# Third-party components

New project source is licensed under `LICENSE`. External dependencies retain their own licences.
The Gradle build references Kotlin, Kotlin coroutines, AndroidX/Compose, Android platform tooling and
JUnit. The source archive does not vendor those runtime/build binaries, a LibreOffice/Collabora
engine, proprietary fonts, SDK files or signing keys.

The bootstrap retrieves the official Gradle wrapper JAR and distribution and checks their pinned
SHA-256 digests. Retain upstream notices if you vendor or redistribute build tooling.

Before binary distribution, generate an actual resolved dependency/licence inventory and include
all required third-party notices. Do not interpret this source-level note as a completed binary
licence audit. Any future Office native engine or font bundle needs its own review.