This local runtime includes LAME3.100 (https://lame.sourceforge.io/), LGPL-2.0-or-later; LGPL2.1 is selected for the combined C bridge/runtime. Original copyright notices are retained in the full source archive. LAME's original COPYING and LICENSE are included as inputs/LAME-COPYING and inputs/LAME-LICENSE.
Mediabunny and @mediabunny/mp3-encoder1.62.1, Copyright(c)2026-present Vanilagy and contributors, MPL2.0. Editable original/modified source and MPL text are included. C bridge include path and browser worker/resource paths are adapted; cancel-fix1 additionally settles pending commands on terminal close and ignores queued late replies; modifications are listed in patches dated2026-10-28. The local new create-worker.ts follows MPL2.0 terms for this package. The LGPL2.1-compatible combined bridge uses MPL2§3.3; original MPL notice and source availability remain.
Emscripten generated glue/runtime: MIT or University of Illinois/NCSA; see inputs/EMSCRIPTEN-LICENSE.txt. musl/libc: see inputs/MUSL-COPYRIGHT.txt. Compiler-rt: Apache2 with LLVM exceptions, inputs/COMPILER-RT-LICENSE.txt. Esbuild build tool: MIT, inputs/ESBUILD-LICENSE.txt.
Software is provided without warranty to the extent permitted by its licenses. Source and relink materials are provided to recipients; this notice places no extra restriction on permitted modification, rebuilding, relinking, or reverse engineering for debugging such modifications. No authors were contacted for special permission. Retain the full original licenses rather than this summary alone.
The96kbps test-only library patch is solely a replacement proof. It must not replace the normal192kbps runtime in a product.

Audio Tools local integration, 2026-10-28: the current corresponding source packet is /sources/audio-tools-mp3-source-20261028.tar.gz; archive checksum: /sources/SHA256SUMS. Read its INTEGRATION.md and local-app-adaptation.patch for the current static worker URL and TypeScript-only wrapper integration. Runtime resource fingerprints are /vendor/mp3/MANIFEST.json. The worker/glue/WASM and C/static library are unchanged from the audited cancel-fix1 delivery; no C recompilation was required. This local package and notice do not claim deployment or public-host verification.

Audio Tools local integration, cancel-fix2, 2026-10-28: current corresponding source is /sources/audio-tools-mp3-source-20261028.tar.gz with /sources/SHA256SUMS. INTEGRATION.md and local-app-adaptation.patch include a task-scoped AbortSignal lease which directly settles pending encoder commands before Mediabunny serializes close behind encode. The lease permits one owning conversion and is released after actual task cleanup. This extends cancel-fix1; it also retains static worker URL and TypeScript-only integration changes. Worker/glue/WASM/C/static-library bytes remain unchanged; current runtime hashes are /vendor/mp3/MANIFEST.json. No deployment/public-host verification is implied.