Additional third-party notices and source correspondence

These notices supplement, and do not replace, existing licenses and notices.
The application code is unchanged. Primary distributions matched in full:
pdf-lib 1.17.1; JSZip 3.10.1; @pdf-lib/fontkit 1.1.1.

The archive versions below identify the sources of the reproduced texts;
they are not assertions of every transitive component's resolved version.
For pako, differing upstream copyright notices are retained rather than overwritten.
Each notice text is reproduced without editing. Original notices remain applicable.

licenses/additional/Apache-2.0.txt
Source: https://registry.npmjs.org/tslib/-/tslib-1.11.1.tgz
Member/excerpt: package/LICENSE.txt
SHA-256: a7d00bfd54525bc694b6e32f64c7ebcf5e6b7ae3657be5cc12767bce74654a47

licenses/additional/standard-fonts-MIT.txt
Source: https://registry.npmjs.org/@pdf-lib/standard-fonts/-/standard-fonts-1.0.0.tgz
Member/excerpt: package/LICENSE.md
SHA-256: 45cc2bb9957ed43f5c7f5eb1912f9f670730394d614079510477cae626194649

licenses/additional/upng-MIT.txt
Source: https://registry.npmjs.org/@pdf-lib/upng/-/upng-1.0.1.tgz
Member/excerpt: package/LICENSE
SHA-256: c1fb8861eca211bf5aea574358aba7039396c0c1824c2a1477cc126d398efd89

licenses/additional/pako-MIT-2014-2017.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/LICENSE
SHA-256: a04665b3b2de56c66730c1f720f528175739e4104f79073614aa611da1e85539

licenses/additional/pako-adler32.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/adler32.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-constants.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/constants.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-crc32.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/crc32.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-deflate.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/deflate.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-gzheader.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/gzheader.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-inffast.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/inffast.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-inflate.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/inflate.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-inftrees.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/inftrees.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-messages.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/messages.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-trees.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/trees.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/pako-zstream.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.11.tgz
Member/excerpt: package/lib/zlib/zstream.js [verbatim initial notice]
SHA-256: 4125652cdbd6fdba9b60c839df6abeb3fc9da98fca00b4cab15157951e080804

licenses/additional/fontkit-notice-01.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: 2da8773199be6f22646e273275a2d3a12ab800e2cae33476f4192356543f09a2

licenses/additional/fontkit-notice-02.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: 269b4c9f1d20f124e8c834503c772e2621b24eb7da62f0d478be23ee799c42e5

licenses/additional/fontkit-notice-03.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: 27439632e95e8049f7ffdd667a48c0aeb426dc7d8cc0d378ad25540d80ede425

licenses/additional/fontkit-notice-04.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: eb23239f0d7730df01145849d0c360c8b06c025adbeaef88bab72a69660d2cdf

licenses/additional/fontkit-notice-05.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: 402a3a1813b73fa2d49731b5d2c5e4e7566cbc74026692bc0e9769292a671ad6

licenses/additional/fontkit-notice-06.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: 5eb8a0f50c7c0084d843ff729be675e0ac1267f0cc139da5088ff9dee73f7089

licenses/additional/fontkit-notice-07.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim block comment]
SHA-256: 883cfd0a5022894e2f0eb15e16f77f135c8b8b054d8194ba0ea0d65f634d4650

licenses/additional/Microsoft-notice.txt
Source: https://registry.npmjs.org/tslib/-/tslib-1.11.1.tgz
Member/excerpt: package/tslib.es6.js [verbatim initial comment]
SHA-256: d1dbf4f4aadcc924a89cb3821bd6d837fdc673f03b5d22dffb59f34ded2ff083

licenses/additional/base64-arraybuffer-MIT.txt
Source: https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz
Member/excerpt: package/LICENSE-MIT
SHA-256: f3eca6ff762533fa5a77caf954a143e48afa204668cf97dce758c45a9e006be3

licenses/additional/pako-MIT-2014-2016.txt
Source: https://registry.npmjs.org/pako/-/pako-1.0.4.tgz
Member/excerpt: package/LICENSE
SHA-256: 3bc404ffa7888053253eedcc5a667619aa08dc1be0bea400e5ff28c51602180f

