Slurp native components embedded by curl_cffi
==============================================

curl_cffi Python distribution: 0.15.1b2
Actual embedded libcurl report: libcurl/8.15.0-IMPERSONATE BoringSSL zlib/1.3.1 brotli/1.2.0 zstd/1.5.7 AppleIDN nghttp2/1.63.0 ngtcp2/1.20.0 nghttp3/1.15.0

curl_cffi is the Python binding used by yt-dlp for browser/TLS impersonation.
Its wheel embeds a curl-impersonate/libcurl stack, so these projects are
audited separately from the Python package inventory.

curl-impersonate
  License: MIT
  Project: https://github.com/lexiforest/curl-impersonate
  Role: patched libcurl build used by curl_cffi to reproduce browser network fingerprints

Detected native components:
- curl / libcurl
    Runtime token: libcurl/8.15.0-IMPERSONATE
    License: curl license (MIT-like)
    Project: https://curl.se/
    Packaging: Embedded by curl_cffi's curl-impersonate build
- BoringSSL
    Runtime token: BoringSSL
    License: Apache-2.0 with upstream third-party notices
    Project: https://boringssl.googlesource.com/boringssl/
    Packaging: Embedded TLS implementation in the impersonation stack
- zlib
    Runtime token: zlib/1.3.1
    License: zlib license
    Project: https://zlib.net/
    Packaging: Compression support in embedded libcurl
- Brotli
    Runtime token: brotli/1.2.0
    License: MIT
    Project: https://github.com/google/brotli
    Packaging: Compression support in embedded libcurl
- Zstandard
    Runtime token: zstd/1.5.7
    License: BSD-3-Clause
    Project: https://github.com/facebook/zstd
    Packaging: Compression support in embedded libcurl
- Apple IDN support
    Runtime token: AppleIDN
    License: System-provided component
    Project: https://developer.apple.com/
    Packaging: Provided by macOS; not redistributed by Slurp
- nghttp2
    Runtime token: nghttp2/1.63.0
    License: MIT
    Project: https://github.com/nghttp2/nghttp2
    Packaging: HTTP/2 support in embedded libcurl
- ngtcp2
    Runtime token: ngtcp2/1.20.0
    License: MIT
    Project: https://github.com/ngtcp2/ngtcp2
    Packaging: QUIC transport support in embedded libcurl
- nghttp3
    Runtime token: nghttp3/1.15.0
    License: MIT
    Project: https://github.com/ngtcp2/nghttp3
    Packaging: HTTP/3 support in embedded libcurl

Audit policy:
  - unknown native library/version tokens fail runtime preparation
  - libidn2 currently fails the build pending an explicit copyleft review
  - the exact curl_cffi source distribution and curl-impersonate source archive
    are retained in Slurp's exportable open-source materials archive
  - this engineering inventory does not replace qualified legal review