Open Source Notices
docureddi is built on open source software. This page lists every third-party component the service ships or runs, with its license, so that a procurement or security review can see at a glance what is inside. Nothing here changes the terms of the licenses themselves; where a license asks for its text to travel with the files, that text ships beside them in the service.
Two kinds of component appear below. Libraries are part of the service's own program. System programs are installed in the service's environment and called as separate processes; they are not modified and are not distributed to users. Fonts are the one kind of component that reaches a customer's file: when a document relies on a font it never embedded, the service embeds a free, metric-compatible twin so the delivered PDF passes PDF/UA and reads the same on every device.
Fonts embedded in delivered documents
| Component | Version | License | Used for |
|---|---|---|---|
| Liberation Fonts (Sans, Serif, Mono; Regular, Bold, Italic, Bold Italic) | 2.1.5 | SIL Open Font License 1.1 | metric-compatible twins embedded for Arial, Helvetica, Times New Roman, Times, Courier New and Courier when a document left them out. Subsets are embedded in the delivered PDF, as the OFL allows. The license text ships beside the font files. |
| URW D050000L | URW Base 35, 20200910 release | AGPL-3.0 with the font-embedding exception | the free twin of ZapfDingbats (check boxes and dingbats in forms). The whole font is embedded, unmodified, under its own name. The exception lets the font be embedded in any document regardless of that document's license, so every delivered file is unencumbered. COPYING and LICENSE ship beside the file. |
Server libraries
| Component | Version | License | Used for |
|---|---|---|---|
| FastAPI | 0.111.0 | MIT | web framework |
| Uvicorn | 0.29.0 | BSD-3-Clause | application server |
| python-multipart | 0.0.9 | Apache-2.0 | file uploads |
| SQLAlchemy | 2.0.30 | MIT | database access |
| Alembic | 1.13.1 | MIT | database migrations |
| psycopg2-binary | 2.9.9 | LGPL-3.0 with exceptions | PostgreSQL driver |
| python-jose | 3.3.0 | MIT | sign-in tokens |
| passlib | 1.7.4 | BSD-3-Clause | password hashing |
| bcrypt | 4.0.1 | Apache-2.0 | password hashing |
| pikepdf (and QPDF) | 8.15.1 | MPL-2.0 (QPDF: Apache-2.0) | reads and writes the PDF structure |
| pdfminer.six | 20231228 | MIT | text positions |
| pdf2image | 1.17.0 | MIT | page images for the model |
| pypdf | 4.2.0 | BSD-3-Clause | PDF reading |
| langdetect | 1.0.9 | Apache-2.0 | document language |
| lingua-language-detector | 2.1.1 | Apache-2.0 | document language, second opinion |
| fontTools | 4.66.1 | MIT | font programs: CIDSets, Unicode maps, subsetting |
| anthropic | 1.12.1 | MIT | the model API client |
| httpx | 0.27 or later, below 1 | BSD-3-Clause | sending email |
| boto3 | 1.34.140 | Apache-2.0 | object storage |
| reportlab | 4.2.0 | BSD-3-Clause | the compliance certificate; standard font widths |
| stripe | 9.9.0 | MIT | billing |
| requests | 2.32.3 | Apache-2.0 | HTTP calls |
| python-dotenv | 1.0.1 | BSD-3-Clause | configuration |
| pydantic | 2.7.1 | MIT | request validation |
| sentry-sdk | 2.5.1 | MIT | error reporting |
| APScheduler | 3.10.4 | MIT | scheduled clean-up |
| Pillow | 10 or later | MIT-CMU (HPND) | image handling before OCR |
| psutil | 7.2.2 | BSD-3-Clause | process and memory figures |
System programs in the service environment
| Component | Version | License | Used for |
|---|---|---|---|
| Poppler (poppler-utils) | Debian package | GPL-2.0 or GPL-3.0 | renders pages to images; run as a separate program, unmodified |
| Tesseract OCR with Leptonica, and its language packs | Debian packages | Apache-2.0 (Leptonica: BSD-2-Clause) | text recognition for scanned pages; run as a separate program, unmodified |
| veraPDF | 1.28 | GPL-3.0 or MPL-2.0 (dual) | independent PDF/UA validation of every delivered file; run as a separate program, unmodified |
| OpenJDK (default-jre-headless) | Debian package | GPL-2.0 with Classpath Exception | runs veraPDF |
| Python | 3.12 | PSF-2.0 | the runtime |
| Debian GNU/Linux (python:3.12-slim image) | bookworm | various free licenses, see the Debian copyright files | the base system |
Browser application
| Component | Version | License | Used for |
|---|---|---|---|
| React, React DOM | 18.3 | MIT | the application interface |
| React Router | 6.24 | MIT | navigation |
| pdf-lib | 1.17 | MIT | client-side PDF reading |
| Vite and @vitejs/plugin-react | 5.3 / 4.3 | MIT | build tooling; not shipped to the browser |
| Outfit and JetBrains Mono (Google Fonts) | SIL Open Font License 1.1 | the site's typefaces, loaded from Google Fonts by your browser; not bundled | |
| Tabler Icons (8 outline icons: list-numbers, tag, h-1, photo, table, link, volume-3, headphones) | 3.19.0 | MIT, Copyright (c) 2020-2024 Paweł Kuna | the lens and Listen icons in the review tools; the drawing paths are copied into the application and no icon package ships. The license text is below. |
Licenses
MIT, BSD, Apache-2.0, MPL-2.0, PSF-2.0 and the SIL Open Font License are permissive licenses that require attribution, which this page and the files beside each component provide. LGPL-3.0 (psycopg2) applies to a library used unmodified through its public interface. GPL-licensed programs (Poppler, veraPDF, OpenJDK) run as separate processes in the service environment and are not distributed. The URW font's AGPL-3.0 carries the font-embedding exception quoted in its COPYING file, under which a document that embeds the font is not a derivative work of it.
Tabler Icons license
MIT License Copyright (c) 2020-2024 Paweł Kuna Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Questions about this page: info@enhancegov.com.