# Open-source notices

All Sorted uses selected, substantially adapted processing workflows from OmniTools.
Source: https://github.com/iib0011/omni-tools
Reviewed revision: cf41a30dda37e1f33deeeb03f959295c249c2beb
Adapted areas: browser canvas image conversion/resizing and PDF page copying/merging.
Changes include bounded sequential batches, cancellation, explicit output checks, image limits,
duplicate-safe downloads, stricter PDF input handling, and a new interface.

MIT License
Copyright (c) 2024 Ibrahima Gaye Coulibaly

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

## HEIC decoder

heic-to 1.6.6, LGPL-3.0-or-later, is shipped unmodified as a separate browser module.
Source and build instructions: https://github.com/hoppergee/heic-to/tree/v1.6.6
Upstream repository: https://github.com/hoppergee/heic-to
The library includes libheif/libde265 components; their upstream license terms apply.
https://github.com/strukturag/libheif
https://github.com/strukturag/libde265

License copies: /licenses/heic-to-LGPL.txt and /licenses/GPL-3.0.txt.
No warranty is provided. Modification/reverse engineering for debugging modified library
versions is not restricted. Replace public/vendor/heic-to.js with an interface-compatible
module to use a modified version. The worker loads that module by URL without an integrity
lock. scripts/prepare-assets.mjs copies the installed package; omit that step when substituting
a modified build. Verify corresponding-source packaging before public distribution.

## PNG compression

@jsquash/oxipng 2.3.0 supplies the OxiPNG WebAssembly codec, built from OxiPNG 9.0
according to the package changelog (the codec README still says 3.0.0).
Source: https://github.com/jamsinclair/jSquash/tree/main/packages/oxipng
OxiPNG source: https://github.com/oxipng/oxipng

jSquash/Squoosh glue: Apache-2.0, Copyright 2020 Google Inc., with changes by
Jamie Sinclair. License: /licenses/jsquash-Apache-2.0.txt.
OxiPNG: MIT, Copyright (c) 2016 Joshua Holmer. License: /licenses/oxipng-MIT.txt.
All Sorted imports the unmodified single-thread codec directly and hosts its WASM
locally through Vite. No parallel runtime or external compression service is used.

## Added toolkit libraries

PDF compression uses pdfstudio 0.4.0 (Apache-2.0), wrapping qpdf 12.3.2 compiled
to WebAssembly. Source: https://github.com/fayazara/pdfstudio and
https://github.com/qpdf/qpdf/tree/v12.3.2. All Sorted imports the unmodified binary
and adds bounded parsing, conservative image replacement and a no-bloat fallback.
qpdf copyright (c) 2005-2021 Jay Berkenbilt, 2022-2026 Jay Berkenbilt and
Manfred Holger. Full licenses/notices: /licenses/pdfstudio.txt,
/licenses/qpdf-NOTICE.txt, /licenses/emscripten-LICENSE.txt,
/licenses/zlib-LICENSE.txt and /licenses/libjpeg-README.txt.
This software is based in part on the work of the Independent JPEG Group.
The bundled binary uses Emscripten zlib/libjpeg ports; its exact dependency
versions are not identified by the published package. The included upstream
license texts cover those components; see research/pdf-compression-engine-2026-10-17.md
for provenance and this limitation. No Ghostscript binary is distributed.

Spreadsheets: Papa Parse 5.7.0 (MIT), https://github.com/mholt/PapaParse,
and SheetJS CE 0.20.3 (Apache-2.0), https://git.sheetjs.com/sheetjs/sheetjs.
SheetJS comes from its official cdn.sheetjs.com distribution, recorded with
integrity in package-lock.json. Licenses: /licenses/papaparse.txt and /licenses/xlsx.txt.

QR codes: qr-code-styling 1.9.2 (MIT), https://github.com/kozakdenys/qr-code-styling,
qrcode-generator 1.4.4 (MIT), https://github.com/kazuhikoarase/qrcode-generator,
and jsQR 1.4.0 (Apache-2.0), https://github.com/cozmo/jsQR.
Licenses: /licenses/qr-code-styling.txt, /licenses/qrcode-generator.txt and /licenses/jsqr.txt.
QR Code is a registered trademark of DENSO WAVE INCORPORATED.

Photo cropping: react-easy-crop 6.2.4 (MIT), https://github.com/ValentinH/react-easy-crop.
License: /licenses/react-easy-crop.txt. Archives reuse fflate 0.8.3 (MIT),
https://github.com/101arrowz/fflate; /licenses/fflate.txt.

## Other dependencies

Optional usage analytics: Firebase JavaScript SDK 12.19.0 (Apache-2.0).
Source: https://github.com/firebase/firebase-js-sdk
Only the App and Analytics modules are loaded, after visitor consent.
Apache-2.0 license text: /licenses/jsquash-Apache-2.0.txt.

PDF manipulation: @cantoo/pdf-lib (MIT), installed under the pdf-lib package alias.
PDF rendering: Mozilla PDF.js (Apache-2.0).
React, React Router, fflate: MIT. Lucide icons: ISC. DM Sans: SIL Open Font License 1.1.
Exact installed versions and transitive dependencies are recorded in package-lock.json.
Individual license texts remain in the corresponding node_modules packages.

The All Sorted wordmark uses DM Sans. The SVG exports contain outlined glyphs;
the font's SIL Open Font License is included at /licenses/dm-sans-OFL.txt.

No BentoPDF, MAZANOKE, Ghostscript, IMG.LY, or hosted PDF editor code is included.

## Interface components

Aceternity UI Resizable Navbar, Card Hover Effect, and File Upload were obtained
from the public component registry on 2026-10-16 and adapted for All Sorted.
Sources:
https://ui.aceternity.com/components/resizable-navbar
https://ui.aceternity.com/components/card-hover-effect
https://ui.aceternity.com/components/file-upload
Aceternity licensing terms: https://ui.aceternity.com/licence
No paid templates or Pro blocks are included.

shadcn/ui components: Button, Card, Dialog, Input, Navigation Menu, and Tabs.
Source: https://github.com/shadcn-ui/ui
MIT License, Copyright (c) 2023 shadcn. Full text: /licenses/shadcn-MIT.txt.

Motion, Radix UI, react-dropzone, Tailwind CSS, class-variance-authority, cn, and
tw-animate-css are used under their package licenses. Versions are pinned in
package-lock.json; license files are in their installed packages.