docs: add THIRD_PARTY_NOTICES.md disclosing third-party dependencies

List direct dependencies by tier (vendored Cordis sources, runtime npm, dev-only npm, Python SDK, build-time tools) with upstream links and licenses, and link it from the License section of both READMEs.
2026-07-29 21:29:49 -07:00
parent b9e240bbef
commit 8a915893e7
4 changed files with 147 additions and 2 deletions
@@ -81,3 +81,5 @@ DeepSeek Harness is currently pre-release.
 ## License

 [BSD 3-Clause](LICENSE)
+
+Third-party dependencies and their licenses are disclosed in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).