# Third-party notices

Runtime assets are served locally and have not been modified. Package matches for the primary video and PDF runtime files were verified by SHA-256 against the listed npm tarballs. Image package versions are read from the bundled package metadata.

| Component | Version | License | Source |
|---|---|---|---|
| @ffmpeg/core | 0.12.10 | GPL-2.0-or-later | git+https://github.com/ffmpegwasm/ffmpeg.wasm.git |
| @ffmpeg/ffmpeg | 0.12.15 | MIT | git+https://github.com/ffmpegwasm/ffmpeg.wasm.git |
| @cantoo/pdf-lib | 2.11.1 | MIT | git+https://github.com/cantoo-scribe/pdf-lib.git |
| pdfjs-dist | 3.11.174 | Apache-2.0 | git+https://github.com/mozilla/pdfjs-dist.git |
| pdfjs-dist CMaps (cmaps/*.bcmap, Adobe) | 3.11.174 | BSD-3-Clause (pdfjs-dist-cmaps-LICENSE) | git+https://github.com/mozilla/pdfjs-dist.git |
| mediabunny | 1.56.2 | MPL-2.0 | git+https://github.com/Vanilagy/mediabunny.git |
| @jsquash/avif | 2.1.1 | Apache-2.0 | jamsinclair/jSquash |
| image-q | 4.0.0 | MIT | https://github.com/ibezkrovnyi/image-quantization |
| @jsquash/jpeg | 1.6.0 | Apache-2.0 | jamsinclair/jSquash |
| @jsquash/oxipng | 2.3.0 | Apache-2.0 | jamsinclair/jSquash/packages/oxipng |
| pako | 2.1.0 | (MIT AND Zlib) | nodeca/pako |
| @jsquash/png | 3.1.1 | Apache-2.0 | git+https://github.com/jamsinclair/jSquash.git |
| @jsquash/resize | 2.1.1 | Apache-2.0 | jamsinclair/jSquash/packages/resize |
| upng-js | 2.1.0 | MIT | github:photopea/UPNG.js |
| wasm-feature-detect | 1.9.0 | Apache-2.0 | GoogleChromeLabs/wasm-feature-detect |
| @jsquash/webp | 1.5.0 | Apache-2.0 | jamsinclair/jSquash |
| libheif-js (libheif + libde265) | 1.23.2 | LGPL-3.0 | git+https://github.com/catdad-experiments/libheif-js.git |

## FFmpeg core

The bundled @ffmpeg/core 0.12.10 matches the official npm UMD binary. It was built with --enable-gpl and includes x264/x265. The wrapper MIT license does not replace the core GPL-2.0-or-later license. FFmpeg license and GPLv2 texts are included here.

Build recipes and pinned source dependencies: https://github.com/ffmpegwasm/ffmpeg.wasm/tree/71aa99d37c02a7b4c435275ca9ef50e612f6efa1 (Dockerfile and build scripts). FFmpeg source: https://github.com/FFmpeg/FFmpeg/tree/n5.1.4 . Consult the upstream build recipe for each linked codec source and license.

## Image codecs

Image package and codec license texts are distributed unchanged under /assets/vendor-67f9ba55d5eb/img/. The list below links the actual bundled files, including additional codec licenses.

- [vendor/img/avif/LICENSE](/assets/vendor-67f9ba55d5eb/img/avif/LICENSE)
- [vendor/img/image-q/LICENSE](/assets/vendor-67f9ba55d5eb/img/image-q/LICENSE)
- [vendor/img/jpeg/LICENSE](/assets/vendor-67f9ba55d5eb/img/jpeg/LICENSE)
- [vendor/img/jpeg/codec/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/jpeg/codec/LICENSE.codec.md)
- [vendor/img/oxipng/LICENSE](/assets/vendor-67f9ba55d5eb/img/oxipng/LICENSE)
- [vendor/img/oxipng/codec/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/oxipng/codec/LICENSE.codec.md)
- [vendor/img/pako/LICENSE](/assets/vendor-67f9ba55d5eb/img/pako/LICENSE)
- [vendor/img/png/LICENSE](/assets/vendor-67f9ba55d5eb/img/png/LICENSE)
- [vendor/img/png/codec/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/png/codec/LICENSE.codec.md)
- [vendor/img/resize/LICENSE](/assets/vendor-67f9ba55d5eb/img/resize/LICENSE)
- [vendor/img/resize/lib/hqx/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/resize/lib/hqx/LICENSE.codec.md)
- [vendor/img/resize/lib/magic-kernel/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/resize/lib/magic-kernel/LICENSE.codec.md)
- [vendor/img/resize/lib/resize/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/resize/lib/resize/LICENSE.codec.md)
- [vendor/img/upng-js/LICENSE](/assets/vendor-67f9ba55d5eb/img/upng-js/LICENSE)
- [vendor/img/wasm-feature-detect/LICENSE](/assets/vendor-67f9ba55d5eb/img/wasm-feature-detect/LICENSE)
- [vendor/img/webp/LICENSE](/assets/vendor-67f9ba55d5eb/img/webp/LICENSE)
- [vendor/img/webp/codec/LICENSE.codec.md](/assets/vendor-67f9ba55d5eb/img/webp/codec/LICENSE.codec.md)
- [vendor/img/libheif/LICENSE](/assets/vendor-67f9ba55d5eb/img/libheif/LICENSE)

### HEIC / HEIF decoding (libheif-js)

HEIC input is decoded with libheif-js 1.23.2, an unmodified WebAssembly build of libheif and the libde265 HEVC decoder, both licensed under the GNU Lesser General Public License v3.0. The library is a separate file (`vendor/img/libheif/libheif.js` + `libheif.wasm`) loaded on demand only when a HEIC/HEIF file is selected; it can be replaced independently of the application. The full LGPL-3.0 and GPL-3.0 texts are in `libheif-js-LICENSE`. HEIC files are only decoded here; this site does not encode HEIC.

## Exact artifacts

See dependencies.json for package provenance and SHA-256 values of every distributed vendor file. Do not infer a single license for the whole application from this inventory.