Hier stellen wir die Software-Stückliste (Software Bill of Materials, SBOM) der Gerätesoftware des Atendu Mini frei zugänglich bereit – als Information nach Anhang II Nr. 9 der Verordnung (EU) 2024/2847 (Cyber Resilience Act). Format: CycloneDX 1.5, JSON.
Jede Stückliste beschreibt genau eine veröffentlichte Version des Atendu Launchers: die App-Datei mit Prüfsumme und Signaturzertifikat, alle enthaltenen Bestandteile mit Prüfsummen, Fremdbestandteile mit Lieferant und Lizenz sowie die Laufzeitplattform (Android-System des Gerätelieferanten) als oberste Abhängigkeit. Welche Version auf deinem Stick läuft, zeigen die Einstellungen unter „Software-Update“.
Atendu Launcher 6.38 (Build 106, 2026-11-03): atendu-launcher-latest.cdx.json
| Version | Build | Erstellt | Bestandteile | Datei |
|---|---|---|---|---|
| 6.38 | 106 | 2026-11-03 | 19 | atendu-launcher-6.38+106.cdx.json |
| 6.37 | 105 | 2026-11-02 | 19 | atendu-launcher-6.37+105.cdx.json |
| 6.36 | 104 | 2026-11-02 | 19 | atendu-launcher-6.36+104.cdx.json |
| 6.35 | 103 | 2026-11-02 | 19 | atendu-launcher-6.35+103.cdx.json |
| 6.34 | 102 | 2026-11-01 | 17 | atendu-launcher-6.34+102.cdx.json |
| 6.33 | 101 | 2026-10-31 | 17 | atendu-launcher-6.33+101.cdx.json |
| 6.32 | 100 | 2026-10-25 | 17 | atendu-launcher-6.32+100.cdx.json |
| 6.31 | 99 | 2026-10-24 | 17 | atendu-launcher-6.31+99.cdx.json |
| 6.30 | 98 | 2026-10-24 | 17 | atendu-launcher-6.30+98.cdx.json |
| 6.29 | 97 | 2026-10-21 | 16 | atendu-launcher-6.29+97.cdx.json |
| 6.28 | 96 | 2026-10-21 | 16 | atendu-launcher-6.28+96.cdx.json |
| 6.27 | 95 | 2026-10-19 | 16 | atendu-launcher-6.27+95.cdx.json |
| 6.26 | 94 | 2026-10-17 | 16 | atendu-launcher-6.26+94.cdx.json |
| 6.25 | 93 | 2026-10-17 | 16 | atendu-launcher-6.25+93.cdx.json |
| 6.24 | 92 | 2026-10-17 | 16 | atendu-launcher-6.24+92.cdx.json |
| 6.23 | 91 | 2026-10-11 | 16 | atendu-launcher-6.23+91.cdx.json |
Die Gerätesoftware enthält folgende Fremdbestandteile. Dieselben Angaben liegen in der App-Datei (assets/LICENSES.txt, Kopie).
QRCode.js (davidshimjs, github.com/davidshimjs/qrcodejs), MIT-Lizenz, Copyright (c) 2012 davidshimjs; beruht auf dem QR Code Generator von Kazuhiko Arase (MIT-Lizenz, Copyright (c) 2009 Kazuhiko Arase).
MIT License Copyright (c) 2012 davidshimjs Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Roboto (Schrift, Google / Christian Robertson, github.com/googlefonts/roboto), Copyright 2011 Google Inc., Apache License 2.0 – Lizenztext: LICENSE-2.0.txt.
Laufzeitplattform: Der Atendu Mini läuft auf dem Android-System des Gerätelieferanten (Boxput, Rockchip RK3528). Es enthält Open-Source-Software, insbesondere den Linux-Kernel (GPL-2.0) und das Android Open Source Project (Apache-2.0). Anfragen zum Quellcode dieser Plattform-Bestandteile nimmt info@atendu.eu entgegen; wir leiten sie an den Gerätelieferanten weiter.