licenses/additional/lie-MIT.txt
Source: https://registry.npmjs.org/lie/-/lie-3.3.0.tgz
Member/excerpt: package/license.md
SHA-256: 5c81b0caa98593408b03125efa25efe622341ed87ae55561968828cd887d64a4

licenses/additional/immediate-MIT.txt
Source: https://registry.npmjs.org/immediate/-/immediate-3.0.6.tgz
Member/excerpt: package/LICENSE.txt
SHA-256: 809e66de579fb7d92503848bbe6d1f348f4f6521a71e5d294fe7cc0c87a3b4ff

licenses/additional/setimmediate-MIT.txt
Source: https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz
Member/excerpt: package/LICENSE.txt
SHA-256: c4b4ad3a5746f1f5249a6dd90396ec519264e1bb02e01e48a6522c48a3a97cb4

licenses/additional/fontkit-Joyent-MIT-notice.txt
Source: https://registry.npmjs.org/@pdf-lib/fontkit/-/fontkit-1.1.1.tgz
Member/excerpt: package/dist/fontkit.umd.js [verbatim Joyent notice]
SHA-256: 67bfcc2249b3cd2c12ba30934286fb04aaf7397ef39b3c1696ec80f5553cfed0

licenses/additional/unicode-properties.txt
Source: https://registry.npmjs.org/@pdf-lib/unicode-properties/-/unicode-properties-0.0.1.tgz
Member/excerpt: package/LICENSE
SHA-256: 43439dbd4f43837aadab215cdbe5a422cc6323a50c4ea84d8d6bbc3671666a1d

licenses/additional/buffer.txt
Source: https://registry.npmjs.org/buffer/-/buffer-5.6.0.tgz
Member/excerpt: package/LICENSE
SHA-256: 06bafa45fdad2579ba0e43b0c9b2c6290287c99c4203c300254a462b38a307f6

licenses/additional/base64-js.txt
Source: https://registry.npmjs.org/base64-js/-/base64-js-1.3.1.tgz
Member/excerpt: package/LICENSE
SHA-256: 5b37224c080cdcc97c871ada971c224e9926370fe74f11b539aa1cf9f3b1aca1

licenses/additional/ieee754.txt
Source: https://registry.npmjs.org/ieee754/-/ieee754-1.1.13.tgz
Member/excerpt: package/LICENSE
SHA-256: 18d45466ba3253deae04667e267a91ea8de8548f18c1125264d1c9db28194cc1

licenses/additional/clone.txt
Source: https://registry.npmjs.org/clone/-/clone-1.0.4.tgz
Member/excerpt: package/LICENSE
SHA-256: 3fb0857ef0133928cf72c88dfc464e931486e88778961eedec25585e2321507f

licenses/additional/deep-equal.txt
Source: https://registry.npmjs.org/deep-equal/-/deep-equal-1.1.1.tgz
Member/excerpt: package/LICENSE
SHA-256: 4839125439c51ef70db530780f90cfa90e3a09b7e18694fc914d5daa2e463d14

licenses/additional/iconv-lite.txt
Source: https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz
Member/excerpt: package/LICENSE
SHA-256: ac779f7314c74f232ef847ea86e714abe25cf6eeb5cc97b69451b74e2af6492d

licenses/additional/safer-buffer.txt
Source: https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz
Member/excerpt: package/LICENSE
SHA-256: 4bc935e71be198c67ddf3c2b5fddb195f6edc182bfc155a96a6db61b44b494b9

licenses/additional/tiny-inflate.txt
Source: https://registry.npmjs.org/tiny-inflate/-/tiny-inflate-1.0.3.tgz
Member/excerpt: package/LICENSE
SHA-256: c0df7f551401f8f80197ff31bf69b8cd23727d127423403282514d242a3ab132

licenses/additional/object-keys.txt
Source: https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz
Member/excerpt: package/LICENSE
SHA-256: 5640e5cbe2e9f57f6ccfdd8dbfbeadb875495bdbcb69d2666ce3177ccd0942e4

licenses/additional/is-arguments.txt
Source: https://registry.npmjs.org/is-arguments/-/is-arguments-1.0.4.tgz
Member/excerpt: package/LICENSE
SHA-256: dc0fe5a22d9336f345ee984f9bf56f11f22877a3aa5fd16a1db9a8ca0e23a5d1

