# Local conversion dependencies

All application/runtime assets are served locally. No runtime CDN or file-upload service is used.

| Dependency | Version / source | License / retained material |
|---|---|---|
| FFmpeg WebAssembly core | @ffmpeg/core 0.12.10 | media/vendor/NOTICE.txt; GPL v2/v3 notices and upstream build/source links |
| Image codecs and tracing | Original image converter 0.2.2 | image/licenses.html, image/vendor/SOURCES.md, individual notices and HEIC corresponding-source archives |
| PDF.js | Bundled runtime package; version recorded in vendor/VERSIONS.json | Apache-2.0, vendor/pdfjs.LICENSE; upstream https://github.com/mozilla/pdf.js |
| pdf-lib | Bundled runtime package; version recorded in vendor/VERSIONS.json | MIT, vendor/pdf-lib.LICENSE; upstream https://github.com/Hopding/pdf-lib |
| @pdf-lib/fontkit | 1.1.1 | MIT; vendor/fontkit.NOTICE.md and fontkit-1.1.1-source.tgz contain source/attribution |
| Noto Sans Regular | Downloaded from notofonts/noto-fonts; SHA-256 recorded in vendor/manifest.json | SIL OFL-1.1; vendor/NotoSans.LICENSE |
| SheetJS CE | 0.20.3 | Apache-2.0; vendor/xlsx.LICENSE; source https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz |
| JSZip | Bundled runtime package; vendor/VERSIONS.json | MIT/GPL choice, vendor/jszip.LICENSE; https://github.com/Stuk/jszip |
| libarchive-wasm | 1.2.0 / Libarchive 3.7.7 | MIT wrapper and BSD-style native notices; vendor/archive/wrapper.LICENSE, libarchive.LICENSE, source/compiled wrapper files and libarchive-3.7.7-source.tar.gz; https://github.com/ofk/libarchive-wasm and https://github.com/libarchive/libarchive/tree/v3.7.7 |
| Mammoth | 1.13.0 | BSD-2-Clause; vendor/mammoth.LICENSE; https://github.com/mwilliamson/mammoth.js |
| Marked | Bundled runtime package; vendor/VERSIONS.json | MIT; vendor/marked.LICENSE; https://github.com/markedjs/marked |
| YAML | 2.9.1 | ISC; vendor/yaml.LICENSE; https://github.com/eemeli/yaml |
| libraw-wasm wrapper | 1.6.0 | npm package declares ISC; upstream source/build files retained under vendor/raw/sources/wrapper-1.6.0; https://github.com/ybouane/LibRaw-Wasm/tree/v1.6.0 |
| LibRaw | 0.22.1 | LGPL-2.1 or CDDL-1.0 choice and component notices; vendor/raw/sources/LibRaw-* contains full corresponding source and license/copyright files |
| Little CMS | 2.19.1 | MIT and component notices; vendor/raw/sources/Little-CMS-* contains source and license |
| Tesseract.js | 6.0.1 | Apache-2.0; vendor/ocr/tesseract.js.LICENSE; https://github.com/naptha/tesseract.js |
| Tesseract.js core | 6.0.0 | Apache-2.0 and upstream third-party components; vendor/ocr/tesseract.js-core.LICENSE; https://github.com/naptha/tesseract.js-core/tree/v6.0.0 |
| English recognition data | tessdata_fast 4.1.0 | Apache-2.0; vendor/ocr/tessdata.LICENSE; https://github.com/tesseract-ocr/tessdata_fast/tree/4.1.0 |

Application code and copied/derived media converters: GPL-3.0-or-later; the GPL text is retained at image/vendor/GPL-3.0.txt. Retain all source/license files when redistributing. scripts/vendor.cjs and scripts/source-notices.cjs reproduce the new dependency bundle; existing image/media assets remain from their original projects. The RAW library is replaceable separately from application code. Its source/build recipe pins LibRaw, Little CMS and Emscripten settings, including JPEG port and pthread support.

The downloaded Sony ARW is a development validation fixture from the decoder project's published example. It is excluded from the release package. No user photo is bundled.