# Odyssey Home DVR: Corresponding Source and Notices These assets accompany the unsigned beta binaries. They supply source and notice materials for the exact redistributed versions; they do not certify legal or patent clearance or authorize public publication. ## Required Adjacent Downloads - OdysseyHomeDVR-FFmpeg-9.0.1-CorrespondingSource.tar.gz: the authenticated full FFmpeg 9.0.1 upstream archive, signature evidence, unchanged-source statement, original build scripts, per-target configure/generated configuration, compiler evidence, runtime provenance and license texts for Linux, Windows and Mac. - OdysseyHomeDVR-ThirdParty-CorrespondingSource.tar.gz: the above FFmpeg materials, full Node 24.20.0 source, all 97 installed production npm package tarballs and exact installed source (including PM2 AGPL-3.0 and mpegts.js LGPL-2.1), all 65 Debian source packages for the shipped Linux libraries, Windows compiler runtime components and Docker base, plus their patches, build rules and notices. - OdysseyHomeDVR-ThirdParty-NOTICES.txt: consolidated dependency and runtime notices. - SOURCE-REDISTRIBUTION.json: artifact hashes, precise package/version/source mapping, verification results and the remaining publication work. Publish these downloads at the same project-specific download location as the installers, with working source links beside every relevant binary download. Keep their names, checksums, notices and version mapping available. The earlier small Odyssey source snapshot describes the application payload; it is not a substitute for these third-party source archives. ## FFmpeg Configuration and Rebuilding The cached runtime builds use FFmpeg 9.0.1 from upstream source archive SHA256 cf38e0e28c7e5605942c4a77755349b0145804a397af37eb1fb4c77cb237f635. GPL and nonfree components are disabled and version3 is enabled, selecting LGPLv3 for these builds. FFmpeg and FFprobe are separate executable programs invoked by the DVR; Odyssey's proprietary program is not linked into the FFmpeg executables. The FFmpeg executables statically include FFmpeg's own libraries. Their complete source and rebuild materials are supplied. Linux additionally links the documented system libraries; copies distributed with the runtime have matching Debian source packages, including Debian patches. Windows uses Schannel and the MinGW compiler runtime. Mac uses Apple's system Secure Transport frameworks, not bundled copies of Apple's operating-system libraries. Extract ffmpeg/ffmpeg-9.0.1.tar.xz. The Linux/Windows build script is ffmpeg/build-scripts/desktop/build-ffmpeg.sh. Its documented disposable-builder layout is /inputs for the upstream source archive and /work for output; configure lines are also recorded in runtime-evidence/*/source/config.mak. The matching Debian compiler/source versions are in ffmpeg/build-packages.tsv and DEBIAN-PACKAGES.json. The Mac script is ffmpeg/build-scripts/desktop/macos/build-ffmpeg.sh; it accepts the absolute upstream archive and a new absolute output directory on a Mac with Xcode command-line tools. Mac compiler/configuration evidence is in runtime-evidence/darwin-arm64. No upstream FFmpeg source patch is asserted. The Linux/Windows build source tree was compared to the authenticated upstream extraction. Mac source provenance is the preserved authenticated archive receipt and build procedure; the old Mac build host's full source tree was not available for a fresh directory diff. Generated configuration files describe the target-specific builds. Bit-for-bit rebuilds across different SDK/compiler/host versions are not claimed. ## Other Components Node source is node/node-v24.20.0.tar.xz, checked against the cached signed official SHASUMS256 manifest. The archive includes Node's bundled third-party dependency sources and licenses. The base Docker image's Node version was checked as 24.20.0. npm/upstream-tarballs contains exact registry archives checked against SHA512 integrity pins in npm/package-lock.json. npm-installed-source contains the exact distributed files. npm/THIRD_PARTY_LICENSES.txt and license-supplements preserve publisher declarations, copyright/license evidence and explicitly identified MIT supplements. There is no claim that a canonical MIT supplement was recovered as the publisher's own missing LICENSE file. PM2 is AGPL-3.0; keep its notice and source available. mpegts.js includes its preferred source and webpack build configuration. debian contains complete .dsc/orig/debian-diff archives at exact source versions, not just links or binary packages. Use dpkg-source -x to unpack each source with its Debian patches/build rules. DSC-VERIFICATION.json checks every source member's SHA256/size. APT's authenticated source index evidence is retained in debian-indexes. DEBIAN-PACKAGES.json maps installed binary packages, including binary-only rebuild suffixes, to the correct source versions. Docker's installed documentation/common licenses, Yarn license and upstream Node license are also preserved in docker-installed-notices.tar; those files came from the exact image. ## Publication Review Still Needed The parent must validate the final hosted binary/source links together, retain notices and license texts, and ensure any download terms do not override the rights granted by third-party licenses. Runtime replacement, modification and rebuilding remain supported source-delivery matters; checksum verification is not a license restriction. Do not claim that this source collection certifies all licensing, trademark, patent or distribution obligations. Manual target-device QA and any such review are separate from the artifact/hash checks. Reference: https://ffmpeg.org/legal.html and the complete bundled LGPL/GPL/AGPL texts.