THIRD-PARTY SOFTWARE NOTICES AND INFORMATION

This project incorporates components from the projects listed below. The
original copyright notices and license terms are included below.

Generated: 2026-05-26 via `cargo license --avoid-build-deps --avoid-dev-deps`
RC1 commit: 747cf1c8ab6c6debdec734c3569b2995f37d1f1f

All PDFluent workspace crates (formcalc-interpreter, pdf-annot, pdf-compliance,
pdf-docx, pdf-engine, pdf-font, pdf-invoice, pdf-manip, pdf-ocr, pdf-pptx,
pdf-redact, pdf-render, pdf-text-format, pdf-xfa, pdf-xlsx, pdfluent,
pdfluent-cli, pdfluent-extract, pdfluent-forms, pdfluent-sign, xfa-cli,
xfa-dom-resolver, xfa-js-sandboxed, xfa-json, xfa-layout-engine, xfa-license,
xfa-wasm, and others) are covered by the PDFluent Commercial License v1.0
(see LICENSE at the root of this repository).

================================================================================
hayro — A PDF interpreter and renderer in pure Rust
https://github.com/LaurenzV/hayro
================================================================================

Copyright (c) Laurenz Stampfl

Dual-licensed under MIT and Apache-2.0.

Forked crates:
  - hayro-syntax      → pdf-syntax
  - hayro-interpret   → pdf-interpret
  - hayro-font        → pdf-font (merged with hayro-cmap and hayro-postscript)
  - hayro-cmap        → pdf-font::cmap
  - hayro-postscript  → pdf-font::postscript
  - hayro             → pdf-render
  - hayro-jbig2       (retained as-is)
  - hayro-jpeg2000    (retained as-is)
  - hayro-ccitt       (retained as-is)

--- MIT License ---

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

--- Apache License, Version 2.0 ---

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

--- NOTICE (from hayro) ---

The following parts of code have been adapted/translated from PDFBox
(https://github.com/apache/pdfbox), available under the Apache 2.0 license:
  - The encoding maps for some of the standard fonts.
  - The evaluator for type 0 functions.
  - The list of common dictionary keys.

The following parts of code have been adapted/translated from pdf.js
(https://github.com/mozilla/pdf.js), available under the Apache 2.0 license:
  - The CalRGB and CalGray conversion code.
  - The flate decoder.
  - The implementation of AES, MD5, SHA and RC4.

The following parts of code have been adapted/translated from the CFFDump
utility tool (https://github.com/janpe2/CFFDump/), available under the
Apache 2.0 license:
  - The Type1 font parser.

================================================================================
Foxit Embedded Fonts (embedded in pdf-interpret)
================================================================================

The Foxit-branded Type1 fonts (FoxitSans, FoxitSerif, FoxitFixed, FoxitDingbats,
FoxitSymbol) are used as substitutes for the 14 PDF standard fonts. These fonts
are distributed under the Foxit license included in:
  crates/pdf-interpret/assets/LICENSE_FOXIT

Shipped as fourteen Type1 programs in pdf-interpret and the same fourteen as
bare CFF in pdf-standard-fonts.  Listed by file name because that is what the
licence gate counts, and because a family name does not tell a reader which
bytes are in the build:

  crates/pdf-interpret/assets/        crates/pdf-standard-fonts/assets/
    FoxitDingbats.pfb                   FoxitDingbats.cff
    FoxitFixed.pfb                      FoxitFixed.cff
    FoxitFixedBold.pfb                  FoxitFixedBold.cff
    FoxitFixedBoldItalic.pfb            FoxitFixedBoldItalic.cff
    FoxitFixedItalic.pfb                FoxitFixedItalic.cff
    FoxitSans.pfb                       FoxitSans.cff
    FoxitSansBold.pfb                   FoxitSansBold.cff
    FoxitSansBoldItalic.pfb             FoxitSansBoldItalic.cff
    FoxitSansItalic.pfb                 FoxitSansItalic.cff
    FoxitSerif.pfb                      FoxitSerif.cff
    FoxitSerifBold.pfb                  FoxitSerifBold.cff
    FoxitSerifBoldItalic.pfb            FoxitSerifBoldItalic.cff
    FoxitSerifItalic.pfb                FoxitSerifItalic.cff
    FoxitSymbol.pfb                     FoxitSymbol.cff

