Source code

Last updated: October 2, 2026

Complete corresponding source for the open-source components Navarre distributes.

These archives are served from the same place as the installer, which is what the GNU LGPL version 2.1 section 4 asks for, and they are linked directly from the download page, which is what the GNU GPL version 3 section 6(d) asks for. Every upstream archive below is byte-for-byte the release its project published, mirrored and checksummed, with nothing modified. The one archive Navarre wrote itself is the libVLC build recipe, and it is marked as such.

Releases

One manifest per Navarre release, listing every component in that exact build with its version, licence, and SHA-256. Old releases are never removed: installers stay in the wild long after a version is retired, and the obligation lasts as long as anyone is running a copy we conveyed. A Windows build that is not listed here is covered by the written offer above, as are the Android apps and the two server images (see below).

Component index

Everything below is in the Windows installer, measured from the 1.0.42 build. Navarre 1.0.42 was the first public release carrying the GStreamer media stack and Navarre's own libVLC runtime, so this index grew from two entries to 58; each release's own manifest says exactly what that build carries. The lists are measured from the installer's own file table, not from a build script: its GStreamer tree holds 52 files and its libVLC tree holds 126, and both match the allow-lists committed in Navarre's source tree file for file.

The GStreamer media stack (22 components)

Navarre distributes a curated subset of the official GStreamer Windows build as separate, unmodified DLL files installed alongside the application, under Navarre\app\resources\gstreamer\. None of them is statically linked into Navarre, none is modified, and none is repackaged. You may replace any of them with an interface-compatible build of your own and the application will load yours instead.

nghttp2 has no DLL of its own: it is linked statically inside soup-3.0-0.dll, so its source is mirrored here even though no file on disk carries its name. cerbero is the build system that produced the official GStreamer Windows binaries; it is mirrored because corresponding source includes the scripts that control compilation. There is no mpg123 row in this table: it was removed from the GStreamer bundle on 2026-08-20, and the MP3 path is now Media Foundation's own decoder. The mpg123 that ships inside the libVLC runtime is a different, older version and is listed in that section.

Navarre's libVLC runtime (29 archives)

This one is different from everything else on this page, and the difference matters. Navarre built this runtime itself. It is not an upstream binary that Navarre redistributes; it is VLC 3.0.23 for 64-bit Windows, compiled by Navarre from source with every GPL component disabled, then curated down to 126 files. Because Navarre is the builder, the complete corresponding source is not just the tarballs: it is the VLC source, the 26 contrib sources at the exact versions this build consumed, and Navarre's own build scripts and configure flags. All three are below.

The recipe is published as navarre-libvlc-build-3.0.23-2026-09-03.tar.gz. It holds every script that ran, the verbatim build logs of both stages, the curation allow-list, the licence guard, and the guard's per-file SHA-256 inventory of the shipped runtime, together with the configure lines extracted back out of the shipped DLLs so the recipe cannot drift from the artifact. Every contrib archive below was verified against the SHA-512 that VLC 3.0.23 itself records in contrib/src/<package>/SHA512SUMS, so the mirrored bytes are the bytes this build compiled. Every patch applied to a contrib package lives inside the VLC tarball under contrib/src/; Navarre applies no patch of its own.

The runtime is installed as loose DLL files under Navarre\app\resources\vlc\. Replace any of them with an interface-compatible build of your own and the application will load yours.

What the shipped runtime is made of

The 126 installed files, grouped by the component each one comes from. This is the licence map for the binaries, taken from the allow-list committed in Navarre's source tree; the table after it is where each component's source lives.

FFmpeg is the licence-critical one, and it is version 4.4.5. The stock VLC build for Windows configures FFmpeg with --enable-gpl, and its libavcodec reports "GPL version 2 or later" about itself. Navarre's build omits that flag, and the shipped libavcodec_plugin.dll reports "LGPL version 2.1 or later" for libavcodec, libavformat, and libavutil. That self-report is the assertion, not the flag, and it is checked on every build. 4.4.5 is the FFmpeg baseline of this runtime, recorded here so the next libVLC re-cut has a number to move from.

