# Third-party

Third-party libraries are vendored here, per `layouts/C.md`.

## Policy

- Vendoring is required to prevent dependency hell: vlibc must build from a
  checked-out tree with no external downloads.
- Every vendored dependency records its upstream source, version, and license
  in a `README` (or `UPSTREAM`) file alongside its sources.
- Vendored code is patched in-tree where necessary; patches are documented.

This directory is intentionally empty for now — the current stub has no
third-party dependencies.