================================================================================
Adobe CMap Resources (pdf-font, pdf-manip)
================================================================================

Two vendored files, both Adobe's own CMap resources, both BSD-3-Clause:

  crates/pdf-font/assets/cmaps.brotli        the Adobe CMap resources as one
                                             compressed blob, generated by
                                             github.com/LaurenzV/cmap-resources
                                             (branch hayro) and taken with the
                                             pdf-font fork
                                             Copyright 1990-2023 Adobe
  crates/pdf-manip/resources/cmap/GB-EUC-H   one CMap in Adobe's own source
                                             form, read by the PDF/A fixups for
                                             EUC-encoded CID text
                                             Copyright 1990-2019 Adobe

Upstream licence texts in the tree:
  crates/pdf-font/assets/LICENSE.txt              (BSD-3-Clause, full text)
  crates/pdf-manip/resources/cmap/GB-EUC-H        (the notice is the file's own
                                                   header, as Adobe ships it)

AND REPRODUCED HERE, because those two paths exist in a source checkout and a
binary distribution is where the condition bites: BSD-3-Clause asks a
redistribution in binary form to reproduce the notice, the conditions and the
disclaimer "in the documentation and/or other materials provided with the
distribution", and this file is that material. The 1990-2019 text in GB-EUC-H's
header differs from the one below only in its years.

--- BSD 3-Clause, as Adobe ships it with the CMap resources ---

Copyright 1990-2023 Adobe. All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.

Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.

Neither the name of Adobe nor the names of its contributors may be
used to endorse or promote products derived from this software without
specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.


BSD-3-Clause asks that a redistribution in source form keep the copyright
notice, the conditions and the disclaimer. Both files do, inside themselves or
beside themselves; this entry is the other half -- the register that says which
bytes in this tree are not ours. It was missing for GB-EUC-H until the
prepublish audit for pdf-manip-1.0.0-beta.18 listed the path in the packaged
file set, and missing for cmaps.brotli until the same question was asked of
every file under a crate's assets/ and resources/ (#493).

One more file came out of that question and is not third-party work in the sense
the sections above are:

  crates/lopdf/assets/example.pdf   a 329-byte test document from the lopdf
                                    project, vendored with that fork and covered
                                    by its MIT licence above

================================================================================
Embedded ICC Profiles (pdf-interpret, hayro-jpeg2000, pdf-manip)
================================================================================

Six profile files are embedded, three distinct profiles across three crates.
By path, because the same three names occur in more than one crate and a name
on its own does not say which copies are in the build:

  CGATS.001 compatible CMYK, from github.com/saucecontrol/Compact-ICC-Profiles,
  CC0-1.0:
    crates/pdf-interpret/assets/CGATS001Compat-v2-micro.icc
    crates/pdf-manip/assets/CGATS001Compat-v2-micro.icc
    crates/hayro-jpeg2000/assets/CGATS001Compat-v2-micro.icc
  ProPhoto RGB, same upstream, CC0-1.0:
    crates/hayro-jpeg2000/assets/ProPhoto-v2-micro.icc
  Generated with LCMS2; no third-party rights:
    crates/pdf-interpret/assets/LAB.icc
    crates/hayro-jpeg2000/assets/LAB.icc

Each of those directories carries a README.md of its own saying where its
profile came from, and they are ours:
    crates/pdf-interpret/assets/README.md
    crates/pdf-manip/assets/README.md
    crates/hayro-jpeg2000/assets/README.md
  -- and one more beside the CMap blob, pointing at the tool that generated it:
    crates/pdf-font/assets/README.md

PDF/A conversion embeds its own byte-identical copy of the CGATS profile so
that pdf-manip stays self-contained; CC0 carries no attribution condition, but
a second copy in the tree is a second thing to name here.

