# Third-Party Notice

CSPKit does not vendor or port third-party source code, and it has no runtime dependency on an external library.

The repository contains:

- MoonBit source written for this project;
- self-authored CSP test strings;
- generated `pkg.generated.mbti` interface metadata produced by `moon info`;
- GitHub Actions workflow configuration;
- the Apache-2.0 license text.

Build and CI references:

- The workflow references [`actions/checkout`](https://github.com/actions/checkout), version `v5`, under its upstream MIT license. It is used by the CI runner and is not redistributed in the Mooncakes package; its notices remain with that action.
- The MoonBit compiler and official installer are build-time tools downloaded by CI; they are not bundled into CSPKit.
- Generated interface metadata is reproducible from the MoonBit package source and is not copied from another project.

No image, audio, font, binary fixture, private code, or source-unknown asset is included.