# Paperdesk — licenses and capabilities

This distribution does not include MuPDF or an AGPL/GPL runtime dependency.
PDF viewing and password authentication: Mozilla PDF.js (Apache-2.0).
PDF writing, page organization and forms: pdf-lib (MIT).
DOCX reading: Mammoth (BSD-2-Clause). DOCX writing: docx (MIT).
Other runtime dependencies are listed in dependency-licenses.json.
For JSZip's dual license, this distribution chooses MIT.
Geist and certain PDF fallback fonts use permissive font licenses (OFL/BSD);
these do not impose open-source licensing on the application code.
Preserve THIRD-PARTY-NOTICES.txt and the PDF.js bundled font license files.

Application source is not included in the hosted assets or upload ZIP.
Original application code is proprietary; third-party licenses remain intact.

All document operations take place on the user's device.
Ordinary unencrypted PDFs support annotations, handwriting, basic form filling,
page organization, merging, splitting and exports. Added text and annotations
are raster images. Inline text editing covers existing horizontal text with a sampled solid background
and draws replacement text using an embedded Noto Sans CJK font (OFL-1.1) through
pdf-lib and fontkit (MIT). Original text remains in the file and may be searchable
or extractable: this is NOT secure redaction. Background and text colors are
estimates and can be adjusted. Gradients, images, patterned backgrounds, RTL,
vertical text and complex text layouts are not faithfully reconstructed.
Password-protected PDFs can be authenticated and viewed locally but cannot be
edited, merged or exported. No password is uploaded or stored.

DOCX imports are rendered to page images using Mammoth, browser canvas and
pdf-lib. Basic headings, paragraphs, lists, tables and embedded raster images
are supported with simplified layout. Imported text is not searchable or
extractable. Complex layout, columns, merged cells, headers and footers may
change or be omitted. Editable Word exports extract text from text-based PDFs;
image-based documents should use appearance Word export. No OCR is included.
Form filling produces fixed page content, not interactive fields. Handwriting
is a visual signature, not a certificate-based digital signature.

Developer builds: Node 22.13+ and pnpm; pnpm install; pnpm build:cloudflare.
Upload outputs/Paperdesk-Cloudflare.zip to Cloudflare Pages Direct Upload.
Runtime license checks fail the static build if an unapproved license appears.
Build tooling is distinct from the shipped application; its own licenses still
apply to the tools. This inventory is not a guarantee against all IP disputes.