Upstream licence texts:
  crates/pdf-interpret/assets/CGATS_LICENSE.txt
  crates/pdf-manip/assets/CGATS_LICENSE.txt   (same text, same profile)
  crates/hayro-jpeg2000/assets/LICENSE.txt  (CC0 1.0 Universal, full text)

ProPhoto was previously absent from this file while being present in the tree
and correctly attributed in crates/hayro-jpeg2000/assets/README.md. That is the
same shape of gap as the JNA entry above: recorded where the build can see it
and missing from the document that leaves the building. Naming all three here
is the point, not naming the one that happened to be asked about.

================================================================================
Java Binding Dependencies (resolved by Maven in the user's own build)
================================================================================

net.java.dev.jna:jna 5.14.0 — Apache-2.0, as elected by PDFluent.

JNA has been offered under two licences since version 4.0: LGPL-2.1-or-later OR
Apache-2.0. PDFluent takes Apache-2.0, so no LGPL obligation travels to a
commercial licensee. Recording that choice is the point of this entry: without
it the default reading of a dual-licensed dependency is the copyleft half, and
that is a different answer to give a buyer's lawyer than the one we mean.

The election is held as data in docs/LICENSE_POLICY.toml under [elections], and
scripts/ci/license_gate.py fails on any Maven dependency that has no election
recorded. This paragraph is the human-readable half of that same fact.

We ship no shaded or assembled jar; the POM declares JNA and Maven resolves it
in the user's own build. It is listed here because it is the one external
runtime dependency across all bindings, and an unlisted dependency is
indistinguishable from one nobody looked at.

================================================================================
Rust Crate Dependencies — Complete List (cargo license 2026-05-26)
================================================================================

The following crates are transitive dependencies of PDFluent at rc1.
License expressions follow SPDX 3.x syntax.

