# Third-party software and data used by fixery.net

All of these components run only in the visitor's browser. Files in `/vendor` are unmodified copies of the published packages,
except `dice3d/dice3d.min.js`, which contains parts of three.js and cannon-es bundled and minified with esbuild (no source changes).
The license texts are in this folder (`/vendor/licenses/`).

| File in /vendor | Component (version) | License | License file(s) | Source |
|---|---|---|---|---|
| qrcode.js | qrcode-generator 1.4.4, © 2009 Kazuhiko Arase | MIT | qrcode-generator-LICENSE.txt | https://github.com/kazuhikoarase/qrcode-generator |
| jsQR.js | jsQR 1.4.0 by Cosmo Wolfe | Apache-2.0 | jsqr-LICENSE.txt | https://github.com/cozmo/jsQR |
| bwip-js.min.js | bwip-js 4.11.4, © 2011-2026 Mark Warren; includes Barcode Writer in Pure PostScript 2026-05-28, © 2004-2024 Terry Burton | MIT | bwip-js-LICENSE.txt | https://github.com/metafloor/bwip-js, https://github.com/bwipp/postscriptbarcode |
| pdf-lib.min.js | pdf-lib 1.17.1, © 2019 Andrew Dillon; includes @pdf-lib/standard-fonts 1.0.0, @pdf-lib/upng 1.0.1, pako and tslib | MIT (tslib: Apache-2.0 header in file, 0BSD in its package) | pdf-lib-LICENSE.txt, pdf-lib-standard-fonts-LICENSE.txt, pdf-lib-upng-LICENSE.txt, pako-LICENSE.txt, tslib-LICENSE.txt | https://github.com/Hopding/pdf-lib |
| pdf.min.js, pdf.worker.min.js | PDF.js (pdfjs-dist 3.11.174), © Mozilla Foundation | Apache-2.0 | pdfjs-dist-LICENSE.txt | https://github.com/mozilla/pdf.js |
| fflate.min.js | fflate 0.8.3, © Arjun Barrett | MIT | fflate-LICENSE.txt | https://github.com/101arrowz/fflate |
| gifenc.esm.js | gifenc 1.0.3, © 2017 Matt DesLauriers | MIT | gifenc-LICENSE.txt | https://github.com/mattdesl/gifenc |
| UTIF.js | UTIF.js 3.1.0, © 2017 Photopea | MIT | utif-LICENSE.txt | https://github.com/photopea/UTIF.js |
| pako_inflate.min.js | pako 1.0.11, © 2014-2017 Vitaly Puzrin and Andrei Tuputcyn | MIT (zlib port) | pako-LICENSE.txt | https://github.com/nodeca/pako |
| heif/libheif.js, heif/libheif.wasm | libheif-js 1.23.5 (libheif and libde265 compiled to WebAssembly) | LGPL-3.0 | libheif-LGPL-3.0-LICENSE.txt, libde265-COPYING.txt, GPL-3.0.txt | https://github.com/catdad-experiments/libheif-js, https://github.com/strukturag/libheif, https://github.com/strukturag/libde265 |
| qpdf/qpdf.js, qpdf/qpdf.wasm | @neslinesli93/qpdf-wasm 0.3.0 (QPDF compiled to WebAssembly), qpdf © 2005-2026 Jay Berkenbilt and Manfred Holger; wrapper © 2026 Tommaso Pifferi | qpdf: Apache-2.0; wrapper: ISC | qpdf-Apache-2.0-LICENSE.txt, qpdf-NOTICE.txt, qpdf-wasm-ISC-LICENSE.txt, zlib-LICENSE.txt, mozjpeg-README.ijg.txt | https://github.com/qpdf/qpdf, https://github.com/neslinesli93/qpdf-wasm |
| squoosh/*.js, squoosh/*.wasm | @jsquash/avif 2.1.1, @jsquash/jpeg 1.6.0, @jsquash/webp 1.5.0, @jsquash/oxipng 2.3.0 (© 2023 jamsinclair; Squoosh codecs by Google) | Apache-2.0 | jsquash-squoosh-Apache-2.0-LICENSE.txt | https://github.com/jamsinclair/jSquash, https://github.com/GoogleChromeLabs/squoosh |
| (inside squoosh/mozjpeg_enc.wasm) | MozJPEG (libjpeg-turbo) | IJG, BSD-3-Clause, zlib | mozjpeg-libjpeg-turbo-LICENSE.txt, mozjpeg-README.ijg.txt | https://github.com/mozilla/mozjpeg |
| (inside squoosh/webp_enc.wasm) | libwebp, © 2010 Google Inc. | BSD-3-Clause + patent grant | libwebp-LICENSE.txt, libwebp-PATENTS.txt | https://chromium.googlesource.com/webm/libwebp |
| (inside squoosh/avif_enc.wasm) | libavif, © 2019 Joe Drago; libaom, © 2016 Alliance for Open Media | BSD-2-Clause; AOMedia Patent License 1.0 | libavif-LICENSE.txt, libaom-LICENSE.txt, libaom-PATENTS.txt | https://github.com/AOMediaCodec/libavif, https://aomedia.googlesource.com/aom |
| (inside squoosh/squoosh_oxipng_bg.wasm) | oxipng, © 2016 Joshua Holmer, and its Rust dependencies | MIT (dependencies: MIT or Apache-2.0) | oxipng-LICENSE.txt | https://github.com/shssoichiro/oxipng |
| dice3d/dice3d.min.js | three.js 0.186.1, © 2010-2026 Three.js Authors; cannon-es 0.20.0, © 2015 cannon.js Authors | MIT | three-LICENSE.txt, cannon-es-LICENSE.txt | https://github.com/mrdoob/three.js, https://github.com/pmndrs/cannon-es |

