Steffen Becker
f1b63c722c
The minifier strips every legal comment, so the bundle reached users without the notice MIT and Apache-2.0 require to travel with a copy. collect-licenses quotes all 97 bundled packages into public/licenses.txt, which deploys like the font and dictionary licenses do. The About dialog's version now carries the short commit, so a user of the hosted app can identify the source it was built from - what AGPL 13 asks for and a fixed 0.1.0 could not answer.
3.8 KiB
Third-Party Notices
EdenText as a whole is licensed under the GNU Affero General Public License
v3.0 (see LICENSE), with a separate commercial license available
(see LICENSE.commercial.md).
It bundles and depends on third-party components that remain under their own licenses, listed below. The code dependencies and the fonts are permissive and compatible with both the AGPL distribution and a commercial distribution of this project; the bundled language data is a separate question — some of it is copyleft, see its section.
Bundled fonts — retain their own license
The fonts in src/assets/fonts/ are not covered by this project's license and
remain under their own regardless of how this project is licensed. Their license
texts live in public/font-licenses/ — that folder is
copied verbatim into the build, so the licenses ship wherever the fonts do.
| Font | License | Copyright |
|---|---|---|
| Liberation Mono/Sans/Serif | OFL-1.1 | (c) 2010 Google Corporation; (c) 2012 Red Hat, Inc. (Reserved Font Name "Liberation") |
| Carlito | OFL-1.1 | (c) 2013 The Carlito Project Authors (Reserved Font Name "Carlito") |
| Caladea | OFL-1.1 | (c) 2012 The Caladea Project Authors |
| STIX Two Math | OFL-1.1 | (c) 2001–2021 The STIX Fonts Project Authors |
EdenSymbols.woff2 — bullet glyphs subset from DejaVu Sans |
Bitstream Vera | (c) 2003 Bitstream, Inc. |
OFL-1.1 permits bundling the fonts in any software, including commercial and proprietary software, provided the license file is retained and the fonts are not sold by themselves. The fonts must not be redistributed under their Reserved Font Names if modified. The Bitstream Vera license likewise permits bundling and requires the notice to travel with the font; the subset is renamed accordingly, as that license requires of a derivative.
Bundled language data — retains its own license
Vendored under public/, each with its upstream license file beside it. None of
it is part of this project's code: a distribution that cannot carry a copyleft
data set may drop that folder, and the app then simply offers no dictionary or
thesaurus for the language.
| Data | License |
|---|---|
public/dictionaries/de — Hunspell, igerman98 |
GPL-2.0 or GPL-3.0 |
public/dictionaries/en — Hunspell, from SCOWL |
permissive (BSD-style) |
public/thesaurus/de — OpenThesaurus |
LGPL-2.1-or-later |
public/thesaurus/en — WordNet 2.1, Princeton University |
WordNet license (permissive) |
Both thesaurus files are generated from LibreOffice's own MyThes data by
scripts/make-thesaurus.mjs, which also fetches the license files above.
Runtime / build dependencies
| Component | License |
|---|---|
| Svelte | MIT |
TipTap (@tiptap/*) and ProseMirror (@tiptap/pm) |
MIT |
fflate |
MIT |
docx — DOCX export |
MIT |
jspdf and html2canvas — PDF export |
MIT |
hunspell-asm — spell checker |
MIT |
utif2 — TIFF decoding |
MIT |
odf-kit |
Apache-2.0 |
Vite, TypeScript, @sveltejs/vite-plugin-svelte, @tsconfig/svelte (dev) |
MIT / Apache-2.0 |
The table above is a convenience summary of the direct dependencies. The
authoritative text — every bundled package including transitive ones, quoted in
full — is public/licenses.txt, which ships with the
build and is what MIT and Apache-2.0 require to reach a recipient: the minifier
strips the license comments the source files carry.
Regenerating this list
Regenerate public/licenses.txt after any dependency change:
node scripts/collect-licenses.mjs
For an overview of the license kinds in the tree, a tool such as
license-checker works:
npx license-checker --summary