---- Apache-2.0 OR MIT (and combined expressions with these) ----
aes, ahash, aligned, android_system_properties, anstream, anstyle,
anstyle-parse, anstyle-query, anstyle-wincon, anyhow, arbitrary, arrayvec,
as-slice, atomic-waker, base16ct, base64, base64ct, bit-set, bit-vec,
bit_field, bitflags, bitstream-io, block-buffer, block-padding, bs58,
bumpalo, bytecount, camino, cargo-platform, cbc, cesu8, cfg-if, chrono,
cipher, clap, clap_builder, clap_complete, clap_derive, clap_lex, clap_mangen,
color, colorchoice, const-oid, cookie, core-foundation, core-foundation-sys,
core-graphics, core-graphics-types, cpufeatures, crc32fast, crossbeam-channel,
crossbeam-deque, crossbeam-epoch, crossbeam-utils, crypto-bigint,
crypto-common, ctor, ctor-proc-macro, curve25519-dalek-derive, dbus, der,
deranged, derive_arbitrary, des, digest, dirs, dirs-sys, displaydoc,
document-features, dtoa, dtor, dtor-proc-macro, dyn-clone, ecdsa, ed25519,
either, elliptic-curve, embed_plist, encode_unicode, equivalent, erased-serde,
errno, euclid, fallible-iterator, fallible-streaming-iterator,
fast_image_resize, fastrand, fdeflate, fearless_simd, ff, field-offset,
flate2, fnv, font-types, foreign-types, foreign-types-macros,
foreign-types-shared, form_urlencoded, futf, futures-channel, futures-core,
futures-executor, futures-io, futures-macro, futures-sink, futures-task,
futures-util, fxhash, getopts, getrandom, gif, glob, group, half, hashbrown,
hashlink, heck, hermit-abi, hex, hmac, html5ever, http, httparse, httpdate,
hyper-tls, iana-time-zone, iana-time-zone-haiku, id-arena, ident_case, idna,
idna_adapter, image, image-webp, indexmap, inout, ipnet, is_terminal_polyfill,
itertools, itoa, jni, jni-sys, jni-sys-macros, js-sys, json-patch, jsonptr,
keyboard-types, kurbo, lazy_static, leb128fmt, libappindicator,
libappindicator-sys, libc, libdbus-sys, linebender_resource_handle, litrs,
lock_api, log, mac, markup5ever, md-5, mime, minimal-lexical, muda,
native-tls, ndk, ndk-sys, no_std_io2, num-bigint, num-bigint-dig, num-conv,
num-derive, num-integer, num-iter, num-rational, num-traits, num_cpus,
once_cell, once_cell_polyfill, openssl-macros, openssl-probe, ordered-channel,
p12, p256, p384, parking_lot, parking_lot_core, paste, pastey, pathdiff,
pdf-content-stream, pdf-interpret, pdf-syntax, pdfluent-ccitt, pdfluent-cff,
pdfluent-jbig2, pdfluent-jpeg2000, peniko, percent-encoding,
pin-project-lite, pkcs1, pkcs8, png, polycool, portable-atomic,
portable-atomic-util, powerfmt, ppv-lite86, prettyplease, primeorder,
proc-macro-crate, proc-macro-error, proc-macro-error-attr, proc-macro2,
profiling, profiling-procmacros, qoi, quick-error, quote, rand, rand_chacha,
rand_core, rangemap, rayon, rayon-core, rc2, read-fonts, ref-cast,
ref-cast-impl, regex, regex-automata, regex-lite, regex-syntax, relative-path,
reqwest, rfc6979, roff, roxmltree, rsa, rust_xlsxwriter, rustc-hash,
rustls-pki-types, rustversion, scopeguard, sec1, security-framework,
security-framework-sys, semver, serde, serde-untagged, serde_core,
serde_derive, serde_derive_internals, serde_json, serde_path_to_error,
serde_repr, serde_spanned, serde_urlencoded, serde_with, serde_with_macros,
serialize-to-javascript, serialize-to-javascript-impl, servo_arc, sha1, sha2,
signal-hook, signal-hook-registry, signature, siphasher, skrifa, smallvec,
socket2, softbuffer, spki, stable_deref_trait, string_cache, stringprep,
subsetter, swift-rs, syn, system-configuration, system-configuration-sys,
tao, tao-macros, tauri, tauri-codegen, tauri-macros, tauri-plugin-dialog,
tauri-plugin-fs, tauri-plugin-shell, tauri-runtime, tauri-runtime-wry,
tauri-utils, tempfile, tendril, thiserror, thiserror-impl, thread_local,
tikv-jemalloc-sys, tikv-jemallocator, time, time-core, time-macros,
tokio-rustls, toml, toml_datetime, toml_edit, toml_parser, toml_writer,
tray-icon, ttf-parser, typed-path, typeid, typenum, unic-char-property,
unic-char-range, unic-common, unic-ucd-ident, unic-ucd-version, unicode-bidi,
unicode-normalization, unicode-properties, unicode-segmentation, unicode-width,
unicode-xid, url, utf-8, utf8_iter, utf8parse, uuid, vello_common, vello_cpu,
wasm-bindgen, wasm-bindgen-futures, wasm-bindgen-macro,
wasm-bindgen-macro-support, wasm-bindgen-shared, wasm-streams, web-sys,
web-time, web_atoms, weezl, winapi, winapi-i686-pc-windows-gnu,
winapi-x86_64-pc-windows-gnu, window-vibrancy, windows, windows-collections,
windows-core, windows-future, windows-implement, windows-interface,
windows-link, windows-numerics, windows-registry, windows-result,
windows-strings, windows-sys, windows-targets, windows-threading,
windows-version, windows_aarch64_gnullvm, windows_aarch64_msvc, windows_i686_gnu,
windows_i686_gnullvm, windows_i686_msvc, windows_x86_64_gnu,
windows_x86_64_gnullvm, windows_x86_64_msvc, write-fonts, wry, xmp-writer,
yasna, zeroize

License: Apache-2.0 OR MIT (see https://opensource.org/licenses/MIT and
         https://www.apache.org/licenses/LICENSE-2.0)

---- Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT ----
linux-raw-sys, rustix, wasi, wasip2, wasip3, wasm-encoder, wasm-metadata,
wasmparser, wit-bindgen, wit-bindgen-core, wit-bindgen-rust,
wit-bindgen-rust-macro, wit-component, wit-parser

