SOURCLIENTThird-Party Notices
SourClient (launcher, game-side mod, and backend) interacts with, downloads, or bundles the third-party components listed below. "Bundled" means the component ships inside the SourClient installer/app image; "Downloaded on demand" means the launcher fetches it at install/first-run time from the vendor's official servers and it is never redistributed by us.
Last audited: 2026-07-11 (against package-windows.ps1, bundled-mods/, client-side/packaged-modpack/, and the launcher download services).
1. Components bundled in the SourClient distribution
| Component | What it is | License | Obligations | Verdict |
|---|---|---|---|---|
OpenJDK runtime (jlink image, Java 25.0.2) in runtime/ | Java runtime for the launcher, built with jlink from an Adoptium/Microsoft OpenJDK build | GPLv2 with Classpath Exception (Adoptium FAQ: "GNU General Public License, version 2 with the Classpath Exception"; free to "use, modify, and share") | Ship the license and notice files with the runtime. Already satisfied: the per-module notices are included at runtime/legal/ and ship inside the app image. Do not remove that folder. | OK to bundle |
Bebas Neue (font, launcher /fonts/ + game-side/.../assets/sourclient/fonts/) | Heading font (launcher + in-game) | SIL Open Font License 1.1 (distributed via Google Fonts) | Include a copy of the OFL with the font — satisfied 2026-07-15: LICENSE-BebasNeue.txt ships in both font folders. | OK to bundle |
Inter (font, launcher /fonts/ + game-side/.../assets/sourclient/fonts/) | Body font (launcher + in-game, 2026-07-15 swap) | SIL OFL 1.1 — license included (LICENSE-Inter.txt, both folders) | Keep the license file | OK to bundle |
| Basic (font, game-side only) | Former body font (retained for revert, unreferenced) | SIL OFL 1.1 — license included (LICENSE-Basic.txt) | Keep the license file, or delete the font | OK to bundle |
Lucide icons (10 rasterized PNGs, game-side/.../assets/sourclient/textures/ui/btn/) | UI button glyphs (heart, reset, pencil, layers, arrow-left, grid, download, plus, save) rasterized to white 64px PNGs from Lucide SVGs (2026-07-16) | ISC — license included (LICENSE-Lucide.txt in the same folder) | Keep the license file | OK to bundle |
SourClient-1.8.9.jar (bundled-mods/sour-forge-1.8.9/core/) | Our own game-side mod + own art (all sour-* textures verified original) | Proprietary — © sourama | — | Own code |
The bundled modpack folder (client-side/packaged-modpack/1.8.9/mods/) contains only SourClient-1.8.9.jar. No third-party mod jars are redistributed.
2. Components downloaded on demand from official sources (never redistributed)
| Component | Source the launcher uses | License / terms | Notes |
|---|---|---|---|
| Minecraft: Java Edition 1.8.9 (client jar, libraries, assets) | piston-meta.mojang.com version manifest → libraries.minecraft.net, resources.download.minecraft.net (see MinecraftManifestService.java, MinecraftRuntimeService.java) | Minecraft EULA: "you must not distribute anything we've made unless we specifically agree to it"; game downloads must "come from a source that we authorize" | Compliant: SourClient downloads from Mojang's own CDN and never rehosts game files. |
| Minecraft Forge 1.8.9 | maven.minecraftforge.net (see ForgeInstallerService.java) | LGPL 2.1 (Forge LICENSE.txt: "licensed under the terms of the LGPL 2.1"; "The LGPL is chosen specifically so that projects may depend on Forge features without being infected with its license") | Even redistribution would be permitted under LGPL 2.1 with source/notice obligations; downloading on demand avoids all of them. SourClient's mod merely depends on Forge (expressly non-infecting). |
| Eclipse Temurin JRE 8 (game runtime) | api.adoptium.net (see JavaRuntimeDownloadService.java) | GPLv2 + Classpath Exception (Adoptium FAQ) | Downloaded from Adoptium's official API. |
3. Components deliberately NOT distributed
| Component | Status | License basis | Verdict |
|---|---|---|---|
| OptiFine | The launcher does not ship OptiFine. BundledModpackService.java only copies "locally obtained OptiFine jars" that the user has placed in bundled-mods/<pack>/optifine/ themselves, and the generated modpack-info.txt instructs the user to obtain it locally. | OptiFine Copyright: the mod "may not be placed on any web site or otherwise distributed publicly without advance written permission"; use permitted only "in its unaltered, unedited form". Community guidance confirms modpack inclusion is not permitted (OptiDocs license page, sp614x issue #2982). | Never bundle. Keep the current user-supplied drop-in pattern, or point users at https://optifine.net/downloads. Do not add an auto-downloader that scrapes optifine.net without permission (their download flow is ad-supported; scraping it bypasses the author's revenue and has been treated as hostile by the author). |
| In-Game Account Switcher (IAS) | Not bundled (user-installed in their own instance). | LGPL-3.0 (The-Fireplace-Minecraft-Mods/In-Game-Account-Switcher) | If it is ever added to the bundled modpack, LGPL-3.0 permits redistribution with license text + source link. Until then, nothing to do. |
4. Backend (server-side only, not distributed to users)
| Component | License | Notes |
|---|---|---|
| Express (and its transitive deps) | MIT (per npm express) | Server-side use only; MIT imposes no obligations for network use. Keep package-lock.json for provenance. |
| Node.js | MIT-style Node license | Server-side use only. |
5. Reference material present in the repository but NOT in any distribution
These exist in the private working tree only. They must be removed before the repository is ever made public (see claude-documents/legal/LEGAL_FINDINGS_2026-07-11.md, finding R-3):
libs/— third-party mod jars used as behavioral reference:PolyNametag-1.8.9,
custom-crosshair-mod-v1.5.1, epiczoomer-1.2.4, lunar-block-overlay-2.1. Redistribution rights for these have never been checked; they are not shipped, and must not be committed to a public repo.
.decompile/— CFR-decompiled sources of third-party mods (Patcher, OldAnimations ×2,
BetterFps, Phosphor, EntityCulling, FoamFix, Ksyxis, LegacyVanillaFix, NoScreenShake, Born in a Barn). Decompiled output of other authors' copyrighted work; private study material only. Never publish, never copy code from it into SourClient sources (see the per-mod risk table in the legal findings document).
6. Online services SourClient talks to at runtime
| Service | Purpose | Governing terms |
|---|---|---|
Microsoft/Xbox/Mojang auth (login.microsoftonline.com, Xbox Live, sessionserver.mojang.com) | Device-code sign-in; join-server handshake used by the SourClient backend for identity proof | Microsoft Services Agreement; Minecraft EULA |
| Hypixel Public API | Optional stats overlays (user supplies their own API key) | Hypixel API Policy — caching required, no de-anonymization of nicked players, no tracking of specific players |
| Urchin.ws | Optional cheater-tag overlay (opt-in, user supplies their own API key) | Urchin's own terms; feature is default-off |
SourClient backend (sourclient.com) | Cape sync + entitlements | TERMS_OF_USE.md, PRIVACY_POLICY.md |
*Maintained by sourama — contact@sourclient.com. If you are a rights holder and believe something here is mis-stated or infringing, email us and we will respond promptly.*