# Third-party assets

This is the source-of-truth inventory for third-party assets vendored in this
repository. Every row names the upstream source, the version or immutable
upstream commit used for identification, the licence, and the local path.
The local licence files are part of the distribution and should travel with
the assets.

## Vendored assets

| Name | Version / upstream commit | Source URL | Licence | Local path | Status |
| --- | --- | --- | --- | --- | --- |
| Alegreya, regular variable webfont | Google Fonts CDN release `v41` | [upstream family](https://github.com/huertatipografica/Alegreya) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/alegreya/METADATA.pb) | SIL Open Font License 1.1 | `site/fonts/alegreya-var.woff2` · `site/fonts/alegreya-var-ext.woff2` · `site/fonts/LICENSE.txt` | Named |
| Alegreya, italic variable webfont | Google Fonts CDN release `v41` | [upstream family](https://github.com/huertatipografica/Alegreya) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/alegreya/METADATA.pb) | SIL Open Font License 1.1 | `site/fonts/alegreya-italic-var.woff2` · `site/fonts/alegreya-italic-var-ext.woff2` · `site/fonts/LICENSE.txt` | Named |
| Alegreya Sans, 400/500/700 and 400 italic webfonts | Google Fonts CDN release `v28` | [upstream family](https://github.com/huertatipografica/Alegreya-Sans) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/alegreyasans/METADATA.pb) | SIL Open Font License 1.1 | `site/fonts/alegreya-sans-400.woff2` · `site/fonts/alegreya-sans-500.woff2` · `site/fonts/alegreya-sans-700.woff2` · `site/fonts/alegreya-sans-italic-400.woff2` · `site/fonts/LICENSE.txt` | Named |
| Fragment Mono, regular webfont | Google Fonts source commit `3ff027831f9a8b5820b35e251e5914d5a3f5fac4` | [upstream family](https://github.com/weiweihuanghuang/fragment-mono) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/fragmentmono/METADATA.pb) | SIL Open Font License 1.1 | `site/fonts/fragment-mono-400.woff2` · `site/fonts/LICENSE.txt` | Named |
| Instrument Serif, regular webfont | Google Fonts source commit `65c0ef225f386a3c7e87570a4aa9cc0262c2fd81` | [upstream family](https://github.com/Instrument/instrument-serif) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/instrumentserif/METADATA.pb) | SIL Open Font License 1.1 | `motion/public/fonts/instrument-serif-400.woff2` · `motion/public/fonts/LICENSE.txt` | Named |
| Instrument Serif, italic webfont | Google Fonts source commit `65c0ef225f386a3c7e87570a4aa9cc0262c2fd81` | [upstream family](https://github.com/Instrument/instrument-serif) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/instrumentserif/METADATA.pb) | SIL Open Font License 1.1 | `motion/public/fonts/instrument-serif-italic.woff2` · `motion/public/fonts/LICENSE.txt` | Named |
| Schibsted Grotesk, regular variable webfont | Google Fonts source commit `d485f61f105e1b3935f4d21dfb4d371359798603` | [upstream family](https://github.com/schibsted/schibsted-grotesk) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/schibstedgrotesk/METADATA.pb) | SIL Open Font License 1.1 | `motion/public/fonts/schibsted-grotesk-var.woff2` · `motion/public/fonts/LICENSE.txt` | Named |
| Schibsted Grotesk, italic variable webfont | Google Fonts source commit `d485f61f105e1b3935f4d21dfb4d371359798603` | [upstream family](https://github.com/schibsted/schibsted-grotesk) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/schibstedgrotesk/METADATA.pb) | SIL Open Font License 1.1 | `motion/public/fonts/schibsted-grotesk-italic-var.woff2` · `motion/public/fonts/LICENSE.txt` | Named |
| Fragment Mono, regular webfont (motion copy) | Google Fonts source commit `3ff027831f9a8b5820b35e251e5914d5a3f5fac4` | [upstream family](https://github.com/weiweihuanghuang/fragment-mono) · [Google Fonts metadata](https://github.com/google/fonts/blob/main/ofl/fragmentmono/METADATA.pb) | SIL Open Font License 1.1 | `motion/public/fonts/fragment-mono-400.woff2` · `motion/public/fonts/LICENSE.txt` | Named |
| GitHub mark | Simple Icons `8.0.0` | [upstream SVG](https://github.com/simple-icons/simple-icons/blob/8.0.0/icons/github.svg) · [upstream package](https://github.com/simple-icons/simple-icons/tree/8.0.0) | CC0 1.0 Universal; see the vendored text | `content/marks.json` (`marks.github.path`) · `third-party/simple-icons-v8/LICENSE.md` | Named |
| Twitter mark | Simple Icons `8.0.0` | [upstream SVG](https://github.com/simple-icons/simple-icons/blob/8.0.0/icons/twitter.svg) · [upstream package](https://github.com/simple-icons/simple-icons/tree/8.0.0) | CC0 1.0 Universal; see the vendored text | `content/marks.json` (`marks.twitter.path`) · `third-party/simple-icons-v8/LICENSE.md` | Named |
| Substack mark | Simple Icons `8.0.0` | [upstream SVG](https://github.com/simple-icons/simple-icons/blob/8.0.0/icons/substack.svg) · [upstream package](https://github.com/simple-icons/simple-icons/tree/8.0.0) | CC0 1.0 Universal; see the vendored text | `content/marks.json` (`marks.substack.path`) · `third-party/simple-icons-v8/LICENSE.md` | Named |

## Sweep results and boundaries

- No third-party CSS or JavaScript is vendored. The shipped CSS and JavaScript
  are this repository's source code and are covered by the root `LICENSE`.
- The site's CSS family names, favicons, and SVG illustrations are house-drawn
  or generated first-party assets, not third-party vendors, so they have no
  inventory row. Garden screenshots identify their source repository and
  commit in `content/product-sources.json`.
- No asset is marked `UNVERIFIED`. If a future asset cannot be tied to an
  upstream licence and source, it must be recorded as
  `UNVERIFIED — do not ship until resolved` instead of being guessed into this
  table.