---- Apache-2.0 OR MIT OR Zlib ----
bytemuck, bytemuck_derive, dispatch2, miniz_oxide, objc2-app-kit,
objc2-cloud-kit, objc2-core-data, objc2-core-foundation, objc2-core-graphics,
objc2-core-image, objc2-core-location, objc2-core-text,
objc2-exception-helper, objc2-io-surface, objc2-quartz-core, objc2-ui-kit,
objc2-user-notifications, objc2-web-kit, raw-window-handle, tinyvec,
tinyvec_macros, zune-core, zune-inflate, zune-jpeg

---- Apache-2.0 OR BSD-3-Clause ----
moxcms, pxfm

---- Apache-2.0 OR BSD-3-Clause OR MIT ----
num_enum, num_enum_derive

---- Apache-2.0 OR BSD-2-Clause OR MIT ----
zerocopy, zerocopy-derive

---- Apache-2.0 (standalone) ----
openssl, sync_wrapper, zopfli

---- Apache-2.0 AND ISC ----
ring

---- Apache-2.0 AND MIT ----
dpi

---- Apache-2.0 OR BSL-1.0 ----
ryu
(BSL-1.0 = Boost Software License, fully permissive)

---- Apache-2.0 OR CC0-1.0 ----
imgref

---- Apache-2.0 OR CC0-1.0 OR MIT-0 ----
dunce

---- Apache-2.0 OR ISC OR MIT ----
hyper-rustls, rustls

---- Apache-2.0 OR LGPL-2.1-or-later OR MIT ----
r-efi
(PDFluent selects Apache-2.0 / MIT; LGPL alternative not exercised)

---- (Apache-2.0 OR MIT) AND BSD-3-Clause ----
encoding_rs

---- (Apache-2.0 OR MIT) AND NCSA ----
libfuzzer-sys
(NCSA = Univ. of Illinois/NCSA Open Source License, 3-clause BSD equivalent)

---- (Apache-2.0 OR MIT) AND Unicode-3.0 ----
unicode-ident

---- Apache-2.0 OR BSD-1-Clause OR MIT ----
fiat-crypto

---- MIT ----
aligned-vec, arg_enum_proc_macro, atk, atk-sys, av-scenechange, axum,
axum-core, block2, bytes, cairo-rs, cairo-sys-rs, cargo_metadata, cfb,
color_quant, combine, console, convert_case, crunchy, darling, darling_core,
darling_macro, derive_more, derive_more-impl, dlopen2, dlopen2_derive,
dom_query, ecb, equator, equator-macro, fax, gdk, gdk-pixbuf, gdk-pixbuf-sys,
gdk-sys, gdkwayland-sys, gdkx11, gdkx11-sys, generic-array, gio, gio-sys,
glib, glib-macros, glib-sys, gobject-sys, gtk, gtk-sys, gtk3-macros, h2,
http-body, http-body-util, hyper, hyper-util, ico, indicatif, infer,
interpolate_name, is-docker, is-wsl, javascriptcore-rs, javascriptcore-rs-sys,
libm, libredox, libsqlite3-sys, loop9, lopdf, matchers, maybe-rayon,
memoffset, mio, multer, napi, napi-derive, napi-derive-backend, napi-sys,
new_debug_unreachable, nom, nom_locate, noop_proc_macro, nu-ansi-term,
number_prefix, objc2, objc2-encode, objc2-foundation, open, openssl-sys,
os_pipe, pango, pango-sys, pdf-bench, pdf-desktop, pdf-diff, pdf-java,
pdfluent-lopdf, phf, phf_generator, phf_macros, phf_shared, plist,
precomputed-hash, quick-xml, redox_syscall, redox_users, rfd, rgb, rquickjs,
rquickjs-core, rquickjs-macro, rquickjs-sys, rusqlite, schannel, schemars,
schemars_derive, sharded-slab, shared_child, sigchld, simd-adler32,
simd_helpers, slab, soup3, soup3-sys, spin, strsim, synstructure, tiff,
tokio, tokio-macros, tokio-native-tls, tokio-util, tower, tower-http,
tower-layer, tower-service, tracing, tracing-attributes, tracing-core,
tracing-log, tracing-subscriber, try-lock, urlpattern, valuable, want,
webkit2gtk, webkit2gtk-sys, webview2-com, webview2-com-macros,
webview2-com-sys, winnow, x11, x11-dl, xfa-api-server, xfa-golden-tests,
xfa-license-gen, xfa-test-runner, y4m, zip, zmij