## Required notices

- **Independent JPEG Group.** This software is based in part on the work of the Independent JPEG Group (MozJPEG in the image
  compressor and libjpeg in qpdf). See `mozjpeg-README.ijg.txt`.
- **qpdf NOTICE.** The NOTICE file that comes with qpdf is reproduced in `qpdf-NOTICE.txt`, as the Apache License 2.0 requires.
- **libheif and libde265 (LGPL-3.0).** They are used as a separate, unmodified library (`/vendor/heif/libheif.js` and
  `libheif.wasm`) that the page loads at run time, so it can be replaced with another compatible build. The LGPL-3.0 text is in
  `libheif-LGPL-3.0-LICENSE.txt`, the GNU GPL v3 it builds on is in `GPL-3.0.txt`, and the corresponding source code is at the
  links above (libheif-js 1.23.5).
- **AV1 and WebP patents.** libaom is covered by the Alliance for Open Media Patent License 1.0 (`libaom-PATENTS.txt`) and libwebp
  by Google's additional patent grant (`libwebp-PATENTS.txt`).
- **Fonts in bwip-js.** The OCR-A and OCR-B outlines built into bwip-js are by Matthew Skala (2011), based on work by
  Richard B. Wales, Tor Lillqvist and Norbert Schwarz; their authors allow use and redistribution without restriction.
- **Standard PDF fonts.** The font metrics in @pdf-lib/standard-fonts come from Adobe's Core 14 AFM files,
  © Adobe Systems Incorporated, which Adobe allows to be used and distributed for any purpose with the copyright notices kept.
- **QR Code** is a registered trademark of DENSO WAVE INCORPORATED.

## Data

- **MAC address vendors** (`/data/oui.json`): built from the IEEE Registration Authority's public OUI registry (MA-L, MA-M, MA-S),
  as collected in Wireshark's `manuf` file (https://www.wireshark.org/download/automated/data/manuf.gz).
- **US sales tax rates, federal holidays and unit conversions** are public facts compiled for this site.

## Not distributed

Astro (the static site builder) and esbuild run only when the site is built; none of their code is sent to visitors.
The site's icons are original SVG drawings.