LibreChess Stockfish corresponding-source record
================================================

LibreChess serves the engine artifacts listed below to browsers. Each record identifies the exact npm package, original package path, deployed SHA-256, pinned browser-port source and pinned engine source. The pinned browser-port repositories contain their build scripts; use the recorded variant and toolchain with those scripts. The npm integrity value identifies the package from which the deployed artifacts were selected. LibreChess does not claim that an independent rebuild is bit-for-bit reproducible; the deployed hashes are the release identity.

Stockfish 18 (stockfish-18.0.8)
-------------------------------

Deployed artifacts
- /engines/stockfish-18.0.8-lite-single.js
  npm path: bin/stockfish-18-lite-single.js
  bytes: 21429
  SHA-256: 5243fd9b276cab7dfe3ad1d43ab9ead73568fac76468c614242977a210c4a391
- /engines/stockfish-18.0.8-lite-single.wasm
  npm path: bin/stockfish-18-lite-single.wasm
  bytes: 7295411
  SHA-256: a8fbc05ec6920b56d7485826dcb02c5ffd2826bcbf751cf973046f237a9096f1

Exact npm distribution
Package: stockfish@18.0.8
Tarball: https://registry.npmjs.org/stockfish/-/stockfish-18.0.8.tgz
Integrity: sha512-z+f2UMPXLylDBGjv9e9zU8QulY7hUl8MYHesLRrdddewlOXjJrUSmtNmbtID1/F72EPhq0CCkCNxgWS5MQVWtQ==
npm gitHead: 93c994592dcf3b4b21052ab925e9b534df9c0918

Corresponding browser-build source
Repository: https://github.com/nmrugg/stockfish.js
Commit: 93c994592dcf3b4b21052ab925e9b534df9c0918
Archive: https://github.com/nmrugg/stockfish.js/archive/93c994592dcf3b4b21052ab925e9b534df9c0918.tar.gz
Variant: lite-single
Build command: node build.js --single-threaded --lite -f
Toolchain: Emscripten 3.1.7
Threads: 1
Embedded NNUE: nn-9067e33176e8.nnue

Pinned engine source
Repository: https://github.com/official-stockfish/Stockfish
Tag: sf_18
Commit: cb3d4ee9b47d0c5aae855b12379378ea1439675c
Archive: https://github.com/official-stockfish/Stockfish/archive/cb3d4ee9b47d0c5aae855b12379378ea1439675c.tar.gz

Licence
SPDX: GPL-3.0
Deployed text: /licenses/stockfish-18-COPYING.txt

Stockfish Multi-Variant 2019-08-15 (stockfish.js-10.0.2)
--------------------------------------------------------

Deployed artifacts
- /engines/stockfish-10.0.2/stockfish.js
  npm path: stockfish.js
  bytes: 1579948
  SHA-256: 723fda70117bfa8d5053a7bc4ae50cdc96dc9e3fd41b57627e4dfa0a0025957a
- /engines/stockfish-10.0.2/stockfish.wasm.js
  npm path: stockfish.wasm.js
  bytes: 96597
  SHA-256: 064175042d8b72eb9fba8311b730f6f5cebcfec736494698d675dc433f3bd275
- /engines/stockfish-10.0.2/stockfish.wasm
  npm path: stockfish.wasm
  bytes: 558861
  SHA-256: 45816b436eb8c180acb2c5b9fda0148101f411edbfa6bf919918e0a362eafca8

Exact npm distribution
Package: stockfish.js@10.0.2
Tarball: https://registry.npmjs.org/stockfish.js/-/stockfish.js-10.0.2.tgz
Integrity: sha512-treB3AYcdvRJ9SDPOyL0R2NcEAtQgG432nStfRzR4wzVELGQ6iVoeBHwvirHTfocNOTims7XNkK3SADaocsJmQ==
npm gitHead: e105072e84cf8ee5dd5219e2c5be29c3b8bf8a5a

Corresponding browser-build source
Repository: https://github.com/niklasf/stockfish.js
Commit: e105072e84cf8ee5dd5219e2c5be29c3b8bf8a5a
Archive: https://github.com/niklasf/stockfish.js/archive/e105072e84cf8ee5dd5219e2c5be29c3b8bf8a5a.tar.gz
Variant: single-threaded multi-variant WASM and asm.js
Build command: ./build.sh
Toolchain: documented in the pinned source
Threads: 1
Embedded NNUE: none

Pinned engine source
Repository: https://github.com/niklasf/stockfish.js
Tag: no release tag recorded
Commit: e105072e84cf8ee5dd5219e2c5be29c3b8bf8a5a
Archive: https://github.com/niklasf/stockfish.js/archive/e105072e84cf8ee5dd5219e2c5be29c3b8bf8a5a.tar.gz

Licence
SPDX: GPL-3.0
Deployed text: /licenses/stockfish.js-10-COPYING.txt

This source record and the linked source archives are provided under GPLv3 section 6. If an archive link becomes unavailable, the project must restore equivalent access to the exact corresponding source.