License: MIT (see https://opensource.org/licenses/MIT)

---- MIT OR Unlicense ----
aho-corasick, byteorder, byteorder-lite, jiff, jiff-static, jiff-tzdb,
jiff-tzdb-platform, memchr, same-file, walkdir, winapi-util

---- BSD-2-Clause ----
av1-grain, rav1e, v_frame

---- BSD-3-Clause ----
alloc-no-stdlib, alloc-stdlib, avif-serialize, curve25519-dalek,
ed25519-dalek, exr, lebe, ravif, subtle

---- BSD-3-Clause AND MIT ----
brotli, matchit

---- BSD-3-Clause OR MIT ----
brotli-decompressor

---- ISC ----
ego-tree, libloading, rustls-webpki, scraper, untrusted

---- Zlib ----
foldhash, zlib-rs

---- MPL-2.0 (file-level copyleft only) ----
cssparser, cssparser-macros, dtoa-short, option-ext, selectors

Mozilla Public License 2.0: https://www.mozilla.org/en-US/MPL/2.0/
Modifications to MPL-covered files must be shared; surrounding code is free.

---- BSL-1.0 (Boost Software License; permissive) ----
ryu

License: https://www.boost.org/users/license.html

---- 0BSD ----
adler2

---- MIT-0 ----
dunce (in expression Apache-2.0 OR CC0-1.0 OR MIT-0)

---- CC0-1.0 ----
imgref, dunce (via OR expressions)

---- Unlicense ----
aho-corasick, byteorder, memchr, walkdir, winapi-util (all MIT OR Unlicense)

---- NCSA ----
libfuzzer-sys (in expression (Apache-2.0 OR MIT) AND NCSA)

---- Unicode-3.0 ----
icu_collections, icu_locale_core, icu_normalizer, icu_normalizer_data,
icu_properties, icu_properties_data, icu_provider, litemap, potential_utf,
tinystr, writeable, yoke, yoke-derive, zerofrom, zerofrom-derive, zerotrie,
zerovec, zerovec-derive

License: https://opensource.org/licenses/Unicode-3.0

================================================================================
OFL-1.1 — Liberation Fonts (BUNDLED)
================================================================================

crates/pdf-substitute-fonts/assets/ carries twelve Liberation 2.1.5 faces,
compiled into pdf-manip and embedded in the output of a PDF/A conversion:

  LiberationMono-Bold.ttf         LiberationSans-Bold.ttf
  LiberationMono-BoldItalic.ttf   LiberationSans-BoldItalic.ttf
  LiberationMono-Italic.ttf       LiberationSans-Italic.ttf
  LiberationMono-Regular.ttf      LiberationSans-Regular.ttf
  LiberationSerif-Bold.ttf        LiberationSerif-BoldItalic.ttf
  LiberationSerif-Italic.ttf      LiberationSerif-Regular.ttf

They are UNMODIFIED, which OFL-1.1 §1 requires of anything still carrying the
reserved font name.  Each file is byte-identical to the file of that name in the
upstream release tarball liberation-fonts-ttf-2.1.5.tar.gz, sha256
7191c669bf38899f73a2094ed00f7b800553364f90e2637010a69c0e268f25d0, from
https://github.com/liberationfonts/liberation-fonts.  The per-face checksums are
in crates/pdf-substitute-fonts/PROVENANCE.sha256 and can be re-checked with
`sha256sum -c` from the assets directory, so a build that picked up a different
copy is detectable rather than a matter of trust.

The licence text below travels with the fonts as OFL-1.1 requires; the same text
ships inside the crate as LICENSE-Liberation.txt, because a URL is not a copy.

