Open-source notices
Tooliba uses the open-source components listed below in its browser or deployed CMS runtime. These components remain governed by their own licenses; those licenses do not apply to Tooliba's proprietary code.
| Component | License | Source and license |
|---|---|---|
| @bjornlu/colorblind v1.0.3 | MITMIT notice retained in installed package | https://github.com/bluwy/colorblind |
| @cantoo/pdf-lib v2.8.1 | MITCopyright 2019 Andrew Dillon | https://github.com/cantoo-scribe/pdf-lib |
| @napi-rs/canvas v1.0.5 | MITCopyright (c) 2020 lynweklm@gmail.com | https://github.com/Brooooooklyn/canvas |
| @pdf-lib/standard-fonts v1.0.0 | MITCopyright 2018 Andrew Dillon | https://github.com/Hopding/standard-fonts |
| @pdf-lib/upng v1.0.1 | MITCopyright 2017 Photopea | https://github.com/Hopding/upng |
| color v4.2.3 | MITCopyright 2012 Heather Arthur | https://github.com/Qix-/color |
| color-convert v2.0.1 | MITCopyright 2011-2016 Heather Arthur | https://github.com/Qix-/color-convert |
| color-name v1.1.4 | MITCopyright 2015 Dmitry Ivanov | https://github.com/colorjs/color-name |
| color-string v1.9.1 | MITCopyright 2011 Heather Arthur | https://github.com/Qix-/color-string |
| crypto-js v4.2.0 | MITCopyright 2009-2013 Jeff Mott; 2013-2016 Evan Vosberg | https://github.com/brix/crypto-js |
| DOMPurify v3.4.13 | Apache-2.0 (elected from MPL-2.0 OR Apache-2.0)Copyright 2015 Mario Heiderich | https://github.com/cure53/DOMPurify |
| exifr v7.1.3 | MITMIT notice retained in installed package | https://github.com/MikeKovarik/exifr |
| fflate v0.8.3 | MITCopyright (c) 2026 Arjun Barrett | https://github.com/101arrowz/fflate |
| html-entities v2.6.0 | MITCopyright 2021 Dulin Marat | https://github.com/mdevils/html-entities |
| is-arrayish v0.3.2 | MITCopyright 2015 JD Ballard | https://github.com/qix-/node-is-arrayish |
| JsBarcode v3.12.3 | MITCopyright and permission notice retained in MIT-LICENSE.txt | https://github.com/lindell/JsBarcode |
| @zxing/library v0.21.3 | Apache-2.0 plus bundled BSD-3-Clause noticeLicense and bundled notices retained in installed package | https://github.com/zxing-js/library |
| jsQR v1.4.0 | Apache-2.0Apache-2.0 license retained in the installed package | https://github.com/cozmo/jsQR |
| Marked v14.0.0 | MIT and BSD-3-Clause noticesCopyright 2011-2018 Christopher Jeffrey; 2018+ MarkedJS; Markdown copyright 2004 John Gruber | https://github.com/markedjs/marked |
| node-html-better-parser v1.5.9 | MITCopyright 2019 Tao Qiufeng | https://github.com/Sharcoux/node-html-parser |
| pako v2.2.0 | MIT AND ZlibCopyright 2014-2017 Vitaly Puzrin and Andrei Tuputcyn; Zlib copyright 1995-2013 Jean-loup Gailly and Mark Adler | https://github.com/nodeca/pako |
| pdfjs-dist v6.2.108 | Apache-2.0; bundled Adobe CMap resources under a separate BSD-style noticeCopyright 2012 Mozilla Foundation; Adobe CMap resources copyright 1990-2009 Adobe Systems Incorporated | https://github.com/mozilla/pdf.js |
| PostHog JS v1.410.6 | Apache-2.0 and MIT noticesCopyright 2020 Posthog / Hiberly, Inc.; 2015 Mixpanel, Inc.; embedded-component notices retained upstream | https://github.com/PostHog/posthog-js |
| qrcode v1.5.4 | MITCopyright 2012 Ryan Day | https://github.com/soldair/node-qrcode |
| simple-swizzle v0.2.2 | MITCopyright 2015 Josh Junon | https://github.com/qix-/node-simple-swizzle |
| sharp v0.35.3 | Apache-2.0Copyright 2013 Lovell Fuller and others | https://github.com/lovell/sharp |
| sharp-libvips v1.3.2 | LGPL-3.0-or-later plus bundled-library noticesCopyright holders identified by each bundled library | https://github.com/lovell/sharp-libvips |
| tesseract.js v7.0.0 | Apache-2.0Apache-2.0 license retained in the installed package | https://github.com/naptha/tesseract.js |
| argparse v2.0.1 | Python-2.0Python-2.0 license notice retained in installed package | https://github.com/nodeca/argparse |
| commander v2.20.3 | MITMIT notice retained in installed package | https://github.com/tj/commander.js |
| discontinuous-range v1.0.0 | MITMIT notice retained in installed package | https://github.com/doodlewind/discontinuous-range |
| moo v0.5.3 | BSD-3-ClauseBSD-3-Clause notice retained in installed package | https://github.com/no-context/moo |
| nearley v2.20.1 | MITMIT notice retained in installed package | https://github.com/kach/nearley |
| railroad-diagrams v1.0.0 | CC0-1.0CC0-1.0 notice retained in installed package | https://github.com/tabatkins/railroad-diagrams |
| randexp v0.4.6 | MITMIT notice retained in installed package | https://github.com/fent/randexp.js |
| ret v0.1.15 | MITMIT notice retained in installed package | https://github.com/fent/ret.js |
| sql-formatter v15.8.2 | MITMIT notice retained in installed package | https://github.com/sql-formatter-org/sql-formatter |
| ts-custom-error v3.3.1 | MITMIT notice retained in installed package | https://github.com/adriengibrat/ts-custom-error |
| tslib v2.8.1 | 0BSDCopyright Microsoft Corporation | https://github.com/microsoft/tslib |
Native image components
The CMS distributes unmodified sharp/libvips native components. LGPL-covered libraries remain replaceable and modifiable under their license. Their corresponding source and complete bundled-library license table are available from the linked sharp-libvips repository and package release.
The complete versioned inventory and combined notices are maintained in THIRD_PARTY_NOTICES.md in the Tooliba repository.