Die Lizenzhinweise der Plattform selbst liegen auf dem Gerät unter /system/etc/NOTICE.xml.gz und /vendor/etc/NOTICE.xml.gz. Je ausgelieferter Firmware stehen hier Kopien beider Dateien und die Kernel-Konfiguration des Builds (/proc/config.gz); welche Firmware ein Stick trägt, zeigt die Modellbezeichnung in den Android-Eigenschaften (S13Air.<Firmware>).
| Firmware | Kernel | Android-Build | Dateien |
|---|---|---|---|
| E1010.667 | Linux 6.1.118 Build #16, Wed Sep 9 14:26:51 CST 2026 | Android 14 UTT2.241219.001 | System, Vendor, config.gz |
Sicherheitslücken melden: atendu.eu/security
Konformitätserklärung und Produktinformationen: atendu.eu/doc
This page provides free access to the software bill of materials (SBOM) of the Atendu Mini device software, as information under Annex II point 9 of Regulation (EU) 2024/2847 (Cyber Resilience Act). Format: CycloneDX 1.5, JSON.
Each SBOM describes exactly one released version of the Atendu Launcher: the app file with checksum and signing certificate, every contained component with checksums, third-party components with supplier and licence, and the runtime platform (the device supplier's Android system) as the top-level dependency. The version running on your stick is shown in the settings under “Software-Update”.
Atendu Launcher 6.38 (build 106, 2026-11-03): atendu-launcher-latest.cdx.json
| Version | Build | Created | Components | File |
|---|---|---|---|---|
| 6.38 | 106 | 2026-11-03 | 19 | atendu-launcher-6.38+106.cdx.json |
| 6.37 | 105 | 2026-11-02 | 19 | atendu-launcher-6.37+105.cdx.json |
| 6.36 | 104 | 2026-11-02 | 19 | atendu-launcher-6.36+104.cdx.json |
| 6.35 | 103 | 2026-11-02 | 19 | atendu-launcher-6.35+103.cdx.json |
| 6.34 | 102 | 2026-11-01 | 17 | atendu-launcher-6.34+102.cdx.json |
| 6.33 | 101 | 2026-10-31 | 17 | atendu-launcher-6.33+101.cdx.json |
| 6.32 | 100 | 2026-10-25 | 17 | atendu-launcher-6.32+100.cdx.json |
| 6.31 | 99 | 2026-10-24 | 17 | atendu-launcher-6.31+99.cdx.json |
| 6.30 | 98 | 2026-10-24 | 17 | atendu-launcher-6.30+98.cdx.json |
| 6.29 | 97 | 2026-10-21 | 16 | atendu-launcher-6.29+97.cdx.json |
| 6.28 | 96 | 2026-10-21 | 16 | atendu-launcher-6.28+96.cdx.json |
| 6.27 | 95 | 2026-10-19 | 16 | atendu-launcher-6.27+95.cdx.json |
| 6.26 | 94 | 2026-10-17 | 16 | atendu-launcher-6.26+94.cdx.json |
| 6.25 | 93 | 2026-10-17 | 16 | atendu-launcher-6.25+93.cdx.json |
| 6.24 | 92 | 2026-10-17 | 16 | atendu-launcher-6.24+92.cdx.json |
| 6.23 | 91 | 2026-10-11 | 16 | atendu-launcher-6.23+91.cdx.json |
The device software contains the following third-party components. The same information ships inside the app file (assets/LICENSES.txt, copy).
QRCode.js (davidshimjs, github.com/davidshimjs/qrcodejs), MIT License, Copyright (c) 2012 davidshimjs; based on the QR Code Generator by Kazuhiko Arase (MIT License, Copyright (c) 2009 Kazuhiko Arase).
MIT License Copyright (c) 2012 davidshimjs Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Roboto (typeface, Google / Christian Robertson, github.com/googlefonts/roboto), Copyright 2011 Google Inc., Apache License 2.0 – licence text: LICENSE-2.0.txt.
Runtime platform: The Atendu Mini runs on the device supplier's Android system (Boxput, Rockchip RK3528). It contains open-source software, in particular the Linux kernel (GPL-2.0) and the Android Open Source Project (Apache-2.0). Source-code requests for these platform components can be sent to info@atendu.eu; we forward them to the device supplier.
The platform's own licence notices are stored on the device at /system/etc/NOTICE.xml.gz and /vendor/etc/NOTICE.xml.gz. For every shipped firmware, copies of both files and the kernel configuration of that build (/proc/config.gz) are listed here; the firmware a stick carries is part of its model name in the Android properties (S13Air.<firmware>).
| Firmware | Kernel | Android-Build | Files |
|---|---|---|---|
| E1010.667 | Linux 6.1.118 Build #16, Wed Sep 9 14:26:51 CST 2026 | Android 14 UTT2.241219.001 | System, Vendor, config.gz |
Report a vulnerability: atendu.eu/security
Declaration of conformity and product information: atendu.eu/doc