noir.photos third-party software notices
=========================================

This distribution uses the following third-party software. These notices do
not change the licence of noir.photos application code.

libheif-js 1.19.8 / libheif 1.19.8 / libde265 1.0.15
-----------------------------------------------------

noir.photos uses libheif-js 1.19.8 to decode HEIC/HEIF images. libheif-js and
the linked libheif 1.19.8 and libde265 1.0.15 decoder are covered by the GNU
Lesser General Public License version 3. This build is decode-only: it does not
link the x265 HEIF encoder.

Copyright and licence:
  /licenses/LGPL-3.0.txt
  /licenses/GPL-3.0.txt

Exact corresponding source archives shipped with this release:
  /sources/libheif-js-1.19.8-source.tar.gz
    SHA-256 d736b0590cf356012c0e278d0a45c94fa97671751a4c4e4a467aae14b3a46003
    Upstream tag 1.19.8, commit fe8e9c29440b839910be9dc32e8d2b826c8217ca
  /sources/libheif-emscripten-v1.19.8-source.tar.gz
    SHA-256 f2a90f5fc1442c9ad6a488a0dc61afc4daee3cea26d3571c33873992a060a656
    Upstream tag v1.19.8, commit a6c4a1b450f1dab0d68887a57b5ac3d69e618436
  /sources/libheif-v1.19.8-source.tar.gz
    SHA-256 d73dfba9f023a49b6a47486265669fc0fca861fccb8df8c717fcc908853df866
    Upstream tag v1.19.8, commit 5e9deb19fe6b3768af0bb8e9e5e8438b15171bf3
  /sources/libde265-1.0.15-source.tar.gz
    SHA-256 00251986c29d34d3af7117ed05874950c875dd9292d016be29d3b3762666511d
    Upstream release v1.0.15; version pinned by libheif's build-emscripten.sh

Upstream repositories:
  https://github.com/catdad-experiments/libheif-js
  https://github.com/catdad-experiments/libheif-emscripten
  https://github.com/strukturag/libheif
  https://github.com/strukturag/libde265

Relinking/replacement:
  The generated, lazily loaded /assets/heic.worker-*.js file is a statically
  combined work: it contains the noir.photos HEIF worker wrapper, libheif,
  libde265 and the WASM binary embedded as data. The LGPL-covered decoder is
  not present in the initial application module, but there is deliberately no
  separately served libheif-bundle file. A modified decoder is relinked by
  rebuilding this dedicated worker from the supplied corresponding sources
  and the noir.photos application source, then replacing the worker asset.
  The application does not verify or prevent that replacement.

  Reproducible source-build, application-relink and direct-replacement steps:
    /licenses/RELINKING-libheif.txt

fflate 0.8.3
------------

fflate is licensed under the MIT License.

Copyright and licence:
  /licenses/MIT-fflate.txt

Upstream repository:
  https://github.com/101arrowz/fflate

JetBrains Mono (Medium, subsetted)
-----------------------------------

noir.photos self-hosts a single-weight, printable-ASCII-only subset of
JetBrains Mono (Medium) for numeral and data display. The subset was produced
from upstream commit 19371302 (2025-01-31; version string "2.305") with
fonttools' pyftsubset, keeping only U+0020-007E and dropping hinting. JetBrains
Mono is licensed under the SIL Open Font License, Version 1.1; the full,
unmodified upstream font sources remain available from the upstream repository.

Copyright and licence:
  /licenses/OFL-JetBrainsMono.txt

Upstream repository:
  https://github.com/JetBrains/JetBrainsMono