Steffen Becker
f1b63c722c
The minifier strips every legal comment, so the bundle reached users without the notice MIT and Apache-2.0 require to travel with a copy. collect-licenses quotes all 97 bundled packages into public/licenses.txt, which deploys like the font and dictionary licenses do. The About dialog's version now carries the short commit, so a user of the hosted app can identify the source it was built from - what AGPL 13 asks for and a fixed 0.1.0 could not answer.
86 lines
3.8 KiB
Markdown
86 lines
3.8 KiB
Markdown
# Third-Party Notices
|
||
|
||
EdenText as a whole is licensed under the GNU Affero General Public License
|
||
v3.0 (see [`LICENSE`](./LICENSE)), with a separate commercial license available
|
||
(see [`LICENSE.commercial.md`](./LICENSE.commercial.md)).
|
||
|
||
It bundles and depends on third-party components that remain under **their own**
|
||
licenses, listed below. The code dependencies and the fonts are permissive and
|
||
compatible with both the AGPL distribution and a commercial distribution of this
|
||
project; the bundled **language data** is a separate question — some of it is
|
||
copyleft, see its section.
|
||
|
||
## Bundled fonts — retain their own license
|
||
|
||
The fonts in `src/assets/fonts/` are **not** covered by this project's license and
|
||
remain under their own regardless of how this project is licensed. Their license
|
||
texts live in [`public/font-licenses/`](./public/font-licenses/) — that folder is
|
||
copied verbatim into the build, so the licenses ship wherever the fonts do.
|
||
|
||
| Font | License | Copyright |
|
||
|------|---------|-----------|
|
||
| Liberation Mono/Sans/Serif | OFL-1.1 | (c) 2010 Google Corporation; (c) 2012 Red Hat, Inc. (Reserved Font Name "Liberation") |
|
||
| Carlito | OFL-1.1 | (c) 2013 The Carlito Project Authors (Reserved Font Name "Carlito") |
|
||
| Caladea | OFL-1.1 | (c) 2012 The Caladea Project Authors |
|
||
| STIX Two Math | OFL-1.1 | (c) 2001–2021 The STIX Fonts Project Authors |
|
||
| `EdenSymbols.woff2` — bullet glyphs subset from DejaVu Sans | Bitstream Vera | (c) 2003 Bitstream, Inc. |
|
||
|
||
> OFL-1.1 permits bundling the fonts in any software, **including commercial and
|
||
> proprietary software**, provided the license file is retained and the fonts are
|
||
> not sold by themselves. The fonts must not be redistributed under their Reserved
|
||
> Font Names if modified. The Bitstream Vera license likewise permits bundling and
|
||
> requires the notice to travel with the font; the subset is renamed accordingly,
|
||
> as that license requires of a derivative.
|
||
|
||
## Bundled language data — retains its own license
|
||
|
||
Vendored under `public/`, each with its upstream license file beside it. None of
|
||
it is part of this project's code: a distribution that cannot carry a copyleft
|
||
data set may drop that folder, and the app then simply offers no dictionary or
|
||
thesaurus for the language.
|
||
|
||
| Data | License |
|
||
|------|---------|
|
||
| `public/dictionaries/de` — Hunspell, igerman98 | GPL-2.0 or GPL-3.0 |
|
||
| `public/dictionaries/en` — Hunspell, from SCOWL | permissive (BSD-style) |
|
||
| `public/thesaurus/de` — OpenThesaurus | LGPL-2.1-or-later |
|
||
| `public/thesaurus/en` — WordNet 2.1, Princeton University | WordNet license (permissive) |
|
||
|
||
Both thesaurus files are generated from LibreOffice's own MyThes data by
|
||
`scripts/make-thesaurus.mjs`, which also fetches the license files above.
|
||
|
||
## Runtime / build dependencies
|
||
|
||
| Component | License |
|
||
|-----------|---------|
|
||
| Svelte | MIT |
|
||
| TipTap (`@tiptap/*`) and ProseMirror (`@tiptap/pm`) | MIT |
|
||
| `fflate` | MIT |
|
||
| `docx` — DOCX export | MIT |
|
||
| `jspdf` and `html2canvas` — PDF export | MIT |
|
||
| `hunspell-asm` — spell checker | MIT |
|
||
| `utif2` — TIFF decoding | MIT |
|
||
| `odf-kit` | Apache-2.0 |
|
||
| Vite, TypeScript, `@sveltejs/vite-plugin-svelte`, `@tsconfig/svelte` (dev) | MIT / Apache-2.0 |
|
||
|
||
The table above is a convenience summary of the direct dependencies. The
|
||
authoritative text — every bundled package including transitive ones, quoted in
|
||
full — is [`public/licenses.txt`](./public/licenses.txt), which ships with the
|
||
build and is what MIT and Apache-2.0 require to reach a recipient: the minifier
|
||
strips the license comments the source files carry.
|
||
|
||
## Regenerating this list
|
||
|
||
Regenerate `public/licenses.txt` after any dependency change:
|
||
|
||
```bash
|
||
node scripts/collect-licenses.mjs
|
||
```
|
||
|
||
For an overview of the license *kinds* in the tree, a tool such as
|
||
[`license-checker`](https://www.npmjs.com/package/license-checker) works:
|
||
|
||
```bash
|
||
npx license-checker --summary
|
||
```
|