The MSYS2 subdirectory contains exact source-only packages, including
upstream sources, packaging patches and PKGBUILD recipes, for dav1d,
libgcc and libwinpthread. Native/Processing/windows/source-dependencies.json
records versions, official URLs, archive hashes, official binary-package
hashes and their verified matching runtime DLL hashes. All individual
upstream licenses remain intact; GCC includes its runtime exception.
The GCC source package is included without relying on an exemption
from source availability. No proprietary app source is part of it.
Use the included source packages/PKGBUILD recipes and MSYS2's
makepkg-mingw toolchain to build those pinned versions. See
https://www.msys2.org/dev/new-package/ . The FFmpeg recipe's pacman
command names dependencies without pinning; substitute/install these
recorded versions when reproducing the audited build, rather than
silently accepting a newer repository package. No rebuild was performed
by this exporter. The public runtime hashes were verified on 2026-10-21.
