Third-party notices

remixpdf is closed-source, but it stands on open work. These are the components shipped in the application, with their licenses. The license texts ship at /licenses/pdfjs-apache-2.0.txt, pdf-lib-mit.txt, harfbuzzjs-mit.txt, react-mit.txt, and the OCR stack’s at tesseract-js, tesseract-core and tessdata, and the font OFL texts at Inter, Liberation, Carlito, Caladea, and Noto, and the ICC profile’s zlib text at icc-profiles-free, the ONNX Runtime MIT text at onnxruntime-web, and the U²-Net Apache text at u2net; the per-file hashes and provenance are in the repository's UPSTREAM registry.

• pdf.js (remixpdf-pdfjs fork build) Apache-2.0

  Mozilla’s PDF rendering engine — our thin private fork on upstream v6.1.200, vendored with its LICENSE and per-patch provenance. upstream

• @cantoo/pdf-lib (remixpdf-pdflib fork build) MIT

  The incremental PDF writer, vendored as a self-contained ESM bundle with its LICENSE. upstream

• harfbuzzjs (HarfBuzz WASM) MIT

  HarfBuzz compiled to WebAssembly — font subsetting and metrics, vendored with its LICENSE. upstream

• tesseract.js + tesseract-core + tessdata_fast Apache-2.0

  The on-device OCR stack — the worker, the WASM cores and the English/Spanish language models are vendored same-origin with their LICENSEs. upstream

• Liberation Sans / Serif / Mono OFL-1.1

  Red Hat’s metric-compatible substitutes for Arial / Times New Roman / Courier New, vendored unmodified with the OFL text. upstream

• Carlito & Caladea OFL-1.1

  Metric-compatible substitutes for Calibri / Cambria, vendored unmodified with the OFL texts. upstream

• sRGB ICC profile (icc-profiles-free) zlib/libpng

  The compact sRGB output-intent profile the PDF/A-2b conversion embeds — Kai-Uwe Behrmann / Marti Maria’s icc-profiles-free build, vendored unmodified with the zlib license text. upstream

• onnxruntime-web MIT

  Microsoft’s ONNX Runtime for the browser (WASM backend) — drives the on-device signature background cleanup. The WASM binary ships same-origin under /ort/ and is SHA-256-verified before it ever instantiates. upstream

• U²-Net-lite (u2netp) Apache-2.0

  Xuebin Qin’s small salient-object ONNX model — the ink/paper segmentation behind the signature cleanup, vendored same-origin with its LICENSE and SHA-256-verified before use. upstream

• Noto Sans CJK SC OFL-1.1

  Google’s Noto CJK face, subset to a coverage core for editing, with the OFL text. No Reserved Font Name. upstream

• Inter OFL-1.1

  The interface typeface (rsms), vendored with the OFL text. upstream

• React MIT

  The editor island’s UI framework (Meta), bundled by the build. upstream