# Corresponding source and provenance

The corresponding source for SVG Tools 0.1.0 is:

https://git.add-ideas.de/lotobo/svg-tools/src/tag/v0.1.0

Build from that tag with Node.js 22 and the exact `package-lock.json`:

```sh
npm ci
npm run release:artifact
```

No generated bundle is the preferred source form. No runtime code is loaded
from a CDN. The release ZIP contains the licence, corresponding-source pointer,
dependency inventory and notices.

## Revisions inspected

| Project                               | Revision/version inspected                                                | Decision                                                                        |
| ------------------------------------- | ------------------------------------------------------------------------- | ------------------------------------------------------------------------------- |
| SVG Tools                             | empty public `lotobo/svg-tools` repository before this initial commit     | implemented here                                                                |
| Toolbox SDK/contract/AppShell/testkit | `ef2dab4b46c61812c9a877d8a19fe497b4a4630a`, packages 0.2.3                | adopted                                                                         |
| Toolbox Portal                        | `55b2b12434465511586eaa2d0a43e81770868738`, tag v0.9.3                    | release/UX contract reference; Portal 0.10.0 integrates the artifact            |
| SVG-Edit                              | `244a26c88e1ab1c32911c5b3637e214d7a7d8b25`                                | interaction/implementation reference only; no source copied                     |
| SVG Path Editor                       | `937d75a83b6be2bdda11d02b9b3594841315223a`                                | path interaction reference only; no source copied                               |
| SVGPathCommander                      | `9aa91dd2119ee6a65b1807d55d33e86b1ccb27fc`                                | inspected, not adopted; project-authored path core is smaller and source-ranged |
| SVGO                                  | npm 4.0.2, published `gitHead` `b2309cf541aee11634eb653157b0ff86ab326e98` | adopted in a worker; GitHub clone was not required for shipped bytes            |
| DOMPurify                             | `9365501773d6665aaf334d8afa55081b9930a684`, npm 3.4.12                    | adopted as one layer of the projection policy                                   |
| css-tree                              | npm 3.2.1                                                                 | adopted for parsed CSS policy/value checks                                      |
| Boolean/geometry engine               | none                                                                      | not adopted; boolean operations are not claimed                                 |
| Raster engine                         | browser SVG image decoder and Canvas 2D                                   | no third-party raster engine shipped                                            |
| Compression fallback                  | fflate 0.8.3                                                              | adopted for bounded SVGZ read/write                                             |

Boxy SVG and SVGViewer were consulted only as public product references. Their
source, assets, branding, layout and text were not copied. All test SVG strings
and visual assets in this repository are project-authored.