FreeType credit, as its licence asks for. Navarre redistributes FreeType under the FreeType Licence rather than the GPLv2 alternative it also offers. The FTL asks for an acknowledgement in documentation, and this is it:

Portions of this software are copyright © 2023 The FreeType Project (www.freetype.org). All rights reserved.

The year is the copyright year carried by the FreeType 2.13.1 sources actually used, which is what the FTL asks for.

The Java runtime and Java libraries (7 archives)

The Windows installer bundles a Java runtime image built from Eclipse Temurin with jlink and jpackage, and carries its Java libraries as separate jars under Navarre\app\. The two LGPL-3.0 families here, gst1-java-core and the Jellyfin Kotlin SDK, are never shaded into Navarre's own jar: keeping them separate, replaceable artifacts on the classpath is a condition of Navarre's compliance rather than a packaging convenience.

The server and companion images

Navarre's server (ghcr.io/navarredr/navarre-server) and its watch-from-anywhere helper, the companion (ghcr.io/navarredr/navarre-companion), are container images anyone can download. Each carries open-source software under its own licence, and the written offer above covers every published version of both, including the versions published before this section existed.

Navarre server - every published version (2.0.2, 2.0.4, and 2.0.6)

The server image carries FFmpeg as two programs, ffmpeg and ffprobe, from the jellyfin-ffmpeg project's portable linux64 GPL build (version 7.1.4-1; each image names its build in its own dev.navarre.ffmpeg label), licensed under the GNU General Public License, version 3 or later. They are separate programs that the server runs to read and convert media; Navarre's own code is not built from them. Their source is the jellyfin-ffmpeg project's v7.1.4-1 release and the sources of the libraries that build includes; until those archives are mirrored on this page, the written offer above is how to get them.

Navarre companion - versions 1.1.0 to 1.1.5

The companion image carries the Jellyfin SDK for Kotlin 1.8.12 (GNU Lesser General Public License, version 3), packaged inside the companion's own program file, and the Tailscale client programs (BSD 3-Clause licence). The SDK's source is listed in the component index above; the written offer covers it for every companion version, together with what the LGPL requires to use a modified version of it.

Verifying a download

Every archive is content-addressed: its SHA-256 is the first part of its own filename, so a download can be checked against its own URL with no lookup table. On Windows:

certutil -hashfile <file> SHA256

The per-release MANIFEST.txt lists the same hashes, and each manifest has a matching MANIFEST.sha256 beside it.

* Four archives are marked above. Three of them are tarballs GitLab and GitHub generate on demand and do not guarantee identical bytes over time, so no upstream hash of record exists for them; the fourth is Navarre's own libVLC build recipe, which has no upstream at all. For all four, the SHA-256 published here is of the exact bytes we mirrored - that is the authoritative copy, and it is why we mirror them rather than linking to them.

Licence texts

The full text of every licence, plus per-component notices, ships inside the installer at Navarre\licenses\THIRD_PARTY_NOTICES.md. Your rights under these licences are described in Navarre's terms.

One honest caveat about the 1.0.42 installer. The notices file inside it still opens with a DRAFT header and does not yet list the libVLC runtime or its components, and the licence texts it carries cover the GStreamer stack only. That is a gap in the installer's own paperwork, and the corrected notices file rides the next installer. It changes nothing about this offer: every component the notices file omits is listed on this page and in the 1.0.42 manifest, every archive is downloadable now, and the written offer above stands for anything you cannot reach. From Navarre 2.0.5 on, the installer carries the corrected notices file, which covers the libVLC runtime and its components.

Contact

support@navarre.tv · Navarre Enterprises LLC

Navarre is an independent product and is not affiliated with, endorsed by, or sponsored by Plex, Emby, the Jellyfin project, The Movie Database (TMDB), Tailscale, Google, Amazon, or any other company named on this site. Plex, Emby, Jellyfin, TMDB, Android TV, Google TV, Google Play, YouTube, Amazon, Windows, and Docker are trademarks of their respective owners, used only to describe compatibility. Tailscale is a trademark of Tailscale Inc. This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.