licenses/additional/is-date-object.txt
Source: https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz
Member/excerpt: package/LICENSE
SHA-256: c61652db3d2808f667b48af0a358f0d85fd07ad4a0d0b1a50882dec3b764c522

licenses/additional/is-regex.txt
Source: https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz
Member/excerpt: package/LICENSE
SHA-256: dc0fe5a22d9336f345ee984f9bf56f11f22877a3aa5fd16a1db9a8ca0e23a5d1

licenses/additional/regexp.prototype.flags.txt
Source: https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.3.0.tgz
Member/excerpt: package/LICENSE
SHA-256: 0c3fb74dd54705869d561cb765495b64c4dada8a127e9cd3390303cd7cb8a770

licenses/additional/object-is.txt
Source: https://registry.npmjs.org/object-is/-/object-is-1.0.2.tgz
Member/excerpt: package/LICENSE
SHA-256: dc0fe5a22d9336f345ee984f9bf56f11f22877a3aa5fd16a1db9a8ca0e23a5d1

licenses/additional/lodash.txt
Source: https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz
Member/excerpt: package/LICENSE
SHA-256: f71e8ed126b46346494aad5486874cd8f0aafe95092ed67d2e3cb6110f939abc

licenses/additional/process-es6.txt
Source: https://registry.npmjs.org/process-es6/-/process-es6-0.11.6.tgz
Member/excerpt: package/LICENSE
SHA-256: 59a400d04c5078579acc27ddd6452c1bdf763f9506e01364700935fbb1a7c91b

licenses/additional/inherits.txt
Source: https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz
Member/excerpt: package/LICENSE
SHA-256: 5ffe28e7ade7d8f10d85d5337a73fd793dac5c462fb9a28fbf8c5046c7fbca3b

licenses/additional/define-properties.txt
Source: https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz
Member/excerpt: package/LICENSE
SHA-256: 00d402c2bbe7c67369bd01ce2c16b8ed46ccc949a1ee2d6bb8f9606afa8c7434

licenses/additional/function-bind.txt
Source: https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz
Member/excerpt: package/LICENSE
SHA-256: 773e131a7684726005a7e4688a80b4620033bc08499bc1404dd1a1eb3bca725e

licenses/additional/has-symbols.txt
Source: https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz
Member/excerpt: package/LICENSE
SHA-256: 206c1adcf206dc0031b11232f5b054ec5f1662407ab1ca415247921cab2068ab

licenses/additional/has.txt
Source: https://registry.npmjs.org/has/-/has-1.0.3.tgz
Member/excerpt: package/LICENSE-MIT
SHA-256: 4fe5fd7b3318def0b74f8bf8c9276403f01da628fa8888822661519d80f237d3

licenses/additional/es-abstract.txt
Source: https://registry.npmjs.org/es-abstract/-/es-abstract-1.17.5.tgz
Member/excerpt: package/LICENSE
SHA-256: 00d402c2bbe7c67369bd01ce2c16b8ed46ccc949a1ee2d6bb8f9606afa8c7434



Further preserved original sources and declarations
These supplement existing notices. See reference/ABOUT.txt for scope.

licenses/additional/unicode-trie-MIT.txt
Source: https://raw.githubusercontent.com/foliojs/unicode-trie/8ab9b14025ff7c26c2aec1bbd1e71d5f83eb3bd1/LICENSE
Member/excerpt: LICENSE
SHA-256: 43439dbd4f43837aadab215cdbe5a422cc6323a50c4ea84d8d6bbc3671666a1d
Scope: 固定LICENSE追加コミットの親は旧版0.3.1のgitHead。変更はLICENSE追加のみ。氏名なしのCopyright 2018原文を保持。

licenses/reference/harfbuzz-fallback.txt
Source: https://raw.githubusercontent.com/harfbuzz/harfbuzz/1.7.6/src/hb-ot-shape-fallback.cc
Member/excerpt: verbatim initial source notice
SHA-256: bb5cd066d777fcf974a299c1e6ff77b1f42e95691e0eb0d7dc1188e499566485
Scope: 公式1.7.6から取得した由来候補の原文。実際の由来リビジョンの確定を意味しない。

