Licenses and notices
This page is a readable public version of the notices in THIRD_PARTY_NOTICES.md, which remains the repository source of truth.
Last updated: September 8, 2026
PKIjs (pkijs) 3.4.0
BSD 3-Clause License. Copyright Peculiar Ventures. Used only in the lazy-loaded Digital Signature worker to parse PKCS#12/X.509 data and create detached CMS signatures through Web Crypto.
ASN1.js (asn1js) 3.0.10
BSD 3-Clause License. Copyright Peculiar Ventures. Used only in the lazy-loaded Digital Signature worker for bounded BER/DER parsing and encoding. Its runtime dependencies include @noble/hashes (MIT), bytestreamjs (BSD-3-Clause), pvtsutils (MIT), pvutils (MIT), and tslib (0BSD). No GPL or AGPL component is included.
PDF.js (pdfjs-dist)
Apache License 2.0. Copyright 2012 Mozilla Foundation. Used for browser-local PDF page previews. The worker is bundled and served from the same origin; no CDN runtime is used. The optional Node canvas dependency is not part of the browser runtime.
@forevka/wordcanvas
MIT License. Copyright (c) 2026 Bohdan Lushchyk.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY.
pdf-lib
MIT License. Copyright (c) 2019 Andrew Dillon.
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY.
qpdf-wasm (qpdf-wasm-esm-embedded) 1.1.1
Apache License 2.0 for the JavaScript wrapper and compiled distribution. Copyright 2022 jsscheller. Source: https://github.com/sharevb/qpdf-wasm-esm/tree/910d49b88afd775571e370da290da40d12495cf8.
qpdf is Apache-2.0; its embedded Rijndael implementation is public domain and its embedded sphlib 3.0 SHA-2 code is MIT-style licensed. No OpenSSL, GnuTLS, GPL, or AGPL component is enabled in the build. The Emscripten runtime is MIT and the WASM is bundled into the lazy-loaded worker, with no CDN or runtime network dependency.
Required binary attribution: “This software is based in part on the work of the Independent JPEG Group.”