# Third-party notices

This site distributes the libraries and fonts below. They are **not** covered by
[`LICENSE.md`](https://anas-ha.com/LICENSE.md) or
[`LICENSE-CONTENT.md`](https://anas-ha.com/LICENSE-CONTENT.md). Each keeps its
own terms, and those terms apply to it regardless of how the rest of this
project is licensed.

A plain-language summary of the licensing on this site:
<https://anas-ha.com/license/>

Every file listed here carries its own licence header in the file itself. Those
headers must not be removed.

## JavaScript libraries

| Library | Version | Licence | Copyright | Vendored at |
|---|---|---|---|---|
| [pdf.js](https://github.com/mozilla/pdf.js) | 4.6.82 | Apache License 2.0 | Mozilla Foundation | `assets/js/lib/pdf.js`, `assets/js/lib/pdf.worker.js` |
| [pdf-lib](https://github.com/Hopding/pdf-lib) | 1.17.1 | MIT | Andrew Dillon | `assets/js/lib/pdf-lib.min.js` |
| [JSZip](https://github.com/Stuk/jszip) | 3.10.1 | MIT (see below) | Stuart Knightley | `assets/js/lib/jszip.js` |

**JSZip** is offered under a dual licence, *"Dual licenced under the MIT license
or GPLv3"*, and is used here under the **MIT** option. It bundles
[pako](https://github.com/nodeca/pako), also MIT.

**pdf-lib**'s minified bundle includes fragments of
[tslib](https://github.com/microsoft/tslib) (Copyright Microsoft Corporation,
Apache License 2.0); the notice is present in the file header.

These files are vendored rather than loaded from a CDN so the tools make no
third-party requests at runtime. `scripts/vendor-pdf-libs.sh` fetches them and
records the pinned versions.

## Fonts

| Font | Licence | Vendored at |
|---|---|---|
| [Fira Code](https://github.com/tonsky/FiraCode) | SIL Open Font License 1.1 | `assets/fonts/fira-code/` |

The SIL OFL requires that the font's own copyright and licence notice travel
with the font files, that the fonts not be sold on their own, and that any
modified version not use the reserved font name.

## Build-time dependencies

Jekyll and its plugins (`jekyll`, `jekyll-seo-tag`, `jekyll-sitemap`,
`jekyll-sass-converter`, and their transitive dependencies) are MIT-licensed and
are used to build the site. They are not redistributed by it. See `Gemfile` and
`Gemfile.lock` for the exact set.

The Playwright, axe-core and html-validate packages under `tests/harness/` are
development-only and are likewise not redistributed.