# Third-party notices

Regex Tools original source is GPL-3.0-or-later. The production browser bundle
contains the compatible runtime components below.
Exact dependency resolution is recorded in `package-lock.json`.

| Component                        | Version                                                                  | Licence                           | Shipped                      | Role and source                                                                              |
| -------------------------------- | ------------------------------------------------------------------------ | --------------------------------- | ---------------------------- | -------------------------------------------------------------------------------------------- |
| `@add-ideas/toolbox-contract`    | 0.2.2                                                                    | Apache-2.0                        | Runtime                      | Manifest contract; <https://git.add-ideas.de/zemion/toolbox-sdk>                             |
| `@add-ideas/toolbox-shell-react` | 0.2.2                                                                    | Apache-2.0                        | Runtime                      | Shared shell; same source                                                                    |
| `@eslint-community/regexpp`      | 4.12.2                                                                   | MIT                               | Syntax worker                | ECMAScript parser; <https://github.com/eslint-community/regexpp>                             |
| CodeMirror packages              | state 6.7.1; view 6.43.6; language 6.12.4; commands 6.10.4; search 6.7.1 | MIT                               | Runtime                      | Editors; <https://github.com/codemirror>                                                     |
| `@lezer/highlight`               | 1.2.3                                                                    | MIT                               | Runtime                      | Editor highlighting support; <https://github.com/lezer-parser/highlight>                     |
| React / React DOM                | 19.2.7                                                                   | MIT                               | Runtime                      | User interface; <https://github.com/facebook/react>                                          |
| `fflate`                         | 0.8.3                                                                    | MIT                               | Runtime and build dependency | Local corpus-output ZIP and deterministic release ZIP; <https://github.com/101arrowz/fflate> |
| Emscripten generated runtime     | 6.0.4                                                                    | MIT                               | Generated WebAssembly glue   | PCRE2 module loader/runtime; <https://github.com/emscripten-core/emscripten>                 |
| PCRE2                            | 10.47                                                                    | BSD-3-Clause WITH PCRE2-exception | WebAssembly runtime          | Pinned official 8-bit engine; <https://github.com/PCRE2Project/pcre2>                        |
| Pyodide                          | 314.0.3                                                                  | MPL-2.0                           | Python runtime pack          | Self-hosted CPython browser runtime; <https://github.com/pyodide/pyodide>                    |
| CPython                          | 3.14.2                                                                   | PSF-2.0                           | Python runtime/stdlib        | `re` execution and bundled standard library; <https://github.com/python/cpython>             |
| TeaVM                            | 0.15.0                                                                   | Apache-2.0                        | Generated Java engine module | `java.util.regex` class-library implementation; <https://github.com/konsoletyper/teavm>      |
| Vite                             | 8.1.5                                                                    | MIT                               | Generated helpers            | Production build; <https://github.com/vitejs/vite>                                           |
| Rolldown                         | 1.1.5                                                                    | MIT                               | Generated helpers            | Production bundling; <https://github.com/rolldown/rolldown>                                  |

`@add-ideas/toolbox-testkit` 0.2.2 and the other test/build dependencies are
development-only and are not part of the static runtime bundle.

`recheck` 4.5.0 and `regexp-ast-analysis` 0.7.1 were inspected but deliberately
not installed or shipped. PCRE2 source is not vendored; its generated
WebAssembly pack is shipped with exact metadata, checksums and licence. Pyodide
is pinned as an npm build input and its reviewed self-hosted runtime files are
copied into the Python pack. The TeaVM module contains its compiled class
library and is explicitly identified as TeaVM, not OpenJDK.

Licence texts and copyright notices for the ordinary bundled dependencies are
in `LICENSES/`. Each engine pack carries its exact upstream licence/notice
files alongside the runtime. The release package additionally carries the exact
Vite and Rolldown legal files under `LICENSES/build/`, including Vite's
bundled-dependency notices for code emitted by the production build.