Licenses and components
This inventory comes from the installed dependency lockfile. It is conservative: some packages support Node commands or types and are not part of the browser bundle.
Each component is governed by its own license. The original license texts and notices are linked below.
HEIC decoder and source code
The HEIC converter uses heic-to 1.6.7, which includes libheif 1.23.7 and libde265 1.0.16. Versiond upstream source archives and the installed JavaScript source are included. The complete decoder reconstruction and relinking procedure still requires review before publication.
- Upstream heic-to 1.6.7, repository snapshot
SHA-256:4ff1f10fda1ba04a68317fdc1577599d727926953727d45c808c98c5fbff10ad - Native libheif sources 1.23.7, version stated in bundled JS
SHA-256:90e389caad285ca4946461d56d1c115e56bcbb5141d9038050282af91064fbc7 - Native libde265 sources 1.0.16, version stated in bundled JS
SHA-256:ed12c931759c1575848832f70db5071a001ac813db4e4f568ee08aef6e234d4e - Installed npm JS source, prebuilt libheif JS and wrapper build script; not a replacement for the native C++ source
SHA-256:140dbe112d1d78e43241bd12db8ca3f2d66c40f8d59e04752c639ab5438ceaa7 - GPL-3.0.txt
- jsquash-apache-2.0.txt
- libaom-license.txt
- libaom-patents.txt
- libavif-license.txt
- libde265-COPYING.txt
- libheif-COPYING.txt
- wasm-feature-detect-apache-2.0.txt
Dependencies and notices
| Component | Version | Declared license | License texts and notices |
|---|---|---|---|
| @jsquash/avif | 2.1.1 | Apache-2.0 | Notice 1 |
| @mixmark-io/domino | 2.2.0 | BSD-2-Clause | Notice 1 |
| @napi-rs/canvas | 1.0.13 | MIT | Notice 1 |
| @napi-rs/canvas-win32-x64-msvc | 1.0.13 | MIT | Notice 1 |
| @pdf-lib/fontkit | 1.1.1 | MIT | Notice 1 |
| @pdf-lib/standard-fonts | 1.0.0 | MIT | Notice 1 |
| @pdf-lib/upng | 1.0.1 | MIT | Notice 1 |
| @types/diff | 7.0.2 | MIT | Notice 1 |
| @types/node | 26.6.6 | MIT | Notice 1 |
| @types/trusted-types | 2.0.7 | MIT | Notice 1 |
| ansi-regex | 5.0.1 | MIT | Notice 1 |
| ansi-styles | 4.3.0 | MIT | Notice 1 |
| argparse | 2.0.1 | Python-2.0 | Notice 1 |
| camelcase | 5.3.1 | MIT | Notice 1 |
| cliui | 6.0.0 | ISC | Notice 1 |
| color-convert | 2.0.1 | MIT | Notice 1 |
| color-name | 1.1.4 | MIT | Notice 1 |
| commander | 2.20.3 | MIT | Notice 1 |
| decamelize | 1.2.0 | MIT | Notice 1 |
| diff | 9.0.0 | BSD-3-Clause | Notice 1 |
| dijkstrajs | 1.0.3 | MIT | Notice 1 |
| discontinuous-range | 1.0.0 | MIT | Notice 1 |
| docx | 9.15.0 | MIT | Notice 1 |
| dompurify | 3.4.17 | (MPL-2.0 OR Apache-2.0) | Notice 1 Notice 2 Notice 3 |
| emoji-regex | 8.0.0 | MIT | Notice 1 |
| fflate | 0.8.3 | MIT | Notice 1 |
| find-up | 4.1.0 | MIT | Notice 1 |
| get-caller-file | 2.0.5 | ISC | Notice 1 |
| heic-to | 1.6.7 | LGPL-3.0 | Notice 1 |
| is-fullwidth-code-point | 3.0.0 | MIT | Notice 1 |
| locate-path | 5.0.0 | MIT | Notice 1 |
| marked | 18.1.2 | MIT | Notice 1 |
| moo | 0.5.3 | BSD-3-Clause | Notice 1 |
| nanoid | 6.0.2 | MIT | Notice 1 |
| nearley | 2.20.1 | MIT | Notice 1 |
| p-limit | 2.3.0 | MIT | Notice 1 |
| p-locate | 4.1.0 | MIT | Notice 1 |
| p-try | 2.2.0 | MIT | Notice 1 |
| pako | 1.0.11 | (MIT AND Zlib) | Notice 1 |
| papaparse | 5.7.0 | MIT | Notice 1 |
| path-exists | 4.0.0 | MIT | Notice 1 |
| pdf-lib | 1.17.1 | MIT | Notice 1 |
| pdfjs-dist | 6.4.299 | Apache-2.0 | Notice 1 Notice 2 Notice 3 Notice 4 Notice 5 Notice 6 Notice 7 Notice 8 Notice 9 Notice 10 Notice 11 |
| pngjs | 5.0.0 | MIT | Notice 1 |
| qrcode | 1.5.4 | MIT | Notice 1 |
| railroad-diagrams | 1.0.0 | CC0-1.0 | Notice 1 |
| randexp | 0.4.6 | MIT | Notice 1 |
| require-directory | 2.1.1 | MIT | Notice 1 |
| require-main-filename | 2.0.0 | ISC | Notice 1 |
| ret | 0.1.15 | MIT | Notice 1 |
| set-blocking | 2.0.0 | ISC | Notice 1 |
| sql-formatter | 15.9.0 | MIT | Notice 1 |
| string-width | 4.2.3 | MIT | Notice 1 |
| strip-ansi | 6.0.1 | MIT | Notice 1 |
| tslib | 1.14.1 | 0BSD | Notice 1 |
| turndown | 7.2.4 | MIT | Notice 1 |
| turndown-plugin-gfm | 1.0.2 | MIT | Notice 1 |
| undici-types | 8.9.0 | MIT | Notice 1 |
| wasm-feature-detect | 1.9.0 | Apache-2.0 | Notice 1 |
| which-module | 2.0.1 | ISC | Notice 1 |
| wrap-ansi | 6.2.0 | MIT | Notice 1 |
| y18n | 4.0.3 | ISC | Notice 1 |
| yaml | 2.9.1 | ISC | Notice 1 |
| yargs | 15.4.1 | MIT | Notice 1 |
| yargs-parser | 18.1.3 | ISC | Notice 1 |