Open-source notices and source evidence

Current Android mobile Google Play candidate

0.7.19 (build 52), built from product commit d01490723b63632748ff579066228787b3e266a7.

• Artifact, signature, native inventory, 16 KB page alignment and Android 14 smoke inspection passed.
• The Play bundle excludes libVLC, Jellyfin and their GPL native payloads; downloads remain a Mango product feature.
• FFmpeg was updated to n8.1.2, which fixes CVE-2026-8461, and exact binary/source pins are published.
• The supplier does not publish the exact modified third-party build scripts for the complete FFmpegKit dependency closure.
• The candidate is not declared legally cleared for public Store submission while independent LGPL review remains open.

Release-specific notices, hashes, relink guidance and source evidence

Current Android TV / Fire TV candidate

1.2.29 (build 253), exported from the canonical source at 3bf7d60e351fd9f47d7be5dea6b39b9e3b575e51.

• Technical artifact inspection passed for Google Play and Amazon Appstore.
• Store bundles exclude Jellyfin's GPL decoder and retain libVLC.
• Pinned source archives are available; independent static-dependency closure review remains open.
• These documents do not declare the candidate legally cleared for Store distribution.

Release-specific notices, hashes and source evidence

Distribution-wide compliance documents

• Third-party notices and licence texts
• Exact component versions, hashes, pins and channel scope
• Rebuild, replacement and relink instructions

Channel boundaries

Android mobile Google Play 0.7.19 excludes libVLC and Jellyfin. Android TV Google Play and Amazon bundles exclude Jellyfin but retain libVLC. Direct-download Android channels may retain libVLC or Jellyfin according to their product flavor; keeping those features is not legal clearance, and the applicable GPL/LGPL review remains an independent gate.

Relink and reverse-engineering rights

Where an LGPL component applies, users may modify that component, replace or relink it as the licence requires, and reverse engineer the covered library solely to debug those modifications. Mango Player terms do not override rights granted by an open-source licence.