Third-party software and asset notices — PDF workspace

These notices apply to their respective third-party components, not to the
website, personal branding, logo, or other assets as a whole.

This software is based in part on the work of the FreeType Team.
This software is based in part on the work of the Independent JPEG Group.
LZW support in LibTIFF includes work contributed to the University of
California, Berkeley by James A. Woods, derived from work by Spencer Thomas
and Joseph Orost. The original notices and disclaimers are preserved below
in licenses/upstream/libtiff.txt.

Pinned redistributed packages are recorded in versions.json. Browser
distributions are vendored locally; some contain bundled JavaScript and
compiled C/C++ components. Their copyright/permission/disclaimer notices
are preserved in the accompanying license files.

Top-level distributions:
- @embedpdf/engine-runtime 3.0.0-next.22 (prerelease) and
  @embedpdf/engine-runtime-wasm32 3.0.0-next.22 (prerelease):
  Copyright 2025-2026 CloudPDF LTD; Apache-2.0 (pdfium/LICENSE) and CloudPDF
  runtime NOTICE (pdfium/NOTICE). PDFium BSD-3-Clause/Apache-2.0 notices and
  contributor list are preserved in pdfium/LICENSE.pdfium and pdfium/AUTHORS.
  Only the browser ESM runtime (pdfium/index.browser.js), browser WASM glue
  (pdfium/embedpdf.browser.js), and WASM binary (pdfium/pdfium.wasm, copied
  unmodified from lib/embedpdf.wasm) are redistributed; Node-only loaders and
  native OS addons are omitted. In pdfium/index.browser.js, the bare dynamic
  import specifier '@embedpdf/engine-runtime-wasm32' was relocated to
  './embedpdf.browser.js' with a prominent Apache-2.0 Section 4(b) modification
  notice for self-hosted browser execution without an import map.
  Compiled C/C++ components linked into pdfium.wasm include PDFium (with
  bundled Foxit font data, Adobe CMap tables, and JBIG2 decoder), CloudPDF
  EPDF runtime additions, FreeType, HarfBuzz, ICU4C, Skia (core geometry and
  PathOps subset), Abseil C++, Google Highway, AGG 2.3, OpenJPEG, Little CMS,
  libjpeg-turbo / IJG JPEG, libpng, zlib, Dragonbox, fast_float, and
  Emscripten / LLVM libc++ runtime routines.
- pdf-lib 1.17.1: MIT; licenses/pdf-lib/LICENSE.md.
- @pdf-lib/fontkit 1.1.1: MIT; licenses/pdf-lib__fontkit/LICENSE.
  Fork maintained by Andrew Dillon; original Fontkit by Devon Govett.
- docx 9.15.2: MIT; licenses/docx/LICENSE.
- docx-preview 0.4.1: Apache-2.0; licenses/docx-preview/LICENSE.
- JSZip 3.10.2: redistributed under its MIT option, not its optional GPL
  alternative. See licenses/jszip/LICENSE.markdown.
- html2canvas 1.4.1: MIT; licenses/html2canvas/LICENSE.
- SortableJS 1.15.7: MIT; sortable/LICENSE.
  Copyright (c) 2019 All contributors to Sortable.
  Unmodified Sortable.min.js and LICENSE from the official npm tarball,
  https://registry.npmjs.org/sortablejs/-/sortablejs-1.15.7.tgz.
  Registry SHA-512 integrity was verified before extraction; the pinned
  metadata URL and integrity are recorded in versions.json.
- Tesseract.js 7.0.0: Apache-2.0; licenses/tesseract.js/LICENSE.md and
  tesseract/worker.min.js.LICENSE.txt (bundled runtime notices).
- Tesseract.js Core 7.0.0: Apache-2.0; licenses/tesseract.js-core/LICENSE.
  Compiled components include Tesseract OCR, Leptonica, TIFF, WebP, GIF,
  JPEG, PNG, zlib, OpenLibm, and Emscripten. Only LSTM runtime variants ship.
- English/Turkish 4.0.0_best_int traineddata: upstream Apache-2.0 via
  naptha/tessdata and tesseract-ocr/tessdata_best. Their npm packaging
  metadata separately declares MIT. Only traineddata, not wrapper code,
  is redistributed. Both provenance records are retained in versions.json;
  model licenses are in licenses/tesseract.js-data__eng/LICENSE and
  licenses/tesseract.js-data__tur/LICENSE.
- Noto Sans Regular: SIL OFL-1.1; fonts/LICENSE.

Bundled JavaScript component notices are retained under licenses/bundled/.
They include standard-fonts, UPNG, restructure, unicode-properties,
unicode-trie, pako, base64-arraybuffer, tslib, tiny-inflate, buffer, clone,
fflate, nanoid, runtime helpers, lie, readable-stream, setimmediate,
css-line-break, text-segmentation, regenerator-runtime, ieee754, zlibjs,
bmp-js, idb-keyval, is-url and wasm-feature-detect.
DFA and Brotli wrapper packages declare MIT in their package metadata;
upstream author/license statements are preserved in
licenses/upstream/dfa-readme.txt and licenses/upstream/brotli-js-readme.txt.
The original Brotli native MIT license is licenses/upstream/brotli-native.txt.

Full compiled-library license texts, attribution clauses and source links
are retained under licenses/upstream/: freetype.txt, harfbuzz.txt, icu.txt,
skia.txt, abseil-cpp.txt, highway.txt, dragonbox.txt, fast_float.txt,
jpeg-turbo.txt, jpeg-ijg.txt, openjpeg.txt, lcms.txt, agg.txt, libpng.txt,
zlib.txt, emscripten.txt, leptonica.txt, libtiff.txt, libwebp.txt,
giflib.txt and openlibm.txt. The fontkit upstream MIT text and OCR model
Apache texts are also preserved there. No license grant for first-party
source code, third-party trademarks, or personal brand assets is implied.