LOCAL DEPENDENCY SOURCE ARCHIVE

The CasinoLove application source is the separate app/index.html file.
This directory supplies source material for its third-party dependencies.

FFmpeg core 0.12.10 is distributed as an unmodified prebuilt WebAssembly
binary from the official @ffmpeg/core package. The ffmpeg.wasm v12.15 source
tag includes the core 0.12.10 package, Dockerfile, Makefile, build scripts and
bindings. FFmpeg n5.1.4 and the dependent source versions selected by that
Dockerfile are included as separate archives. Their original notices remain
inside each archive, with convenience copies in the app's licenses/ folder.

To inspect the upstream production build, extract
ffmpegwasm-ffmpeg.wasm-v12.15.tar.gz and read Dockerfile, Makefile and build/.
The single-thread production target is `make prd`. A compatible Docker/
Emscripten toolchain is required to rebuild; it is not required to host or use
this app. The original Dockerfile fetches dependency sources. Matching source
archives are supplied here for inspection or for adapting the build to use
local sources. No claim of a byte-identical reproducible build is made.

The SDL2 archive is checked against the SHA-512 pinned by the Emscripten
3.1.40 SDL2 port recipe, which is also included. Test-only submodules, such as
FFmpeg.wasm sample media and zimg googletest, are not required by the shipped
production core and are not included.

Transformers.js 3.8.1 source includes the original src/ tree, the unminified
browser bundle and its source map from the published package. Hugging Face
Jinja 0.5.3, listed in the Transformers.js dependency range, is supplied too.
ONNX Runtime uses the MIT licence; its binaries, JavaScript loader, licence
and incorporated third-party notices are in the main application package.

MANIFEST.json records archive provenance, size and SHA-256. Floating branch
archive downloads are fixed to these exact included bytes by that manifest.
MODEL-MANIFEST.json in the main package separately identifies the model files
by exact model repository revision and file hash.

The app only fetches static runtime/model files from its own website.
Developer build dependencies and source provenance are not client-side
network dependencies of the application.
