Source code
Navarre Enterprises LLC provides the complete corresponding source code for every copyleft component distributed with Navarre, for the exact version shipped, at no charge, for as long as we distribute the matching binaries. If an archive you need is missing or will not download, email support@navarre.tv and we will send it.
These archives are served from the same place as the installer, which is what the GNU LGPL version 2.1 section 4 asks for, and they are linked directly from the download page, which is what the GNU GPL version 3 section 6(d) asks for. Every file below is byte-for-byte the upstream release, mirrored and checksummed - nothing has been modified.
Releases
One manifest per Navarre release, listing every component in that exact build with its version, licence, and SHA-256. Old releases are never removed: installers stay in the wild long after a version is retired, and the obligation lasts as long as anyone is running a copy we conveyed.
| Navarre version | Status | Corresponding source | Manifest |
|---|---|---|---|
| 1.0.26 | Current release | Eclipse Temurin 17.0.19+10 (GPL-2.0 with Classpath Exception) | MANIFEST.txt |
| 1.0.25 | Superseded, still downloadable | Eclipse Temurin 17.0.19+10 (GPL-2.0 with Classpath Exception) | MANIFEST.txt |
| 1.0.24 | Superseded, still downloadable | Eclipse Temurin 17.0.19+10 (GPL-2.0 with Classpath Exception) | MANIFEST.txt |
| 1.0.23 | Superseded, still downloadable | Eclipse Temurin 17.0.19+10 (GPL-2.0 with Classpath Exception) | MANIFEST.txt |
Component index
Bundled in the Windows installer today
| Component | Version | Licence | Source archive | Size |
|---|---|---|---|---|
| temurin-jdk17u | 17.0.19+10 | GPL-2.0-only WITH Classpath-exception-2.0 | OpenJDK17U-jdk-sources_17.0.19_10.tar.gz | 104.0 MB |
| temurin-jdk17u-sha256 | 17.0.19+10 | GPL-2.0-only WITH Classpath-exception-2.0 | OpenJDK17U-jdk-sources_17.0.19_10.tar.gz.sha256.txt | 107 B |
Mirrored ahead of the release that will ship them
Navarre is adding a curated GStreamer media stack to the Windows app. Its sources are mirrored here in advance so they are already in place the day the binaries ship. These components are not in the installer you can download today.
| Component | Version | Licence | Source archive | Size |
|---|---|---|---|---|
| gstreamer | 1.26.6 | LGPL-2.1-or-later | gstreamer-1.26.6.tar.xz | 1.8 MB |
| gst-plugins-base | 1.26.6 | LGPL-2.1-or-later | gst-plugins-base-1.26.6.tar.xz | 2.4 MB |
| gst-plugins-good | 1.26.6 | LGPL-2.1-or-later | gst-plugins-good-1.26.6.tar.xz | 2.9 MB |
| gst-plugins-bad | 1.26.6 | LGPL-2.1-or-later | gst-plugins-bad-1.26.6.tar.xz | 7.4 MB |
| glib | 2.80.5 | LGPL-2.1-or-later | glib-2.80.5.tar.xz | 5.3 MB |
| glib-networking | 2.80.1 | LGPL-2.0-or-later | glib-networking-2.80.1.tar.xz | 284.0 KB |
| libsoup | 3.6.0 | LGPL-2.0-or-later | libsoup-3.6.0.tar.xz | 1.5 MB |
| orc | 0.4.41 | BSD-2-Clause | orc-0.4.41.tar.xz | 228.7 KB |
| flac | 1.4.3 | BSD-3-Clause | flac-1.4.3.tar.xz | 983.1 KB |
| libogg | 1.3.5 | BSD-3-Clause | libogg-1.3.5.tar.xz | 419.0 KB |
| libvorbis | 1.3.7 | BSD-3-Clause | libvorbis-1.3.7.tar.xz | 1.1 MB |
| opus | 1.5.2 | BSD-3-Clause | opus-1.5.2.tar.gz | 7.5 MB |
| mpg123 | 1.32.7 | LGPL-2.1-or-later | mpg123-1.32.7.tar.bz2 | 1.1 MB |
| taglib | 1.13.1 | LGPL-2.1-or-later OR MPL-1.1 | taglib-1.13.1.tar.gz | 1.3 MB |
| zlib | 1.3.1 | Zlib | zlib-1.3.1.tar.gz | 1.4 MB |
| pcre2 | 10.42 | BSD-3-Clause | pcre2-10.42.tar.bz2 | 1.7 MB |
| libpsl | 0.21.5 | MIT | libpsl-0.21.5.tar.gz | 7.3 MB |
| sqlite3 | 3.49.1 | blessing (public domain) | sqlite-amalgamation-3490100.zip | 2.7 MB |
| openssl | 3.5.0 | Apache-2.0 | openssl-3.5.0.tar.gz | 50.7 MB |
| libffi | meson-3.2.9999.3 | MIT | libffi-meson-3.2.9999.3.tar.gz * | 481.7 KB |
| proxy-libintl | 0.4 | LGPL-2.0-or-later | proxy-libintl-0.4.tar.gz * | 12.7 KB |
| cerbero | 1.26.6 | LGPL-2.1-or-later | cerbero-1.26.6.tar.gz * | 3.3 MB |
| gst1-java-core | 1.4.0 | LGPL-3.0-only | gst1-java-core-1.4.0-sources.jar | 406.6 KB |
Verifying a download
Every archive is content-addressed: its SHA-256 is the first part of its own filename, so a download can be checked against its own URL with no lookup table. On Windows:
certutil -hashfile <file> SHA256
The per-release MANIFEST.txt lists the same hashes, and each manifest has a matching MANIFEST.sha256 beside it.
* Three archives are marked above. GitLab and GitHub generate those tarballs on demand and do not guarantee identical bytes over time, so no upstream hash of record exists for them. The SHA-256 published here is of the exact bytes we mirrored - that is the authoritative copy, and it is why we mirror them rather than linking to them.
Licence texts
The full text of every licence, plus per-component notices, ships inside the installer at Navarre\licenses\THIRD_PARTY_NOTICES.md. Your rights under these licences are described in Navarre's terms.
Contact
support@navarre.tv · Navarre Enterprises LLC
Navarre is not affiliated with, endorsed by, or sponsored by the Jellyfin project.