Third-party notices: Bollawax image `boll` (bollawax-boll)

*Generated by tools/build_notices.py from bollawax.toml (repo mode); do not edit by hand: change the manifest or the curated tables, then run python3 tools/build_notices.py write. This page is not legal advice.*

Bollawax itself (the band, the judges, the servers and every image Pop Boll publishes) is all rights reserved. The images Pop Boll publishes for devices run under the Bollawax Device Licence: LICENSES/BOLLAWAX-DEVICE-LICENCE.md, published at https://popboll.com/device-licence. The components below are not Pop Boll's. Each keeps its own licence, listed here; nothing in the Device Licence takes away a right those licences give you. The repository's own open layers (the hal, the routines, the specifications, the hardware reference designs) are described in LICENSE.md.

LGPL components keep their relinking rights

These components are licensed under the GNU Lesser General Public License: fluidsynth. Pop Boll ships them unmodified, as the Debian package or the Python wheel named below. You keep every right the LGPL gives you, including the right to modify these libraries and to relink or replace them with your own version; the Bollawax Device Licence §8 says so, and its §3 (do not modify an Image) does not limit those rights. Their source is available from Debian (apt-get source <package>, https://sources.debian.org) and from PyPI (https://pypi.org) for the versions listed.

The base image

Component	Version	Licence	Note
CPython	3.12	PSF-2.0	the official `python:3.12-slim` image
pip	as in the base image	MIT	installs the Python distributions below
Debian base system	as in the base image	various free licences	listed package by package by the in-image mode; each package's terms are in /usr/share/doc/<package>/copyright

Debian packages

Package	Version	Licence	What it is
alsa-utils	Debian stable, as installed	GPL-2.0-or-later	ALSA utilities (aplay, amixer)
bluez	Debian stable, as installed	GPL-2.0-or-later	BlueZ, the Linux Bluetooth stack (bluetoothctl)
faad	Debian stable, as installed	GPL-2.0-or-later	FAAD2, the AAC decoder (the faad program and libfaad2)
fluidsynth	Debian stable, as installed	LGPL-2.1-or-later	FluidSynth, the SoundFont synthesiser (and libfluidsynth)
libasound2-plugin-bluez	Debian stable, as installed	MIT	bluez-alsa's ALSA plugin (the bluealsa PCM)
sqlite3	Debian stable, as installed	blessing (public domain)	SQLite (the sqlite3 shell)

Python distributions

Distribution	Version	Licence
mido	1.3.3	MIT
numpy	2.4.6	BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0; the Linux wheels also bundle OpenBLAS (BSD-3-Clause) and libgfortran (GPL-3.0-or-later WITH GCC-exception-3.1)
packaging	25.0	Apache-2.0 OR BSD-2-Clause
PyYAML	6.0.3	MIT

Files shipped as they are

File	Component	Version	Licence
`server/static/vendor/gifenc-1.0.3.js`	gifenc	1.0.3	MIT
`server/static/vendor/mp4-muxer-5.2.2.js`	mp4-muxer	5.2.2	MIT
`server/static/vendor/webm-muxer-5.1.4.js`	webm-muxer	5.1.4	MIT
`pompa/web/logo.png`	the Pompa logo, by Graham Smith: adapted from the photograph "Rufous Sabrewing JCB.jpg" by Joseph C Boone (https://commons.wikimedia.org/wiki/File:Rufous_Sabrewing_JCB.jpg), redrawn as an illustration, recoloured, with the word POMPA added; licence text at https://creativecommons.org/licenses/by-sa/4.0/	2026-11-10	CC-BY-SA-4.0

What this list does not cover

The dependencies apt installs alongside the packages above (for example libfluidsynth's own libraries). The in-image mode lists every Debian package with its copyright file.
Python distributions pulled in as dependencies of the pins above and not pinned themselves. The in-image mode lists every installed distribution.
SoundFonts: none ships in the image. A Boll downloads them at run time (download_soundfonts.py), and each keeps its own licence.