Kutu Harf Baskı — Web 1.3.1-web.1

This distribution includes the following third-party software. Individual
license and copyright notices are included in this directory and inside the
bundled Python wheels. No license here changes ownership of users' designs.

Runtime components:
- Three.js and OrbitControls (MIT), copied from the desktop release.
- Manifold 3.5.4 (Apache-2.0): https://github.com/elalish/manifold/tree/v3.5.4
- Pyodide 314.0.7 (MPL-2.0), with CPython (PSF) and Emscripten components:
  https://github.com/pyodide/pyodide/tree/314.0.7
- NumPy 2.4.6 (BSD-3-Clause; included third-party notices apply).
- Shapely 2.1.2 (BSD-3-Clause), including GEOS (LGPL-2.1-or-later).
  Source: https://github.com/shapely/shapely/tree/2.1.2
  GEOS sources and notices: https://libgeos.org/usage/download/
  Pyodide build recipes: https://github.com/pyodide/pyodide/tree/314.0.7/packages
- ezdxf 1.4.3 (MIT), svgelements 1.9.6 (MIT), pyparsing 3.3.2 (MIT),
  fonttools 4.62.1 (MIT), typing_extensions 4.15.0 (PSF-2.0).
- @bjorn3/browser_wasi_shim 0.4.2 (MIT / Apache-2.0):
  https://github.com/bjorn3/browser_wasi_shim

CDR module:
- libcdr 0.1.7 and librevenge 0.0.6, distributed under MPL-2.0.
- Little CMS 2.12 (MIT), zlib 1.3.1 (zlib), Boost 1.83 (BSL-1.0).
- wasi-sdk 33 runtime libraries (LLVM / Apache-2.0 with LLVM exception,
  wasi-libc component licenses). Source: https://github.com/WebAssembly/wasi-sdk
- Original wrapper and ICU shim from nobbs/go-libcdr, commit
  57427ba5c758239f1debf10ca6034a7955227c73 (MIT; ICU notice applies to shim).

The CDR library source files were not modified. cdr-source.zip contains the
corresponding CDR library sources, the compatibility shim, source-download
checksums, and both the original build reference and the KHB build used.
KHB's wrapper was changed to accept a page number, report the page count, and
return code 5 for a page outside the document. The WASM link sets a 512 MiB
memory maximum. The browser runs it with a read-only input file and bounded
output; no host filesystem or network capabilities are exposed to the guest.
LLVM's WebAssembly exception encoding is retained for browser execution;
the upstream Go package's exnref translation is not part of this web build.
No Go package or Go executable is distributed here.

The complete bundled JavaScript sources are in Publish. KHB Python sources
are also included in vendor/python-app.zip and in the package's source/app.
All original notices in go-libcdr-NOTICE.txt remain applicable; its claim
about an unmodified wrapper refers to that upstream version, not KHB changes.

CorelDRAW is a trademark of Corel Corporation. This application is not
affiliated with, endorsed by, or sponsored by Corel Corporation.

KHB 1.3.1 Pyodide distribution changes (15 October 2026):
The ESM loader and core are served as pyodide.js and pyodide.asm.js instead
of .mjs; loader/stack-path strings were updated. This pyodide.js is the ESM
file renamed, not upstream's UMD build. The HTTP WASM instantiation path
uses khb-wasm-loader.js and ArrayBuffer instantiation to tolerate incorrect
WASM MIME on shared hosting. Binary bytes are still validated by WebAssembly.
The exact changes are in pyodide-khb-changes.patch; original sources remain
available at the pinned Pyodide release URL above. MPL-2.0 remains applicable.

PHPMailer v7.1.1 — LGPL-2.1-only
https://github.com/PHPMailer/PHPMailer/releases/tag/v7.1.1
License: ../vendor/phpmailer/LICENSE
Used server-side for fixed-recipient password notifications; no email credentials are bundled.