# Third-party notices

Plotvera by Anaphase. Made by Anaphase Ltd (company number 17537023), 71-75 Shelton Street, London WC2H 9JQ.
Plotvera itself is licensed under the PolyForm Shield License 1.0.0
(see `LICENSE`). This file lists the third-party software, fonts, fixtures and
format research that Plotvera includes or builds on.

It has two parts. The production dependency inventory at the end is generated
from the installed dependency tree by `node scripts/third-party-notices.mjs`
and is checked by `test/third_party_notices.test.ts`, which fails when a
production dependency is missing from it. The hand-written sections keep the
notices that the generated table cannot carry: font licences, fixtures and
adapted format research. Neither part is a legal review; owner or counsel
approval of the release's notices remains a public-launch gate
(`docs/LAUNCH_GATES.md`).

## Spreadsheet import (SheetJS)

Excel import uses the SheetJS Community Edition `xlsx` 0.20.3, installed from
the SheetJS CDN tarball (https://cdn.sheetjs.com/xlsx-0.20.3/xlsx-0.20.3.tgz)
and declared by its package as Apache-2.0. It is listed under
`devDependencies` but the app imports it, so it is bundled into the public
build and appears in the generated inventory marked "bundled".

## Interface fonts (Inter and Manrope)

The interface fonts are self-hosted from `public/fonts/` (no remote font
service is contacted). Inter (https://github.com/rsms/inter) and Manrope
(https://github.com/sharanda/manrope) are each licensed under the SIL Open Font
License 1.1, the same licence text reproduced below for Noto Sans. The files
are the Latin subsets in the `@fontsource` packaging; the copyright lines are
"Copyright (c) 2016 The Inter Project Authors" and "Copyright 2018 The Manrope
Project Authors".

## Colour palettes

The journal-style colour orders in `src/charts/palettes.ts` (npg, aaas,
lancet, nejm, jama, jco) reproduce the colour values published in the ggsci R
package (https://github.com/nanxstats/ggsci, GPL-3.0). Only hexadecimal colour
values are reused; no ggsci code is included. The journal names identify the
style only and imply no affiliation or endorsement.

## Vector PDF export

Plotvera's optional, on-demand vector PDF exporter uses
[jsPDF](https://github.com/parallax/jsPDF) 4.2.1 and
[svg2pdf.js](https://github.com/yWorks/svg2pdf.js) 2.7.0 under their MIT
licences. The exporter embeds the regular and bold Noto Sans font files shipped
by [`@expo-google-fonts/noto-sans`](https://github.com/expo/google-fonts) 0.4.2.
Those font files are Copyright 2022 The Noto Project Authors and are licensed
under the SIL Open Font License 1.1.

The MIT notices for this export stack are:

> Copyright (c) 2010-2025 James Hall, https://github.com/MrRio/jsPDF
>
> Copyright (c) 2015-2025 yWorks GmbH, https://www.yworks.com/
>
> Copyright (c) 2013-2015 Vitaly Puzrin
>
> Copyright (c) 2020 Expo
>
> Permission is hereby granted, free of charge, to any person obtaining a copy
> of this software and associated documentation files (the "Software"), to deal
> in the Software without restriction, including without limitation the rights
> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
> copies of the Software, and to permit persons to whom the Software is
> furnished to do so, subject to the following conditions:
>
> The above copyright notice and this permission notice shall be included in all
> copies or substantial portions of the Software.
>
> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
> SOFTWARE.

The embedded Noto Sans files carry this notice and licence:

