Licenses and components
This project-wide inventory comes from the installed dependency lockfile. It is conservative: some packages support Node commands or types and are not part of the browser bundle. Each site build isolates codec assets to the tool that uses them.
Each component is governed by its own license. The original license texts and notices are linked below.
HEIC converter source and licensing
The HEIC converter is confined to private-heic-jpg. Its heic-to 1.6.7 package declares LGPL-3.0; the bundled source identifies libheif 1.23.7 and libde265 1.0.16. The installed wrapper source, versioned upstream source archives, and applicable license texts are included below. The libheif archive contains its Emscripten build script and CI toolchain version. The exact compiled HEIC binary was not independently reproduced in this workspace; this notice is not a patent clearance or legal opinion.
- Upstream heic-to 1.6.7, repository snapshot
SHA-256:4ff1f10fda1ba04a68317fdc1577599d727926953727d45c808c98c5fbff10ad - Native libheif sources 1.23.7, version stated in bundled JS
SHA-256:90e389caad285ca4946461d56d1c115e56bcbb5141d9038050282af91064fbc7 - Native libde265 sources 1.0.16, version stated in bundled JS
SHA-256:ed12c931759c1575848832f70db5071a001ac813db4e4f568ee08aef6e234d4e - Installed npm JS source, prebuilt libheif JS and wrapper build script; not a replacement for the native C++ source
SHA-256:f0af001740a9c71d10579be4c9536191ce73ec66abf7d3b268d72171b40594af
AVIF converter components
The AVIF fallback is confined to avif-jpeg-tool. @jsquash/avif 2.1.1 declares Apache-2.0 and bundles a decoder built from libavif 1.0.1 and libaom 3.7.0. The distributed WASM matches the pinned upstream package binary by SHA-256. Apache, BSD, AOM patent, Emscripten, musl, and LLVM runtime license texts are included below. The binary was not independently rebuilt in this workspace; this notice is not a patent clearance or legal opinion.
License texts and notices
- Emscripten-3.1.57-LICENSE.txt
- GPL-3.0.txt
- jsquash-apache-2.0.txt
- libaom-license.txt
- libaom-patents.txt
- libavif-license.txt
- libde265-COPYING.txt
- libheif-COPYING.txt
- LLVM-libcxx-LICENSE.TXT
- musl-COPYRIGHT.txt
- wasm-feature-detect-apache-2.0.txt
Installed dependency notices
| Component | Version | Declared license | License texts and notices |
|---|---|---|---|
| @jsquash/avif | 2.1.1 | Apache-2.0 | Notice 1 |
| @mixmark-io/domino | 2.2.0 | BSD-2-Clause | Notice 1 |
| @napi-rs/canvas | 1.0.13 | MIT | Notice 1 |
| @napi-rs/canvas-win32-x64-msvc | 1.0.13 | MIT | Notice 1 |
| @pdf-lib/fontkit | 1.1.1 | MIT | Notice 1 |
| @pdf-lib/standard-fonts | 1.0.0 | MIT | Notice 1 |
| @pdf-lib/upng | 1.0.1 | MIT | Notice 1 |
| @types/diff | 7.0.2 | MIT | Notice 1 |
| @types/node | 26.6.6 | MIT | Notice 1 |
| @types/trusted-types | 2.0.7 | MIT | Notice 1 |
| ansi-regex | 5.0.1 | MIT | Notice 1 |
| ansi-styles | 4.3.0 | MIT | Notice 1 |
| argparse | 2.0.1 | Python-2.0 | Notice 1 |
| camelcase | 5.3.1 | MIT | Notice 1 |
| cliui | 6.0.0 | ISC | Notice 1 |
| color-convert | 2.0.1 | MIT | Notice 1 |
| color-name | 1.1.4 | MIT | Notice 1 |
| commander | 2.20.3 | MIT | Notice 1 |
| decamelize | 1.2.0 | MIT | Notice 1 |
| diff | 9.0.0 | BSD-3-Clause | Notice 1 |
| dijkstrajs | 1.0.3 | MIT | Notice 1 |
| discontinuous-range | 1.0.0 | MIT | Notice 1 |
| docx | 9.15.0 | MIT | Notice 1 |
| dompurify | 3.4.17 | (MPL-2.0 OR Apache-2.0) | Notice 1 Notice 2 Notice 3 |
| emoji-regex | 8.0.0 | MIT | Notice 1 |
| fflate | 0.8.3 | MIT | Notice 1 |
| find-up | 4.1.0 | MIT | Notice 1 |
| get-caller-file | 2.0.5 | ISC | Notice 1 |
| heic-to | 1.6.7 | LGPL-3.0 | Notice 1 |
| is-fullwidth-code-point | 3.0.0 | MIT | Notice 1 |
| locate-path | 5.0.0 | MIT | Notice 1 |
| marked | 18.1.2 | MIT | Notice 1 |
| moo | 0.5.3 | BSD-3-Clause | Notice 1 |
| nanoid | 6.0.2 | MIT | Notice 1 |
| nearley | 2.20.1 | MIT | Notice 1 |
| p-limit | 2.3.0 | MIT | Notice 1 |
| p-locate | 4.1.0 | MIT | Notice 1 |
| p-try | 2.2.0 | MIT | Notice 1 |
| pako | 1.0.11 | (MIT AND Zlib) | Notice 1 |
| papaparse | 5.7.0 | MIT | Notice 1 |
| path-exists | 4.0.0 | MIT | Notice 1 |
| pdf-lib | 1.17.1 | MIT | Notice 1 |
| pdfjs-dist | 6.4.299 | Apache-2.0 | Notice 1 Notice 2 Notice 3 Notice 4 Notice 5 Notice 6 Notice 7 Notice 8 Notice 9 Notice 10 Notice 11 |
| pngjs | 5.0.0 | MIT | Notice 1 |
| qrcode | 1.5.4 | MIT | Notice 1 |
| railroad-diagrams | 1.0.0 | CC0-1.0 | Notice 1 |
| randexp | 0.4.6 | MIT | Notice 1 |
| require-directory | 2.1.1 | MIT | Notice 1 |
| require-main-filename | 2.0.0 | ISC | Notice 1 |
| ret | 0.1.15 | MIT | Notice 1 |
| set-blocking | 2.0.0 | ISC | Notice 1 |
| sql-formatter | 15.9.0 | MIT | Notice 1 |
| string-width | 4.2.3 | MIT | Notice 1 |
| strip-ansi | 6.0.1 | MIT | Notice 1 |
| tslib | 1.14.1 | 0BSD | Notice 1 |
| turndown | 7.2.4 | MIT | Notice 1 |
| turndown-plugin-gfm | 1.0.2 | MIT | Notice 1 |
| undici-types | 8.9.0 | MIT | Notice 1 |
| wasm-feature-detect | 1.9.0 | Apache-2.0 | Notice 1 |
| which-module | 2.0.1 | ISC | Notice 1 |
| wrap-ansi | 6.2.0 | MIT | Notice 1 |
| y18n | 4.0.3 | ISC | Notice 1 |
| yaml | 2.9.1 | ISC | Notice 1 |
| yargs | 15.4.1 | MIT | Notice 1 |
| yargs-parser | 18.1.3 | ISC | Notice 1 |