact ref below and built
from source by `native/`. Licence texts are in each submodule at the path given. All licences are
permissive; no copyleft code is linked into Cinder.

| Component | Path | Pinned ref | Commit | Licence | Licence file |
|---|---|---|---|---|---|
| wgpu-native | `third_party/wgpu-native` | `v29.0.1.1` | `589e6ca` | MIT OR Apache-2.0 | `LICENSE.MIT`, `LICENSE.APACHE` |
| webgpu-headers (nested in wgpu-native) | `third_party/wgpu-native/ffi/webgpu-headers` | as pinned by wgpu-native | `673658b` | BSD-3-Clause | `LICENSE` |
| SDL3 | `third_party/SDL` | `release-3.4.20` | `f00dc91` | zlib | `LICENSE.txt` |
| joltc (Jolt Physics C API) | `third_party/joltc` | commit `2bbcf73b1bec` | `2bbcf73` | MIT | `LICENSE` |
| Jolt Physics | `third_party/JoltPhysics` | `v5.6.0` (the tag joltc `2bbcf73` fetches by default) | `e77f175` | MIT | `LICENSE` |
| cgltf | `third_party/cgltf` | `v1.15` | `360db1a` | MIT | `LICENSE` |
| stb (stb_image, stb_image_write) | `third_party/stb` | commit `4e9b368bfc07` | `4e9b368` | MIT OR Public Domain (Unlicense) | `LICENSE` |
| KTX-Software (libktx, Basis Universal) | `third_party/KTX-Software` | `v4.4.2` | `4d6fc70` | Apache-2.0 (libktx); bundled parts under the licences in `LICENSES/` | `LICENSE.md`, `LICENSES/` |
| meshoptimizer | `third_party/meshoptimizer` | `v1.3` | `9e1f07b` | MIT | `LICENSE.md` |
| MikkTSpace | `third_party/MikkTSpace` | commit `3e895b49d05e` | `3e895b4` | zlib (header of `mikktspace.c`) | `mikktspace.c` |
| miniaudio | `third_party/miniaudio` | `0.11.26` | `877ea4a` | MIT-0 OR Public Domain (Unlicense) | `LICENSE` |
| Dear ImGui (docking) | `third_party/imgui` | `v1.93.0-docking` | `b916186` | MIT | `LICENSE.txt` |
| Dear Bindings (dcimgui generator) | `third_party/dear_bindings` | `v0.27` | `67ede41` | MIT | `LICENSE.txt` |
| Tracy | `third_party/tracy` | `v0.15.0` | `f2a4f25` | BSD-3-Clause | `LICENSE` |
| flecs (benchmark comparison only, not shipped) | `third_party/flecs` | `v4.2.0` | `6566d4b` | MIT | `LICENSE` |

## Tools (not linked into the engine)

| Tool | Version | Licence |
|---|---|---|
| Mojo compiler and stdlib | 1.2.0 | Modular's Mojo licence (compiler), Apache-2.0 with LLVM exceptions (stdlib) |
| pixi | v0.63.2 | BSD-3-Clause |
| Rust toolchain (builds wgpu-native) | 1.93.0 | MIT OR Apache-2.0 |
| mojo-bindgen | see ADR-0005 | MIT |
| ply (dear_bindings dependency) | 3.11 | BSD-3-Clause |

## Assets

Sample and test assets are CC0 or CC-BY and are listed with attribution in `assets/ATTRIBUTION.md` once
added (Phase 4 onwards). Khronos glTF-Sample-Assets are used under their per-model licences.