> Copyright 2022 The Noto Project Authors
> (https://github.com/notofonts/latin-greek-cyrillic)
>
> SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
>
> PREAMBLE
>
> The goals of the Open Font License (OFL) are to stimulate worldwide
> development of collaborative font projects, to support the font creation
> efforts of academic and linguistic communities, and to provide a free and
> open framework in which fonts may be shared and improved in partnership with
> others.
>
> The OFL allows the licensed fonts to be used, studied, modified and
> redistributed freely as long as they are not sold by themselves. The fonts,
> including any derivative works, can be bundled, embedded, redistributed
> and/or sold with any software provided that any reserved names are not used
> by derivative works. The fonts and derivatives, however, cannot be released
> under any other type of license. The requirement for fonts to remain under
> this license does not apply to any document created using the fonts or their
> derivatives.
>
> DEFINITIONS
>
> "Font Software" refers to the set of files released by the Copyright Holder(s)
> under this license and clearly marked as such. This may include source files,
> build scripts and documentation.
>
> "Reserved Font Name" refers to any names specified as such after the copyright
> statement(s).
>
> "Original Version" refers to the collection of Font Software components as
> distributed by the Copyright Holder(s).
>
> "Modified Version" refers to any derivative made by adding to, deleting, or
> substituting -- in part or in whole -- any of the components of the Original
> Version, by changing formats or by porting the Font Software to a new
> environment.
>
> "Author" refers to any designer, engineer, programmer, technical writer or
> other person who contributed to the Font Software.
>
> PERMISSION & CONDITIONS
>
> Permission is hereby granted, free of charge, to any person obtaining a copy
> of the Font Software, to use, study, copy, merge, embed, modify, redistribute,
> and sell modified and unmodified copies of the Font Software, subject to the
> following conditions:
>
> 1) Neither the Font Software nor any of its individual components, in Original
> or Modified Versions, may be sold by itself.
>
> 2) Original or Modified Versions of the Font Software may be bundled,
> redistributed and/or sold with any software, provided that each copy contains
> the above copyright notice and this license. These can be included either as
> stand-alone text files, human-readable headers or in the appropriate
> machine-readable metadata fields within text or binary files as long as those
> fields can be easily viewed by the user.
>
> 3) No Modified Version of the Font Software may use the Reserved Font Name(s)
> unless explicit written permission is granted by the corresponding Copyright
> Holder. This restriction only applies to the primary font name as presented to
> the users.
>
> 4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font Software
> shall not be used to promote, endorse or advertise any Modified Version,
> except to acknowledge the contribution(s) of the Copyright Holder(s) and the
> Author(s) or with their explicit written permission.
>
> 5) The Font Software, modified or unmodified, in part or in whole, must be
> distributed entirely under this license, and must not be distributed under
> any other license. The requirement for fonts to remain under this license does
> not apply to any document created using the Font Software.
>
> TERMINATION
>
> This license becomes null and void if any of the above conditions are not met.
>
> DISCLAIMER
>
> THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
> OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF MERCHANTABILITY,
> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF COPYRIGHT, PATENT,
> TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR
> ANY CLAIM, DAMAGES OR OTHER LIABILITY, INCLUDING ANY GENERAL, SPECIAL,
> INDIRECT, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, WHETHER IN AN ACTION OF
> CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF THE USE OR INABILITY TO USE
> THE FONT SOFTWARE OR FROM OTHER DEALINGS IN THE FONT SOFTWARE.

## PrismBinder PCFF graph-format research

Plotvera's bounded `PCFFGRA4` metadata reader incorporates and adapts format
research from the MIT-licensed
[PrismBinder](https://github.com/honeymaro/prismbinder/tree/71b8cab1ef93e7b7fb47848859629d7b19cfd6ee).

> MIT License
>
> Copyright (c) 2026 prismbinder contributors
>
> Permission is hereby granted, free of charge, to any person obtaining a copy
> of this software and associated documentation files (the "Software"), to deal
> in the Software without restriction, including without limitation the rights
> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
> copies of the Software, and to permit persons to whom the Software is
> furnished to do so, subject to the following conditions:
>
> The above copyright notice and this permission notice shall be included in all
> copies or substantial portions of the Software.
>
> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
> SOFTWARE.

## Prism compatibility fixtures

Plotvera's offline compatibility tests redistribute two Prism 10 `.prism`
projects and four `.pzfx` projects under their upstream MIT licences. Exact
source repositories, immutable commits, paths, SHA-256 values, modifications,
and vendored licence copies are recorded in
[`test/fixtures/prism/THIRD_PARTY_NOTICES.md`](test/fixtures/prism/THIRD_PARTY_NOTICES.md)
and [`test/fixtures/prism/manifest.json`](test/fixtures/prism/manifest.json).

GraphPad and Prism are trademarks of GraphPad Software, LLC / Dotmatics.
Plotvera is an independent interoperability implementation and is not
affiliated with, endorsed by, or sponsored by those companies. The names are
used only to identify compatible file formats.

## Production dependency inventory

<!-- BEGIN GENERATED: production dependency inventory (scripts/third-party-notices.mjs) -->

63 packages. Licences: MIT 55; (MIT AND Zlib) 2; ISC 2; (MIT OR GPL-3.0-or-later) 1; (MPL-2.0 OR Apache-2.0) 1; Apache-2.0 1; MIT AND OFL-1.1 1.

Generated from `pnpm licenses list --prod --json` plus dev dependencies that the app bundles (marked "bundled"). Licence identifiers are as each package declares them; they have not been reviewed by counsel.

