Source identity · license text · open risks

Licenses & notices

The browser runtime combines pinned robotics sources, physics, rendering, inference, and hand-tracking components. This page keeps their identities and license texts readable from the published site.

Unofficial community simulator Not affiliated with or endorsed by Pollen Robotics or Hugging Face.

Project boundary

No root license has been selected for the original MicroDuck Web application code. The licenses below apply only to their respective third-party works. Apache-2.0 does not grant trademark rights, and upstream attribution is not endorsement.

Original Web code Owner license decision required
Production ONNX 9 locomotion / behavior policies
Detector assets No duck_detect, YOLO, or RKNN shipped

Pinned robotics sources

Source Revision Distributed material / changes License
pollen-robotics/microduck 590b986bd8c0d50ae02cb3ea2f59c463b6828168 Nine byte-identical, hash-checked ONNX policy files. The Web observation/control adapter is original application code. Apache-2.0
pollen-robotics/microduck_rl d424a0c899f6b33cbd3daeb279913134349c0b63 Selected MJCF/STL assets. Runtime XML is modified reproducibly for the passive jaw, Roller keyframe removal, and project playground/contact overlays. Apache-2.0

Browser runtime code

Component Identity License / full text
Three.js 0.185.1 · 2431a09… MIT
ONNX Runtime Web / Common 1.29.0 · tag v1.29.0 MIT · complete third-party notices
MuJoCo WebAssembly 3.12.0 · 13827e9… Apache-2.0
MediaPipe Tasks Vision code / WASM npm 1.0.1 · source revision not published Apache-2.0 metadata
FlatBuffers / long.js 25.9.23 / 5.3.2 Apache-2.0
guid-typescript 1.0.9 · 1870de8… ISC metadata / canonical text
platform.js 1.3.6 · f048e72… MIT
protobuf.js and @protobufjs modules 7.6.6 · 795704d… BSD-3-Clause
Vite browser bootstrap 8.2.2 MIT

Hand model is a separate open risk

The Apache-2.0 MediaPipe program license is not asserted for the separately downloaded hand_landmarker.task binary.

Redistribution terms not confirmed

Google-hosted Hand Landmarker float16 v1 · 7,819,105 bytes · SHA-256 fbc2a30080c3c557093b5ddfc334698132eb341044ccee322ccf8bcf3607cde1. The audit found download-and-store instructions, but no explicit official terms confirming commercial redistribution or independent same-origin hosting.

  1. Load the exact official Google URL at runtime, with explicit network, availability, CSP, privacy, and consent handling.
  2. Obtain written model-owner terms covering the intended distribution.
  3. Substitute a separately licensed compatible hand model while preserving the existing UI, worker, and MuJoCo proxy protocol.

Complete notices and license texts

These are plain UTF-8/LF files intended to remain readable without JavaScript. Package-specific provenance and all open questions are in the complete notice.