# Third-party notices

The browser artifact bundles Inkpond 0.1.0 (https://github.com/shin4/inkpond),
Copyright (c) 2026 Shin, under the MIT license. Built from local upstream commit 4cb32fb1ef9120d4115e47265ad13a13c7fb59f6,
not the published npm 0.1.0 artifact. Its vendored tarball integrity is pinned in
package-lock.json. The upstream library remains independently maintained.

The six bundled Inkpond Glyphs font subsets derive from Source Han Serif SC
Medium and are licensed under SIL OFL 1.1. They retain their modified names.
The complete license, copyright and modification notice is shipped in
lib/licenses/OFL.txt; the upstream code license is in lib/licenses/inkpond-MIT.txt.

React and Cordis are supplied by the DSH host, not bundled into the browser artifact.