NOTICE (4842B)
1 transtation
2 Copyright (c) 2026 sqzer
3
4 This project is licensed under the MIT License (see LICENSE).
5
6 transtation itself contains no third-party source code. It is a set of shell
7 scripts and one Dockerfile. The server image redistributes third-party binaries
8 unmodified; the native server install and the client install download them from
9 upstream and verify them instead. Their licenses and obligations follow.
10
11 ================================================================================
12 Xray-core -- redistributed in the image; downloaded by the native installer
13 ================================================================================
14
15 Xray-core is licensed under the Mozilla Public License, Version 2.0 (MPL-2.0).
16
17 Upstream project : https://github.com/XTLS/Xray-core
18 Version shipped : v26.3.27
19 Exact artifact : https://github.com/XTLS/Xray-core/releases/download/v26.3.27/Xray-linux-64.zip
20 https://github.com/XTLS/Xray-core/releases/download/v26.3.27/Xray-linux-arm64-v8a.zip
21 Source Form : https://github.com/XTLS/Xray-core/tree/v26.3.27
22
23 The `xray` binary in our image is the official upstream release artifact,
24 byte-for-byte unmodified. We do not patch, recompile, or statically link it
25 into anything. It is copied into the image as-is.
26
27 The native install (`install.sh server --native`) does not redistribute it at
28 all: it downloads the same release artifact from the URL above at install time,
29 verifies it against the `.dgst` published with that release, and installs it
30 under /usr/local/lib/transtation.
31
32 The Source Code Form of Xray-core is governed by the MPL-2.0. A copy of that
33 license is available at https://mozilla.org/MPL/2.0/ and is distributed with
34 the upstream source at the URL above.
35
36 The image ships no GeoIP or GeoSite data files. Those carry their own separate
37 licenses (CC-BY-SA / GPL-3.0 depending on the dataset) and none of them apply
38 here.
39
40 ================================================================================
41 wgcf -- redistributed in the image; downloaded by the native installer
42 ================================================================================
43
44 wgcf is licensed under the MIT License.
45
46 Upstream project : https://github.com/ViRb3/wgcf
47 Version shipped : v2.2.32
48 Exact artifact : https://github.com/ViRb3/wgcf/releases/download/v2.2.32/wgcf_2.2.32_linux_amd64
49 https://github.com/ViRb3/wgcf/releases/download/v2.2.32/wgcf_2.2.32_linux_arm64
50
51 The `wgcf` binary is the official upstream release artifact, unmodified. It is
52 used only once, at first boot, to register a Cloudflare WARP identity. It is
53 not part of the data path. As with Xray, the native install downloads and
54 verifies it rather than redistributing it.
55
56 Upstream's own disclaimer, reproduced verbatim:
57
58 "This project is in no way affiliated with, authorized, maintained, sponsored
59 or endorsed by Cloudflare or any of its affiliates or subsidiaries."
60
61 The same applies to transtation. Cloudflare WARP is a Cloudflare service, used
62 here through its documented client registration flow. Use of it is subject to
63 Cloudflare's own terms.
64
65 ================================================================================
66 sing-box -- NOT redistributed; downloaded from upstream by the installer
67 ================================================================================
68
69 sing-box is licensed under the GNU General Public License, Version 3 or later
70 (GPL-3.0-or-later).
71
72 Upstream project : https://github.com/SagerNet/sing-box
73 Version pinned : v1.13.16
74 Fetched from : https://github.com/SagerNet/sing-box/releases/download/v1.13.16/sing-box-1.13.16-linux-amd64-musl.tar.gz
75 https://github.com/SagerNet/sing-box/releases/download/v1.13.16/sing-box-1.13.16-linux-arm64-musl.tar.gz
76 Source Form : https://github.com/SagerNet/sing-box/tree/v1.13.16
77
78 transtation does not ship sing-box. `install.sh client` downloads the official
79 release artifact from the URL above, verifies it against a SHA-256 recorded in
80 this repository, and installs it. Nothing here links against it, embeds it or
81 derives from it; the client script invokes it as a separate program with a
82 generated configuration file.
83
84 Per upstream's request, transtation is not affiliated with or endorsed by the
85 sing-box project, and does not use its name to imply endorsement.
86
87 ================================================================================
88 Alpine Linux base image
89 ================================================================================
90
91 The server image is built FROM alpine:3.23 and installs `ca-certificates`,
92 `curl`, `jq` and `libqrencode-tools` from the Alpine package repositories. Those packages are distributed under their own licenses; run
93 `apk info -L <package>` inside the image for per-package details.