Third-party software

Last updated: 2026-09-08

Bake'n Deck for Mac bundles three libraries licensed under the GNU Lesser General Public License: FFmpeg, LAME and the SoX Resampler library. This page is the source offer the LGPL requires. It records the exact versions, the source tarballs with their SHA256 hashes, every change made to them and the options they were built with, so that anyone can rebuild the bundled binaries or replace them with their own.

Bundled LGPL components

Shipped in Bake'n Deck for Mac 1.0, built by scripts/build-ffmpeg.sh:

Component	License	Source
FFmpeg 9.0.1	LGPL 2.1 or later	ffmpeg-9.0.1.tar.xz `sha256 cf38e0e28c7e5605942c4a77755349b0145804a397af37eb1fb4c77cb237f635`
LAME 3.100	GNU Library GPL 2 or later	lame-3.100.tar.gz `sha256 ddfe36cab873794038ae2c1210557ad34857a4b6bdc515785d1da9e175b1da1e`
libsoxr 0.1.3	LGPL 2.1 or later	soxr-0.1.3-Source.tar.xz `sha256 b111c15fdc8c029989330ff559184198c161100a59312f5dc19ddeb9b5a15889`

FFmpeg is built without --enable-gpl and without --enable-nonfree, so no GPL-licensed FFmpeg component is present. --disable-version3 keeps every component at LGPL 2.1 rather than LGPL 3.

Source offer

The links above point at the unmodified upstream tarballs, and the hashes identify them exactly. If any of those links stops working, or you would rather receive the sources directly, ask and you will get the complete corresponding source code for the bundled libraries at no charge beyond the cost of delivery. This offer is valid for at least three years after the last distribution of the version in question.

Requests, and any question about this page: open an issue at github.com/M-Igashi/baken/issues. A GitHub account is free.

Changes made to the sources

FFmpeg and libsoxr are used unmodified.
LAME 3.100 gets one change, applied by the build script: the line lame_init_old is deleted from include/libmp3lame.sym. LAME 3.100 lists that symbol for export although it no longer defines it, and the macOS linker rejects the symbol file because of it. The one-line deletion is visible in the published build script, and that is the whole of it.

Should a real patch ever become necessary, it will be published on this page alongside the version it applies to.

How the binaries were built

Universal (arm64 and x86_64, merged with lipo), deployment target macOS 14.0, shared libraries only. LAME is configured with --disable-static --enable-shared --disable-frontend --disable-gtktest; libsoxr with CMake and -DBUILD_SHARED_LIBS=ON -DBUILD_TESTS=OFF -DBUILD_EXAMPLES=OFF -DWITH_OPENMP=OFF -DWITH_LSR_BINDINGS=OFF. FFmpeg starts from --disable-everything and enables only what Bake'n Deck calls:

--disable-everything --disable-programs --enable-ffmpeg --enable-ffprobe
--disable-doc --disable-debug --disable-autodetect --disable-network
--disable-static --enable-shared --enable-pic --disable-avdevice
--disable-gpl --disable-nonfree --disable-version3
--enable-libmp3lame --enable-libsoxr
--enable-protocol=file,pipe
--enable-demuxer=flac,wav,aiff,mp3,mov,aac,image2,image_jpeg_pipe,image_png_pipe
--enable-muxer=flac,wav,aiff,mp3,ipod,mp4,null,image2
--enable-decoder=flac,mp3,mp3float,aac,alac,mjpeg,png
--enable-decoder=pcm_s8,pcm_u8,pcm_s16le,pcm_s16be,pcm_s24le,pcm_s24be,pcm_s32le,pcm_s32be,pcm_f32le,pcm_f32be,pcm_f64le,pcm_f64be
--enable-encoder=flac,aac,alac,libmp3lame,mjpeg
--enable-encoder=pcm_s8,pcm_u8,pcm_s16le,pcm_s16be,pcm_s24le,pcm_s24be,pcm_s32le,pcm_s32be,pcm_f32le,pcm_f32be,pcm_f64le,pcm_f64be
--enable-parser=flac,mpegaudio,aac,mjpeg,png
--enable-bsf=aac_adtstoasc
--enable-filter=loudnorm,volume,aresample,aformat,anull,format,null,scale,trim,atrim,copy
--enable-swresample --enable-swscale --enable-zlib

The same list, together with the versions and hashes, is written to BUILDINFO.txt next to the built binaries. Running ffmpeg -buildconf on the bundled helper prints the configuration it was actually built with.

Replacing the libraries with your own build

Nothing is statically linked. Inside Bake'n Deck.app the libraries live as separate dynamic libraries and the two FFmpeg programs as separate executables:

Contents/Frameworks/libav*.dylib, libswresample, libswscale, libmp3lame, libsoxr — install names are @rpath/<name>
Contents/Helpers/ffmpeg and Contents/Helpers/ffprobe — sandboxed helpers with an rpath of @executable_path/../Frameworks

To run the app against your own build of any of these libraries, build it with the same install name, drop it into Contents/Frameworks, and re-sign the bundle with your own identity (codesign --force --deep --sign - "Bake'n Deck.app" is enough for local use). Replacing a file invalidates the App Store signature, which is why the re-sign is needed.

License texts

GNU Lesser General Public License, version 2.1 (FFmpeg, libsoxr)
GNU Library General Public License, version 2 (LAME)

Both texts are also bundled with the app and shown in Acknowledgements.

The command-line tool

The free baken CLI bundles nothing. It calls whatever ffmpeg and ffprobe are on your PATH, so the LGPL obligations above do not apply to it. baken itself is MIT licensed.

Other components

baken-core and mp3rgain, the processing engine shared with the CLI: MIT.
UniFFI, which generates the Swift bindings: MPL 2.0, used unmodified.
The remaining Rust dependencies are MIT, Apache-2.0, MPL-2.0, Zlib, Unicode-3.0 or 0BSD. The full list with its notices ships inside the app and is shown in Acknowledgements.

Rekordbox, CDJ and Pioneer DJ are trademarks of AlphaTheta Corporation. Bake'n Deck is not affiliated with or endorsed by AlphaTheta Corporation.