| Package | Version | Licence | Homepage |
| --- | --- | --- | --- |
| @babel/runtime | 7.29.7 | MIT | https://babel.dev/docs/en/next/babel-runtime |
| @expo-google-fonts/noto-sans | 0.4.2 | MIT AND OFL-1.1 | https://github.com/expo/google-fonts/tree/master/font-packages/noto-sans#readme |
| @types/node | 22.19.21 | MIT | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node |
| @types/pako | 2.0.4 | MIT | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/pako |
| @types/raf | 3.4.3 | MIT | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/raf |
| @types/react | 19.2.17 | MIT | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react |
| @types/trusted-types | 2.0.7 | MIT | https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/trusted-types |
| base64-arraybuffer | 1.0.2 | MIT | https://github.com/niklasvh/base64-arraybuffer |
| canvg | 3.0.11 | MIT | https://github.com/canvg/canvg#readme |
| core-js | 3.50.0 | MIT | https://core-js.io |
| core-util-is | 1.0.3 | MIT | https://github.com/isaacs/core-util-is#readme |
| css-line-break | 2.1.0 | MIT | https://github.com/niklasvh/css-line-break#readme |
| cssesc | 3.0.0 | MIT | https://mths.be/cssesc |
| csstype | 3.2.3 | MIT | https://github.com/frenic/csstype#readme |
| dompurify | 3.4.16 | (MPL-2.0 OR Apache-2.0) | https://github.com/cure53/DOMPurify |
| fast-png | 6.4.0 | MIT | https://github.com/image-js/fast-png#readme |
| fflate | 0.8.3 | MIT | https://101arrowz.github.io/fflate |
| font-family-papandreou | 0.2.0-patch2 | MIT | https://github.com/hanamura/font-family |
| html2canvas | 1.4.1 | MIT | https://html2canvas.hertzen.com |
| https | 1.0.0 | ISC |  |
| image-size | 2.0.2 | MIT | https://github.com/image-size/image-size#readme |
| immediate | 3.0.6 | MIT | https://github.com/calvinmetcalf/immediate#readme |
| inherits | 2.0.4 | ISC | https://github.com/isaacs/inherits#readme |
| iobuffer | 5.4.0 | MIT | https://github.com/image-js/iobuffer#readme |
| is-any-array | 3.0.0 | MIT | https://github.com/cheminfo-js/is-any-array#readme |
| isarray | 1.0.0 | MIT | https://github.com/juliangruber/isarray |
| jspdf | 4.2.1 | MIT | https://github.com/parallax/jsPDF |
| jstat | 1.9.6 | MIT | http://github.com/jstat/jstat |
| jszip | 3.10.1 | (MIT OR GPL-3.0-or-later) | https://github.com/Stuk/jszip#readme |
| lie | 3.3.0 | MIT | https://github.com/calvinmetcalf/lie#readme |
| ml-array-max | 2.0.0 | MIT | https://github.com/mljs/array/tree/master/packages/array-max#readme |
| ml-array-min | 2.0.0 | MIT | https://github.com/mljs/array/tree/master/packages/array-min#readme |
| ml-array-rescale | 2.0.0 | MIT | https://github.com/mljs/array/tree/master/packages/array-rescale#readme |
| ml-levenberg-marquardt | 5.0.1 | MIT | https://github.com/mljs/levenberg-marquardt#readme |
| ml-matrix | 6.12.2 | MIT | https://github.com/mljs/matrix |
| nanoid | 5.1.16 | MIT | https://github.com/ai/nanoid#readme |
| pako | 1.0.11 | (MIT AND Zlib) | https://github.com/nodeca/pako#readme |
| pako | 2.2.0 | (MIT AND Zlib) | https://github.com/nodeca/pako#readme |
| papaparse | 5.5.3 | MIT | https://www.papaparse.com/ |
| performance-now | 2.1.0 | MIT | https://github.com/braveg1rl/performance-now |
| pptxgenjs | 4.0.1 | MIT | https://gitbrent.github.io/PptxGenJS/ |
| process-nextick-args | 2.0.1 | MIT | https://github.com/calvinmetcalf/process-nextick-args |
| raf | 3.4.1 | MIT | https://github.com/chrisdickinson/raf#readme |
| react | 19.2.7 | MIT | https://react.dev/ |
| react-dom | 19.2.7 | MIT | https://react.dev/ |
| readable-stream | 2.3.8 | MIT | https://github.com/nodejs/readable-stream#readme |
| regenerator-runtime | 0.13.11 | MIT | https://github.com/facebook/regenerator/tree/main#readme |
| rgbcolor | 1.0.1 | MIT | https://github.com/yetzt/node-rgbcolor#readme |
| safe-buffer | 5.1.2 | MIT | https://github.com/feross/safe-buffer |
| scheduler | 0.27.0 | MIT | https://react.dev/ |
| setimmediate | 1.0.5 | MIT | https://github.com/YuzuJS/setImmediate#readme |
| specificity | 0.4.1 | MIT | https://github.com/keeganstreet/specificity |
| stackblur-canvas | 2.7.0 | MIT | http://www.quasimondo.com/StackBlurForCanvas/StackBlurDemo.html |
| string_decoder | 1.1.1 | MIT | https://github.com/nodejs/string_decoder |
| svg-pathdata | 6.0.3 | MIT | https://github.com/nfroidure/svg-pathdata#readme |
| svg2pdf.js | 2.7.0 | MIT | https://github.com/yWorks/svg2pdf.js#readme |
| svgpath | 2.6.0 | MIT | https://github.com/fontello/svgpath#readme |
| text-segmentation | 1.0.3 | MIT | https://github.com/niklasvh/text-segmentation |
| undici-types | 6.21.0 | MIT | https://undici.nodejs.org |
| util-deprecate | 1.0.2 | MIT | https://github.com/TooTallNate/util-deprecate |
| utrie | 1.0.2 | MIT | https://github.com/niklasvh/utrie |
| xlsx (bundled) | 0.20.3 | Apache-2.0 | https://sheetjs.com/ |
| zustand | 5.0.14 | MIT | https://github.com/pmndrs/zustand |

<!-- END GENERATED: production dependency inventory -->