Digitized data copyright (c) 2010 Google Corporation
	with Reserved Font Arimo, Tinos and Cousine.
Copyright (c) 2012 Red Hat, Inc.
	with Reserved Font Name Liberation.

This Font Software is licensed under the SIL Open Font License,
Version 1.1.

This license is copied below, and is also available with a FAQ at:
http://scripts.sil.org/OFL

SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007

PREAMBLE The goals of the Open Font License (OFL) are to stimulate
worldwide development of collaborative font projects, to support the font
creation efforts of academic and linguistic communities, and to provide
a free and open framework in which fonts may be shared and improved in
partnership with others.

The OFL allows the licensed fonts to be used, studied, modified and
redistributed freely as long as they are not sold by themselves.
The fonts, including any derivative works, can be bundled, embedded,
redistributed and/or sold with any software provided that any reserved
names are not used by derivative works.  The fonts and derivatives,
however, cannot be released under any other type of license.  The
requirement for fonts to remain under this license does not apply to
any document created using the fonts or their derivatives.

 

DEFINITIONS
"Font Software" refers to the set of files released by the Copyright
Holder(s) under this license and clearly marked as such.
This may include source files, build scripts and documentation.

"Reserved Font Name" refers to any names specified as such after the
copyright statement(s).

"Original Version" refers to the collection of Font Software components
as distributed by the Copyright Holder(s).

"Modified Version" refers to any derivative made by adding to, deleting,
or substituting ? in part or in whole ?
any of the components of the Original Version, by changing formats or
by porting the Font Software to a new environment.

"Author" refers to any designer, engineer, programmer, technical writer
or other person who contributed to the Font Software.


PERMISSION & CONDITIONS

Permission is hereby granted, free of charge, to any person obtaining a
copy of the Font Software, to use, study, copy, merge, embed, modify,
redistribute, and sell modified and unmodified copies of the Font
Software, subject to the following conditions:

1) Neither the Font Software nor any of its individual components,in
   Original or Modified Versions, may be sold by itself.

2) Original or Modified Versions of the Font Software may be bundled,
   redistributed and/or sold with any software, provided that each copy
   contains the above copyright notice and this license. These can be
   included either as stand-alone text files, human-readable headers or
   in the appropriate machine-readable metadata fields within text or
   binary files as long as those fields can be easily viewed by the user.

3) No Modified Version of the Font Software may use the Reserved Font
   Name(s) unless explicit written permission is granted by the
   corresponding Copyright Holder. This restriction only applies to the
   primary font name as presented to the users.

4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
   Software shall not be used to promote, endorse or advertise any
   Modified Version, except to acknowledge the contribution(s) of the
   Copyright Holder(s) and the Author(s) or with their explicit written
   permission.

5) The Font Software, modified or unmodified, in part or in whole, must
   be distributed entirely under this license, and must not be distributed
   under any other license. The requirement for fonts to remain under
   this license does not apply to any document created using the Font
   Software.


 
TERMINATION
This license becomes null and void if any of the above conditions are not met.

 

DISCLAIMER
THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT.  IN NO EVENT SHALL THE
COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM OTHER
DEALINGS IN THE FONT SOFTWARE.

================================================================================
OFL-1.1 — Noto Naskh Arabic (BUNDLED)
================================================================================

crates/pdf-substitute-fonts/assets/ also carries two Noto Naskh Arabic v2.021
faces, compiled into pdf-manip and embedded in the output of a PDF/A conversion:

  NotoNaskhArabic-Regular.ttf     NotoNaskhArabic-Bold.ttf

They are here for a gap Liberation cannot fill: Liberation covers Latin, Greek
and Cyrillic and no Arabic, so a document naming an Arabic typeface it does not
embed was given a face without one glyph it needed (#502).

They are UNMODIFIED, which OFL-1.1 §1 requires of anything still carrying the
reserved font name.  Each file is byte-identical to the file of that name in the
upstream release archive NotoNaskhArabic-v2.021.zip, sha256
6c050ab9bd087d69b733c505a7576e60c528c2f33cd7b91005a5bd7da4514032, from
https://github.com/notofonts/arabic/releases/tag/NotoNaskhArabic-v2.021.  The
per-face checksums are in crates/pdf-substitute-fonts/PROVENANCE.sha256 and can
be re-checked with `sha256sum -c` from the assets directory.

