chore: vendor Lua + munit with licenses and provenance

2026-08-28 19:48:42 -04:00
parent b5718b7487
commit 911061eab7
69 changed files with 32264 additions and 0 deletions
@@ -0,0 +1,15 @@
+# thirdparty/
+
+Vendored third-party libraries, per AGENTS.md §2. Every library is copied
+in-tree (no git submodules) and carries three things:
+
+- a verbatim upstream `LICENSE` file (never stubbed),
+- an `UPSTREAM` file recording the source URL and pinned commit SHA,
+- a row in the provenance table below.
+
+## Provenance table
+
+| name | version | license | SHA |
+| --- | --- | --- | --- |
+| lua | 5.4.9 | MIT | 312b9efaa1061c2c4cad08554dbc1351c3270eef (git tag `v5.4.9` on the lua/lua mirror; tarball sha256 `2335b6c582a52654f94612bf10d2f4672805d05329aa6568b1d8cd9e5c6fb8e6`) |
+| munit | 0.2.0 | MIT | ad67a3a2ca6b0e106c9c8d515772359eadcefad6 (git tag `v0.2.0`) |