Toolkit downloads paused. Third-party licensing is under review. These hardware guides are retained for reference; do not start a new installation from them. Read the status.

Dependencies and notices

The root MIT license applies to Michael McCullough's original source and documentation in this repository. It does not relicense external projects, station audio/logos, branding, artwork, certificate data or firmware. The native iOS app and website remain separately maintained and proprietary.

Project code and third-party libraries

SqueezeRadio maintains the player, preset store, metadata/artwork fetcher, display, utilities, LAN API and C transport in this repository. The replacement player does not load StandaloneRadio or HTTPSProxy. This describes the current implementation, not certification that every file is independently authored or that all distribution rights have been cleared.

OpenSSL 3.5.8, Apache-2.0: https://github.com/openssl/openssl/releases/tag/openssl-3.5.8. The build copies its LICENSE.txt alongside the helper. Source is SHA-256 pinned in runtime/build-radio.sh.
musl, MIT with compatible third-party exceptions: static runtime supplied by the pinned Zig ARM toolchain. Retain the musl notice section in network/THIRD-PARTY-NOTICES.txt with any built runtime.
Mozilla NSS CA data, extracted by curl, MPL-2.0: https://curl.se/docs/caextract.html. Preserve the bundle's header and source reference and provide the MPL license. The build includes these references and license resources; CA data is not committed.
Installed Logitech/SqueezePlay firmware supplies audio decoding, Jive, Lua and network/device APIs. Firmware and codec binaries are not redistributed here. Existing platform components retain their own terms.

Historical community components

Earlier setup used ssbrandsma's SBStandalone (0148fec32310c3da9df723b3c31e5cb792ba268d) and SBHttpsProxy (6fd69975e1f14d27a1bf4d3d24b0352c4830320b). Three HTTPSProxy Lua files in historical commits match upstream files and were incorrectly described as original replacements. The current tree removes them and the legacy patch tool. Old history and archives remain private; public distribution is still paused pending complete provenance review. Our license does not grant rights to those historical files.

The test radio previously used optional SBStandaloneTime (1c6c90177776d5158ca2cac2d30049ff60c697f5) for clock sync. It has been removed; our original startup service uses the existing firmware msntp utility and RTC instead. No explicit license was found in the reviewed revisions of these community projects. None of their application source or executable packages is included in the current source set. A valid system clock/RTC remains necessary for verified HTTPS.

Optional hostname helper

network/build.sh builds troglobit/mdnsd at 3b1ac21b9b3a9f672793fc34f6c292d528df8ff7 with Zig 0.14.1. Its source carries BSD/ISC/MIT notices; preserve network/THIRD-PARTY-NOTICES.txt, including musl exceptions, with any built daemon. No daemon binary is committed.

External services and content

Streams come directly from station servers. The radio's original artwork fetcher uses Apple's iTunes Search API; the directory uses Radio Browser. API access does not itself grant rights to relicense or redistribute station audio, artwork or news content. Review service/content terms before a commercial release.

Hardware weather uses Open-Meteo with attribution; its free endpoint is restricted to non-commercial use: https://open-meteo.com/en/terms. The separate iPad dashboard uses US National Weather Service forecasts and links to WhoBuzz headlines. Weather/service availability is not guaranteed.

Verification status — October 13, 2026

The project is not verified as entirely original, dependency-free or cleared for commercial distribution. Functional playback tests and the package allowlist check do not establish ownership or licensing compliance.

The review compared toolkit revision b2a865d and the historical HTTPSProxy files against the pinned SBStandalone, SBHttpsProxy and SBStandaloneTime revisions above (34 upstream code files). All three historical HTTPSProxy Lua files were byte-for-byte upstream matches. Those files are absent from the current tracked source. A normalized-line comparison of current tracked code (trimmed lines longer than 12 characters, excluding Lua comments) found no matching block of five or more retained lines beyond ordinary C include boilerplate. This limited comparison cannot exclude shorter, adapted or other-source reuse, and is not a complete provenance audit.

GitHub visibility was checked: the toolkit, website and previous combined archive repositories are private. Toolkit releases v0.1.0 and v0.1.1 still exist inside the private repository; their release descriptions now mark them withdrawn. They are historical artifacts, not approved downloads. Making a repository private does not recall copies previously obtained. Do not republish old history or release ZIPs as cleared source.

Before distribution, complete a file-by-file provenance review, inspect final linked binaries and their license resources, assess the applet's interaction with firmware licenses, and review all content/service permissions. The proprietary iOS app, website artwork/branding and their complete dependency trees were not cleared by this source comparison. Retaining an MIT license or an AS IS disclaimer does not supply missing third-party rights.

Content and commercial-release checks

The hardware weather code currently calls the free Open-Meteo endpoint. Its terms exclude commercial products and promotional use of that free service; the weather data also requires CC BY 4.0 attribution. Resolve the service arrangement or replace the provider before commercial distribution. This is separate from the iPad's National Weather Service integration.
The radio requests iTunes album art. Apple's Search API documentation limits promotional artwork use and requires a nearby approved store badge linking to the promoted content. The current radio fetcher selects the artwork URL without retaining a store link; compliance of the radio display has not been established. Resolve this before release; an accessible image URL is not a general artwork license.
Radio Browser permits API use in free and non-free software. That permission does not grant ownership of station audio, logos or linked content. Station streams, artwork and headline permissions need their own review.

Website build tools

The separate private website source uses Marked (MIT) to render documentation and Wrangler (MIT OR Apache-2.0) to deploy to Cloudflare. These tools and their transitive dependencies are not owned by Squeeze Radio. The dependency declarations were inspected; a complete website dependency and asset-rights audit has not been performed. This website's source and the native iOS app are not licensed by the toolkit's root MIT file.