The static hinted TTFs are used deliberately.  google/fonts publishes this family
only as a variable font, and pdfa_subset::retain_glyphs refuses a program
carrying fvar/gvar -- an uninstanced variable font has no place in an archival
PDF.

"Noto" is a trademark of Google LLC (name ID 7 in the font files).  It is named
here as a fact about the bytes we ship, not as an endorsement of this product by
Google.

The licence text below travels with the fonts as OFL-1.1 requires; the same text
ships inside the crate as LICENSE-NotoNaskhArabic.txt, because a URL is not a
copy.

Copyright 2022 The Noto Project Authors (https://github.com/notofonts/arabic)
	with Reserved Font Name Noto.

This Font Software is licensed under the SIL Open Font License,
Version 1.1.

The full text of SIL Open Font License Version 1.1 is reproduced in the
Liberation Fonts section above and is not repeated here; it is the same licence,
word for word, and two copies that can drift apart are worse than one that
cannot.  The verbatim file as the Noto project ships it is
crates/pdf-substitute-fonts/LICENSE-NotoNaskhArabic.txt.

================================================================================
BSD-3-Clause — Adobe CMap resources (BUNDLED)
================================================================================

crates/pdf-manip/resources/cid-tables/ and crates/pdf-manip/resources/cmap/
carry six unmodified Adobe CMap resources, compiled into pdf-manip and read to
turn the character codes a document draws into CIDs:

  crates/pdf-manip/resources/cid-tables/90ms-RKSJ-H
  crates/pdf-manip/resources/cid-tables/GBK-EUC-H
  crates/pdf-manip/resources/cid-tables/GBKp-EUC-H
  crates/pdf-manip/resources/cid-tables/UniGB-UTF16-H
  crates/pdf-manip/resources/cid-tables/UniJIS-UTF16-H
  crates/pdf-manip/resources/cmap/GB-EUC-H

Three files beside them are OURS, written for this repository and under its own
licence, and are named here because the register answers "which bytes are not
ours" and silence is not an answer:

  crates/pdf-manip/resources/README.md            what the two directories are
  crates/pdf-manip/resources/PROVENANCE.sha256    the checksums below
  crates/pdf-manip/resources/cid-tables/LICENSE-Adobe-CMap.txt
                                                  the BSD-3-Clause text below,
                                                  copied out of the headers

The five under cid-tables/ are read and never emitted.  cmap/GB-EUC-H is also
on the host search path of the width and .notdef repairs, which may embed a
CMap a document names into the output; BSD-3-Clause permits that, and the
notice above travels inside the file.

Each file is byte-identical to the file of that name in
https://github.com/adobe-type-tools/cmap-resources at commit
f5cf3bca7fdfeaceb77aa82847e974f2306c20b4, under Adobe-GB1-6/CMap/ and
Adobe-Japan1-7/CMap/.  The per-file checksums are in
crates/pdf-manip/resources/PROVENANCE.sha256 and can be re-checked with
`shasum -a 256 -c`, so a build that picked up a different copy is detectable
rather than a matter of trust.

The licence text below is the one every one of those files carries in its own
%%Copyright header; the same text ships inside the crate as
resources/cid-tables/LICENSE-Adobe-CMap.txt, because a URL is not a copy.

Copyright 1990-2019 Adobe. All rights reserved.

Redistribution and use in source and binary forms, with or
without modification, are permitted provided that the
following conditions are met:

Redistributions of source code must retain the above
copyright notice, this list of conditions and the following
disclaimer.

Redistributions in binary form must reproduce the above
copyright notice, this list of conditions and the following
disclaimer in the documentation and/or other materials
provided with the distribution.

Neither the name of Adobe nor the names of its contributors
may be used to endorse or promote products derived from
this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

================================================================================
END OF THIRD PARTY LICENSES
================================================================================
