# Third-party software notices

This website uses the following open-source packages, served from the same site. Commercial use is permitted under their respective licenses. Keep their copyright/license notices in redistributed source and bundles.

- pdf-lib — MIT, https://github.com/Hopding/pdf-lib
- PDF.js / pdfjs-dist — Apache-2.0, https://github.com/mozilla/pdf.js (includes separate font/CMap notices in distributed PDF.js assets)
- fflate — MIT, https://github.com/101arrowz/fflate
- PapaParse — MIT, https://github.com/mholt/PapaParse
- jsdiff / diff — BSD-3-Clause, https://github.com/kpdecker/jsdiff
- Tesseract.js 7.0.0 — Apache-2.0, https://github.com/naptha/tesseract.js
- tesseract.js-core 7.0.0 — Apache-2.0, https://github.com/naptha/tesseract.js-core
- English tessdata_fast — Apache-2.0, https://github.com/tesseract-ocr/tessdata_fast (revision `87416418657359cb625c412a48b6e1d6d41c29bd`)
- MODNet model — Apache-2.0, https://github.com/ZHKKKe/MODNet; ONNX conversion by Xenova, https://huggingface.co/Xenova/modnet (revision `fa2fa546052fba4c08921230a26cc69a333fca12`)
- ONNX Runtime Web 1.23.2 — MIT, https://github.com/microsoft/onnxruntime; includes its original ThirdPartyNotices.txt
- Vite — MIT (build tool), https://github.com/vitejs/vite
- esbuild — MIT (build tool), https://github.com/evanw/esbuild

Exact resolved versions are pinned in pnpm-lock.yaml. Original package license files are included in dist/licenses/ by the release process. Input files and generated outputs remain subject to their original rights; these licenses do not grant rights to files supplied by users.

## Browser AI distribution

AI runtime binaries and models are self-hosted under `public/ai/` and copied into `dist/ai/`. Original license texts and ONNX Runtime third-party notices are preserved under `public/ai/licenses/` and distributed at `/ai/licenses/`. Do not remove those files when deploying. The source asset lock records versions, upstream sources, byte sizes, and SHA-256 checksums. `pnpm vendor:ai` explicitly downloads pinned upstream files; ordinary builds verify the retained copies.

The MODNet upstream repository explicitly licenses its code, models, and demos under Apache-2.0, excluding the GIF files under `doc/gif`. This website does not redistribute those GIFs. The retained ONNX model is byte-identical to its pinned upstream copy; it is split into four static binary parts for distribution and reconstructed before inference. The English traineddata file is gzip-compressed for delivery. License notices are retained for those packaging changes.

Apache-2.0 and MIT do not require a paid inference API or per-use royalty. Their notice and redistribution conditions still apply. They do not guarantee hosting availability, browser performance, recognition accuracy, or rights to users' input/output media.

## Browser Office to PDF distribution

The three desktop beta tools use a pinned LibreOffice WebAssembly build. The **wrapper's MIT license does not license the LibreOffice engine as a whole**. Commercial use is allowed subject to each applicable license, source-availability requirement, and notice condition. This is an experimental third-party browser build, not an official LibreOffice or Microsoft product; no affiliation or endorsement is implied.

| Component | Pinned source | License and retained notices |
| --- | --- | --- |
| eze-paz/libreoffice-wasm wrapper and build tooling, v0.2.0 | [revision f01a1827a39d4d9edede31a3512b9c9151ca31b9](https://github.com/eze-paz/libreoffice-wasm/tree/f01a1827a39d4d9edede31a3512b9c9151ca31b9) | MIT; [original wrapper license](public/vendor/office/LICENSES/wrapper-MIT.txt). Original wrappers, build options, patches, and post-link tools are preserved in [source/](public/vendor/office/source/README.md). |
| LibreOffice executable and data | [core revision 7528c0d406012e10c6ce34c3f24bf277302ec695](https://git.libreoffice.org/core/+/7528c0d406012e10c6ce34c3f24bf277302ec695), [downloadable source archive](https://github.com/LibreOffice/core/archive/7528c0d406012e10c6ce34c3f24bf277302ec695.tar.gz) | MPL-2.0 plus component-specific terms; retain the complete [LibreOffice license collection](public/vendor/office/LICENSES/LibreOffice-LICENSE.txt) and [NOTICE](public/vendor/office/LICENSES/LibreOffice-NOTICE.txt). |
| Fonts and other components bundled inside LibreOffice's data image | Exact font inventory: [bundled-fonts.json](public/vendor/office/source/bundled-fonts.json) | The full LibreOffice license collection contains separate component and font notices. These are not all MIT and must remain with the runtime. |
| Additional Noto Sans KR variable font, version 2.004, weight axis 100–900 | [google/fonts revision b38c5c93af322c45f633e17ac440ec1e6c94d489](https://github.com/google/fonts/tree/b38c5c93af322c45f633e17ac440ec1e6c94d489/ofl/notosanskr), underlying [noto-cjk revision 523d033d6cb47f4a80c58a35753646f5c3608a78](https://github.com/notofonts/noto-cjk/tree/523d033d6cb47f4a80c58a35753646f5c3608a78) | SIL Open Font License 1.1; [original OFL and copyright notice](public/vendor/office/LICENSES/NotoSansKR-OFL.txt), [font metadata](public/vendor/office/source/font/METADATA.pb). The retained font is unmodified. |

The public deployment preserves `/vendor/office/NOTICE.md`, `/vendor/office/LICENSES/`, and `/vendor/office/source/`. [The distribution notice](public/vendor/office/NOTICE.md) identifies the source revisions, source archive, Emscripten 4.0.10 build, build options, source patch, and cooperative-thread/JSPI post-link tools. Keep those source locations usable and supply the corresponding MPL-covered source and any distributed modifications under the MPL. Do not impose terms that restrict recipients' MPL rights. The MPL applies to its covered files; bundling them does not by itself relicense independent site code. See [Mozilla's distribution and source guidance](https://www.mozilla.org/en-US/MPL/2.0/FAQ/).

Noto Sans KR is included for both English and Korean Office tools. OFL permits commercial bundling and document embedding; retain the font's original copyright/license notice when redistributing it. Do not sell the font by itself, and observe Reserved Font Name rules if modifying it. Embedding the font in a generated PDF does not make the document itself OFL-licensed. See [SIL's OFL FAQ](https://openfontlicense.org/ofl-faq/).

Engine/data binaries are divided into independent gzip-compressed chunks for static-host file limits. This packaging does not alter the reassembled executable or data bytes. The asset manifest records compressed, decoded, and original whole-file hashes; the lock also covers original notices and source/build records. `node scripts/vendor-office-assets.mjs` explicitly fetches pinned sources; `node scripts/verify-office-assets.mjs` checks retained copies offline. Ordinary builds must not silently replace the engine or omit license/source records. License terms do not promise browser compatibility, conversion fidelity, or rights to users' documents.

## Internal test photograph

The NASA/Bill Stafford Jessica Watkins portrait (`jsc2017e116351`) is an internal validation fixture from https://images.nasa.gov/details/jsc2017e116351. It is not included in public site assets or used as a promotional demo. NASA's imagery/likeness rules and attribution guidance are separate from the software licenses: https://www.nasa.gov/nasa-brand-center/images-and-media/ . No NASA endorsement is implied.