licenses/reference/harfbuzz-arabic.txt
Source: https://raw.githubusercontent.com/harfbuzz/harfbuzz/1.7.6/src/hb-ot-shape-complex-arabic.cc
Member/excerpt: verbatim initial source notice
SHA-256: 14e468ee783b5bc97680ae833c80d5f278e46687ce17a31f64e346bdb36271f1
Scope: 公式1.7.6から取得した由来候補の原文。実際の由来リビジョンの確定を意味しない。

licenses/reference/harfbuzz-indic.txt
Source: https://raw.githubusercontent.com/harfbuzz/harfbuzz/1.7.6/src/hb-ot-shape-complex-indic.cc
Member/excerpt: verbatim initial source notice
SHA-256: bb5cd066d777fcf974a299c1e6ff77b1f42e95691e0eb0d7dc1188e499566485
Scope: 公式1.7.6から取得した由来候補の原文。実際の由来リビジョンの確定を意味しない。

licenses/reference/harfbuzz-COPYING.txt
Source: https://raw.githubusercontent.com/harfbuzz/harfbuzz/1.7.6/COPYING
Member/excerpt: COPYING
SHA-256: 2a886915de4f296cdae5ed67064f86dba01d0c55286d86e8487f2a5caaf40216
Scope: 公式1.7.6から取得した由来候補の原文。実際の由来リビジョンの確定を意味しない。

licenses/reference/buffer-es6-LICENSE.txt
Source: https://registry.npmjs.org/buffer-es6/-/buffer-es6-4.9.3.tgz
Member/excerpt: package/LICENSE
SHA-256: 468f636190b3825fd4b4e03d7998a6912edc7d260d99ec0869d9eb3eab30df0b
Scope: 公式4.9.3の全文。IEEE754原文とBrian Whiteの修正者表示を含む。独立内包や実解決版を断定しない。

licenses/reference/restructure-README.md
Source: https://registry.npmjs.org/@pdf-lib/restructure/-/restructure-0.0.1.tgz
Member/excerpt: package/README.md
SHA-256: ce2da05fd77e6356bbb80448ef9841cf38179701dff78d7b24ec0f30fa7ff2d1
Scope: 公式配布物のMIT宣言・author・出典を原文で保持。未取得の著作行や許諾原文を創作・流用しない。

licenses/reference/restructure-package.json
Source: https://registry.npmjs.org/@pdf-lib/restructure/-/restructure-0.0.1.tgz
Member/excerpt: package/package.json
SHA-256: 35e17c90e928719bd3817cab87a5feda8f8299551d9895e9a9ed86c85cad36f2
Scope: 公式配布物のMIT宣言・author・出典を原文で保持。未取得の著作行や許諾原文を創作・流用しない。

licenses/reference/dfa-README.md
Source: https://registry.npmjs.org/dfa/-/dfa-1.2.0.tgz
Member/excerpt: package/README.md
SHA-256: 30bd445925aa53205ff7f9afa6a43e21358fab656e471df6e028431aefc426c7
Scope: 公式配布物のMIT宣言・author・出典を原文で保持。未取得の著作行や許諾原文を創作・流用しない。

licenses/reference/dfa-package.json
Source: https://registry.npmjs.org/dfa/-/dfa-1.2.0.tgz
Member/excerpt: package/package.json
SHA-256: 96c0ce3cc17b34aabd58fd442157766d9e244cba735e54ee4fe10d7841f0460c
Scope: 公式配布物のMIT宣言・author・出典を原文で保持。未取得の著作行や許諾原文を創作・流用しない。

licenses/reference/brotli-README.md
Source: https://registry.npmjs.org/@pdf-lib/brotli/-/brotli-0.0.0.tgz
Member/excerpt: package/README.md
SHA-256: 8a8bac543fccf52a64708ff3315ca2be90e3e4c270634df1e4e4b51f0ee9c5d7
Scope: 公式配布物のMIT宣言・author・出典を原文で保持。未取得の著作行や許諾原文を創作・流用しない。

licenses/reference/brotli-package.json
Source: https://registry.npmjs.org/@pdf-lib/brotli/-/brotli-0.0.0.tgz
Member/excerpt: package/package.json
SHA-256: d3f56b96145f1c93e3eded2ed7e6af8df024347a571550b07dcc5e6546525cb3
Scope: 公式配布物のMIT宣言・author・出典を原文で保持。未取得の著作行や許諾原文を創作・流用しない。

reference/DECLARATIONS.json is an index of the included original package metadata, not an independently authored license.
