# Third-party notices and provenance

`lme-rs` source code is offered under the MIT License in [`LICENSE`](LICENSE). This notice records assets and linked components that carry separate terms. It is part of source releases and is copied into Python wheel `*.dist-info/licenses/` directories by [`scripts/ci/package_wheel_notices.py`](scripts/ci/package_wheel_notices.py).

## Test fixtures

The following test-only CSV fixtures are exports or format-preserving derivatives of datasets distributed by **lme4 1.1.38**: `cbpp_binary.csv`, `cbpp_binary_weighted.csv`, `dyestuff.csv`, `grouseticks.csv`, `pastes.csv`, `penicillin.csv`, and `sleepstudy.csv`. lme4 is licensed under GPL (>= 2). These fixtures are distributed as separate GPL-2.0-or-later assets; see [`LICENSES/GPL-2.0-or-later.txt`](LICENSES/GPL-2.0-or-later.txt) and the exact path list and source URLs in [`legal/fixture-provenance.json`](legal/fixture-provenance.json).

`tests/data/orange.csv` is an export of `datasets::Orange` from R and is likewise recorded as GPL-2.0-or-later. Synthetic nonlinear fixtures are generated by repository scripts and are MIT. Numerical golden outputs record test results; their source datasets and generator scripts are identified in [`tests/data/golden_parity_manifest.json`](tests/data/golden_parity_manifest.json).

## Native components in distributed binaries

- **sprs-ldl 0.10.0** is licensed under LGPL-2.1. Its license text is included at [`LICENSES/LGPL-2.1-only.txt`](LICENSES/LGPL-2.1-only.txt). See [`RELINKING.md`](RELINKING.md) for source and rebuild information.
- **Intel oneMKL** is statically linked in x86_64 builds through `ndarray-linalg` / `intel-mkl-src`. It is distributed under the Intel Simplified Software License, included at [`LICENSES/Intel-Simplified-Software-License.txt`](LICENSES/Intel-Simplified-Software-License.txt). The wrapper crate itself is MIT.
- **OpenBLAS** is statically linked in macOS Apple Silicon and other non-x86_64 builds. Its BSD-3-Clause license text is included at [`LICENSES/BSD-3-Clause-OpenBLAS.txt`](LICENSES/BSD-3-Clause-OpenBLAS.txt).
- Other Rust dependencies and their declared SPDX expressions are resolved from the locked dependency graph. Apache-2.0 is included at [`LICENSES/Apache-2.0.txt`](LICENSES/Apache-2.0.txt). [`scripts/ci/check_legal_compliance.py`](scripts/ci/check_legal_compliance.py) fails when a dependency lacks a declared license unless it is reviewed and listed in [`legal/dependency-license-exceptions.json`](legal/dependency-license-exceptions.json).

This inventory is a compliance record, not legal advice. A distributor must review the exact target-specific dependency graph and the terms applicable in its jurisdiction before shipping a new binary artifact.
