Is TripoSG just MIT, or does its code include third-party parts under other agreements, and which files come from where?

At commit fc5c40990181e2a756c4e0b1c2f4d6b5202faf8c TripoSG's root licence is MIT, but its NOTICE lists four third-party sources: BRIA RMBG-1.4 (licence bria-rmbg-1.4), Diffusers (Apache 2.0), HunyuanDiT (Tencent Hunyuan Community License) and FlashVDM (Tencent Hunyuan FlashVDM Community License). In the tree, RMBG is the file scripts/briarmbg.py; HunyuanDiT is declared in the header of triposg_transformer.py, which embeds the agreement text; FlashVDM's agreement is a second licence file in triposg/, and the flash decoder functions in inference_utils.py and attention_processor.py share much text with FlashVDM's files. The README has no licence section. Curator qualifications: All file-level statements were re-read from pinned bytes fetched by the curator; the six work copies are byte-identical. The README has 0 case-insensitive hits for 'licen'. Independent overlap measure (curator's own code, not the producer script: whitespace-stripped lines of 12+ characters in each function body that also occur anywhere in FlashVDM volume_decoders.py): flash_extract_geometry 103/136, extract_near_surface_volume_fn 49/74, generate_dense_grid_points_2 13/14. Producer counts: 100/128, 45/60, 13/14. Same direction, different denominators (counting method). Neither count is a finding about copying or licence scope. Record the overlap as a method-dependent text measurement with both counts. The producer's FlashTripoSGAttnProcessor2_0 29/109 figure was not re-measured. Add: briarmbg.py states 'Copyright belongs to briaai', and the repository vendors it alongside the MIT root LICENSE with no file-level licence other than NOTICE's 'License: bria-rmbg-1.4'. Evidence status: statements located in the cited sources by a correlated desk review (Claude); not executed; not independently reviewed.

{
  "citations": [
    {
      "url": "https://github.com/VAST-AI-Research/TripoSG/tree/fc5c40990181e2a756c4e0b1c2f4d6b5202faf8c",
      "note": "raw GET at pinned commit: triposg/LICENSE (byte-identical to producer work copy); raw GET at pinned commit: triposg/models/transformers/triposg_transformer.py (byte-identical to producer work copy); raw GET at pinned commit: scripts/briarmbg.py (byte-identical to producer work copy); raw GET at pinned commit: scripts/inference_triposg.py (byte-identical to producer work copy); raw GET at pinned commit: triposg/inference_utils.py (byte-identical to producer work copy); raw GET at pinned commit: flashvdm_decoder/volume_decoders.py (byte-identical to producer work copy)"
    },
    {
      "url": "https://github.com/Tencent/FlashVDM/tree/d16f5b99b5185170e4cf14d5568f2264ba5894d0",
      "note": "raw GET at pinned commit: triposg/LICENSE (byte-identical to producer work copy); raw GET at pinned commit: triposg/models/transformers/triposg_transformer.py (byte-identical to producer work copy); raw GET at pinned commit: scripts/briarmbg.py (byte-identical to producer work copy); raw GET at pinned commit: scripts/inference_triposg.py (byte-identical to producer work copy); raw GET at pinned commit: triposg/inference_utils.py (byte-identical to producer work copy); raw GET at pinned commit: flashvdm_decoder/volume_decoders.py (byte-identical to producer work copy)"
    }
  ]
}