FERVIST PDF — Third-Party Software Notices ========================================== FERVIST PDF runs entirely in your browser and self-hosts every asset (no CDN or remote font at runtime). It is built with the open-source software listed below. This list reflects the software actually shipped to your browser in this release. Full license texts referenced here are served alongside this file: /licenses/LGPL-3.0.txt /licenses/GPL-3.0.txt /licenses/Apache-2.0.txt /licenses/HEIC-LGPL-SOURCE-OFFER.txt Every component below is under a permissive (attribution-only) license EXCEPT the HEIC image decoder (libheif/libde265), which is LGPL-3.0-or-later — see Section 5. 1. SHIPPED TO YOUR BROWSER (runtime) ------------------------------------ MIT: @cantoo/pdf-lib 2.7.4 (© 2019 Andrew Dillon; fork © Cantoo Scribe) @pdf-lib/fontkit 1.1.1, @pdf-lib/standard-fonts 1.0.0, @pdf-lib/upng 1.0.1 react 19.2.7, react-dom 19.2.7, scheduler 0.27.0 (© Meta Platforms, Inc.) utif 3.1.0 (© 2017 Photopea), fflate 0.8.3 (© Arjun Barrett) harfbuzzjs 1.6.0 (© HarfBuzz project) — RTL/CJK text shaping, lazy-loaded bidi-js 1.0.3 (© Jason Johnston) — Unicode Bidirectional Algorithm heic2any 0.0.4 (© 2020 Alex Corvi) — wrapper only; its decoder is LGPL, see §5 gifshot (© 2017 Yahoo Inc.) — HEIC→GIF path crypto-js 4.2.0, pako 1.0.11 (MIT AND Zlib), node-html-better-parser 1.5.8, html-entities 2.6.0, color / color-convert / color-name / color-string, simple-swizzle 0.2.4, is-arrayish 0.3.4, bmp-js 0.1.0, zlibjs 0.3.1, regenerator-runtime 0.13.11, is-url 1.2.4 Apache-2.0 (see /licenses/Apache-2.0.txt): pdfjs-dist 6.2.108 (© Mozilla Foundation and pdf.js contributors) tesseract.js 7.0.0, tesseract.js-core 6.1.2/7.0.0 (© Tesseract.js contributors) @jspawn/qpdf-wasm 0.0.2 (© jsscheller, wrapper) — see §4 for the embedded engine idb-keyval 6.3.0 (© Jake Archibald), wasm-feature-detect 1.8.0 (© Google LLC) 0BSD: tslib 2.8.1 (© Microsoft Corporation) The MIT license requires the copyright and permission notice to be retained; the copyrights above satisfy that. MIT license text is at the end of this file. 1a. OCR LANGUAGE MODELS (traineddata, static assets, lazy-fetched per language+tier) -------------------------------------------------------------------------------------- Self-hosted under /tesseract/{fast,best}/.traineddata.gz — a visitor only downloads the language(s) and tier they actually pick. All MIT (data), from github.com/naptha/tessdata (the 'fast' tier is fetched at build time from the project's own CDN, tessdata.projectnaptha.com/4.0.0_fast/, SHA-256 pinned per file and verified on every build — same upstream/license as the rest): eng (English) pol (Polish) deu (German) fra (French) nld (Dutch) ell (Greek) rus (Russian) ukr (Ukrainian) bul (Bulgarian) spa (Spanish) ita (Italian) por (Portuguese) ron (Romanian) ces (Czech) slk (Slovak) hrv (Croatian) slv (Slovenian) swe (Swedish) dan (Danish) nor (Norwegian) fin (Finnish) hun (Hungarian) tur (Turkish) lit (Lithuanian) ara (Arabic) heb (Hebrew) jpn (Japanese) kor (Korean) chi_sim (Simplified Chinese) 2. FONTS SHIPPED TO YOUR BROWSER --------------------------------- Self-hosted, lazy-fetched per script — you only download the face(s) your document actually needs. pdf.js standard fonts — Liberation Sans: SIL Open Font License 1.1 (digitized data © 2010 Google; © 2012 Red Hat, Inc.) pdf.js standard fonts — Foxit substitution set: BSD-3-Clause (© 2014 PDFium Authors) Noto Sans LGC (Latin/Greek/Cyrillic): SIL Open Font License 1.1 (© Google / notofonts.github.io contributors) Noto Sans Arabic / Noto Sans Hebrew: SIL Open Font License 1.1 (© Google / notofonts.github.io contributors) Noto Sans CJK — Simplified/Traditional Chinese, Japanese, Korean, Kana (5 faces): SIL Open Font License 1.1 (© Google / Adobe / notofonts/noto-cjk contributors, tag Sans2.004) Historical note: earlier product copy said "DejaVu" — that was the pre-remediation font choice; the text engine has used Noto since a prior wave. No DejaVu font asset is or was shipped in this release. 3. IN THE DEPENDENCY GRAPH BUT NOT SHIPPED (build/Node only) --------------------------------------------------------------- Verified absent from the client bundle: @napi-rs/canvas (+ -win32-x64-msvc), node-fetch, whatwg-url, tr46, webidl-conversions (BSD-2-Clause), opencollective-postinstall. 4. qpdf-WASM ENGINE — qpdf / zlib / libjpeg-turbo --------------------------------------------------- The optional Compress "Preserve" structural-optimization stage uses qpdf, compiled to WASM via @jspawn/qpdf-wasm. Full supply-chain provenance (exact upstream commits, per-file SHA-256 verified at every build) is recorded in this release's docs/adr/0008-qpdf-wasm-provenance.md. qpdf Apache License 2.0 © qpdf contributors zlib zlib License © Jean-loup Gailly and Mark Adler libjpeg-turbo BSD-3-Clause / IJG © The libjpeg-turbo Project This stage is optional and resource-gated; every run falls back to the pdf-lib-only "Preserve" output on any denial/failure. 5. HEIC DECODER — libheif / libde265 (LGPL-3.0-or-later) ----------------------------------------------------------- The HEIC tools (HEIC → JPG / HEIC → PDF) decode HEIC images on your device using libheif and its HEVC backend libde265, delivered via the MIT-licensed heic2any wrapper. Both libraries are LGPL-3.0-or-later, © struktur AG / Dirk Farin. libheif v1.4.0 (2019-era) LGPL-3.0-or-later © struktur AG / Dirk Farin libde265 1.0.2 LGPL-3.0-or-later © struktur AG / Dirk Farin The decoder ships as a single, separately-identifiable JavaScript worker (/_astro/heicWorker-*.js). In accordance with the LGPL-3.0: - full license texts: /licenses/LGPL-3.0.txt and /licenses/GPL-3.0.txt - corresponding source: /licenses/HEIC-LGPL-SOURCE-OFFER.txt (libheif v1.4.0 + libde265 v1.0.2 upstream source, available on request) - you may replace the standalone heicWorker file with your own libheif build. MIT License ----------- Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.