Packaging documentation: source and notice mapping for six bundled libraries in 4.11.0.86 Linux contrib wheel
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 5.4k
- Forks
- 1k
- Avg merge
- 22h 17m
- Merged PRs (30d)
- 3
Description
Expected behaviour
The third-party notices or linked build metadata should make it possible to associate bundled native libraries with their source versions and copyright/licence notices.
Actual behaviour
While reviewing the official artifact opencv_contrib_python-4.11.0.86-cp37-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl, I could not locate a specific source/version and notice mapping for the six files below in its LICENSE-3RD-PARTY.txt.
Wheel SHA-256: c47c0ef1098461cdc6fa1cdce4c942b8ec974c87423f4b5951443d26bb9ae407
These members are under opencv_contrib_python.libs/:
| Bundled filename | SHA-256 |
|---|---|
libquadmath-96973f99.so.0.0.0 |
934c22ded0e7d169c4d4678876c96051adf3d94545da962f60b41659b075da3b |
libgfortran-91cc3cb1.so.3.0.0 |
55e3eb67306c2ff17e6f8a0810eaa0dcb26e94cd83924c5065d5040e87814608 |
libxkbcommon-x11-c65ed502.so.0.0.0 |
34b0726b008fe059b70204265080e5db34afacc0af2a12698ad6c38ae1166d54 |
libxkbcommon-71ae2972.so.0.0.0 |
1fcb38a646bd1ce1daaf682ad29b72e65bfdf67a06335b278f8e99d0b7530212 |
libX11-xcb-0e257303.so.1.0.0 |
a8cf52f67fb6844bfa19d47fdfb6781a02af3ca6afe78ba9fb58a314b9365d72 |
libopenblas-r0-f650aae0.3.3.so |
79ec02b53f573cd7116a89f04c397473018e7fda05720b354d43505c19d47958 |
I found the aggregate notices for FFmpeg, Qt, OpenSSL, PNG and xcb-related components, but could not associate the six files above precisely. This is not a claim that they cannot be used commercially; I am trying to complete the artifact-to-notice mapping.
Steps to reproduce / artifact scope
Inspect the above wheel's opencv_contrib_python.libs/ directory and LICENSE-3RD-PARTY.txt without importing or rebuilding the package.
- Platform: Linux x86_64, manylinux2014 / manylinux_2_17 wheel.
- Version: opencv-contrib-python 4.11.0.86, cp37-abi3 wheel used with CPython 3.11.
- The request deliberately concerns this published version; I have not asserted that it is the latest release.
Could you provide links to the exact source packages/versions, build recipe and corresponding notices for these files? A build SBOM and indication of additional statically linked components would also help, if available. Another wheel's similarly named library would not establish this artifact's provenance.
I checked #855 and searched for SBOM and the bundled library/licence names; I did not find an existing artifact-specific mapping. I am not requesting legal advice or a rebuild.
Issue submission checklist
- This is a binary packaging/documentation issue, not a generic OpenCV coding question.
- I read the README and understand that this repository provides the Python package build toolchain.
- The request relates to the pre-built binaries and their build/notice metadata.
- Latest version: intentionally reviewing the fixed 4.11.0.86 release described above.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the specified 4.11.0.86 wheel, its opencv_contrib_python.libs/ directory, and LICENSE-3RD-PARTY.txt, then review the linked PyPI release and the repository's packaging metadata. Done means documenting exact source packages and versions, build-recipe links, and corresponding notices for all six listed libraries, with any available SBOM or static-linking information.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- build-system, documentation, release
- Issue type
- Documentation
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Active
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100