# Third-party software notices

The original PDFMomo application is proprietary; see LICENSE. Third-party code remains under the licences below. These components do not grant ownership of their source to the application owner. Their notices and applicable library-specific obligations remain in effect.

| Component | Version/source | Licence |
|---|---|---|
| @embedpdf/pdfium JavaScript bindings | 2.15.1; https://github.com/embedpdf/embed-pdf-viewer | MIT; retained in dist/vendor/pdfium/LICENSE |
| PDFium / EmbedPDF runtime WASM | bundled with @embedpdf/pdfium 2.15.1; https://github.com/embedpdf/runtime | BSD-3-Clause, Apache-2.0 and bundled dependency notices; dist/vendor/pdfium/LICENSE.pdfium |
| pypdfium2 | 5.14.0; https://github.com/pypdfium2-team/pypdfium2 | Apache-2.0 / BSD-3-Clause with dependency notices |
| PDF.js | 6.4.299; https://github.com/mozilla/pdf.js | Apache-2.0; dist/vendor/pdfjs/LICENSE |
| pdf-lib | 1.17.1; https://github.com/Hopding/pdf-lib | MIT |
| @pdf-lib/fontkit | 1.1.1; https://github.com/Hopding/fontkit | MIT |
| JSZip | 3.10.1; https://github.com/Stuk/jszip | MIT, selected from its dual licensing |
| pikepdf | server/requirements.lock; https://github.com/pikepdf/pikepdf | MPL-2.0 |
| qpdf | bundled with pikepdf; https://github.com/qpdf/qpdf | Apache-2.0 |
| ReportLab | 5.1.0; https://pypi.org/project/reportlab/ | BSD-style ReportLab licence |
| pdfplumber / pdfminer.six | server/requirements.lock; https://github.com/jsvine/pdfplumber | MIT |
| OCRmyPDF | 17.13.0; https://github.com/ocrmypdf/OCRmyPDF | MPL-2.0; its dependencies retain their own licences |
| Tesseract | Docker image; https://github.com/tesseract-ocr/tesseract | Apache-2.0 |
| LibreOffice | Docker image; https://www.libreoffice.org/about-us/licenses | MPL-2.0 / LGPL; used as an unchanged external converter |
| Node.js | 22.23.4; https://nodejs.org/ | MIT and bundled third-party notices; /usr/local/share/doc/node/LICENSE in the image |
| Noto / Liberation fonts | dist/fonts; upstream notices in OFL.txt, fallback/NOTO-LICENSE.txt and fallback/LICENSE.txt | SIL OFL and applicable font notices |

Additional Python dependencies and Debian packages retain their notices in their installed distributions. Dependency versions are pinned in server/requirements.lock. Libraries with MPL/LGPL obligations remain replaceable third-party libraries; this proprietary licence does not override their terms. Unmodified library source is available from the linked upstream projects. No MuPDF, PyMuPDF or Ghostscript runtime is shipped in this replacement release.

Browser JavaScript and WebAssembly are necessarily delivered to users' browsers. Keeping the repository and server implementation private does not make browser-delivered files invisible.