@missing-elements/h5p-runtime 1.0.1 -- third-party notice

These files are the H5P runtime that <h5p-player> loads inside its frame, and the script that
boots it there. The runtime is the H5P core from h5p/h5p-php-library at commit
cb64a1f3884408487c3178e31fc140f5d45ca165 (2026-08-11, core API 1.28):
the scripts as upstream wrote them, joined into one file under a licence comment, and the
stylesheets joined and rebuilt so that the sheet stands alone, its icon fonts and image inlined
as data URLs and its Inter and Open Sans faces moved to fonts/ and listed in MANIFEST.json for
the player's frame document to declare. Keep this file and LICENSE.txt beside them when you copy
or serve the directory.

frame.bundle.js
  - H5P core, from https://github.com/h5p/h5p-php-library:
    jquery.js, h5p.js, h5p-event-dispatcher.js, h5p-x-api-event.js, h5p-x-api.js,
    h5p-content-type.js, h5p-confirmation-dialog.js, h5p-action-bar.js,
    request-queue.js, h5p-tooltip.js. GNU General Public License v3.0 --
    LICENSE.txt in this directory.
  - jQuery 3.5.1, in jquery.js above. MIT, Copyright JS Foundation and other contributors,
    https://jquery.org/license

h5p.css
  - H5P core, from the same repository:
    h5p-fonts.css, h5p.css, h5p-confirmation-dialog.css, h5p-core-button.css,
    h5p-theme.css, h5p-theme-variables.css, h5p-tooltip.css, h5p-table.css,
    with the h5p-core-30, h5p-hub-publish and h5p-theme icon fonts and images/throbber.gif
    inlined. Same origin, GNU General Public License v3.0 -- LICENSE.txt.

fonts/inter-*     Inter, SIL Open Font License 1.1 -- fonts/Inter-LICENSE.txt
fonts/open-sans-* Open Sans, SIL Open Font License 1.1 -- fonts/OpenSans-OFL.txt

frame-boot.js
  - The frame's boot script, from src/frame-boot.ts in this package. Copyright (c) 2026
    missing-elements, GNU General Public License v3.0 -- LICENSE.txt. It runs in the H5P
    document and calls the core's API, which is why it is part of this package and not of
    the MIT player. It builds the core's settings from the core's own English strings
    (H5PCore::getLocalization() at the commit above), and includes a port of
    H5PContentValidator from h5p/h5p-php-library (GNU General Public License v3.0) and of
    the filter_xss functions of Drupal 7's includes/common.inc (Copyright Drupal
    contributors, GNU General Public License v2.0 or later), which check the content of a
    package played untrusted.

l10n.js
  - The core's interface strings in other languages, taken from Moodle's language packs
    (https://download.moodle.org/langpack/), where Moodle's translators keep them.
    Copyright Moodle and its translators, GNU General Public License v3.0 or later.
    l10n/index.json in this package's source names the pack each language came from and
    when they were taken.

Corresponding source for the GPL parts as built:
https://github.com/h5p/h5p-php-library/tree/cb64a1f3884408487c3178e31fc140f5d45ca165
(js/ and styles/), and
https://github.com/missing-elements/h5p-offline-player/tree/main/packages/runtime, whose
vendor/h5p-core/ holds the same files and scripts/ the build that joins them.