# Third-party components in FrostDrop

The application includes the following pre-existing, unmodified browser distributions in `app/vendor`. Copyright and license comments in those files have been retained. License texts and source references are in `licenses/`. These notices do not grant a license to FrostDrop's own code.

| Component | Use | Upstream / terms |
| --- | --- | --- |
| Three.js and its examples loaders / OrbitControls | 3D preview | https://github.com/mrdoob/three.js — MIT |
| PDF.js (Mozilla Foundation and contributors) | PDF preview and worker | https://github.com/mozilla/pdf.js — Apache-2.0 |
| SheetJS Community Edition | Spreadsheet preview | https://sheetjs.com/ — Apache-2.0 |
| JSZip (Stuart Knightley and contributors) | ZIP, Office and ebook containers | https://github.com/Stuk/jszip — dual MIT or GPLv3; FrostDrop uses MIT option |
| fflate (Arjun Barrett) | Compressed 3D container decoding | https://github.com/101arrowz/fflate — MIT |
| docx-preview (Volodymyr Baydalka and contributors) | DOCX preview | https://github.com/VolodymyrBaydalka/docxjs — Apache-2.0 |
| pptx-preview (501351981 and contributors) | PPTX preview | https://github.com/501351981/pptx-preview — see special upstream terms below |
| highlight.js 11.9.0 and language modules | Syntax highlighting | https://github.com/highlightjs/highlight.js — BSD-3-Clause |
| Microsoft WebView2 SDK | Windows browser host | Microsoft terms in WebView2-LICENSE.txt and WebView2-NOTICE.txt |

## SheetJS attribution

SheetJS Community Edition -- https://sheetjs.com/
Copyright (C) 2012-present SheetJS LLC
Licensed under the Apache License, Version 2.0. See `licenses/Apache-2.0.txt`.
No changes were made to the vendored SheetJS distribution.

## pptx-preview special upstream terms

The upstream repository distinguishes its published npm package (free personal and commercial use) from its source code (personal study only; restrictions on republishing and rebranding source). The existing `pptx-preview.umd.js` package is preserved without modification. See the original text in `licenses/pptx-preview-UPSTREAM.txt`. Do not describe the entire dependency set as MIT or republish the upstream TypeScript source as part of FrostDrop's own open-source code. The original folder did not include exact package provenance for every minified vendor file.

## Artwork and tools

The new campaign and installer backgrounds were generated with the built-in image_gen tool for this project. Prompts and provenance are recorded in `branding/generation.json`; they are artwork, not screenshots of the application. The application's original photo backgrounds remain unchanged.

Node.js, Playwright, Sharp and build-time tools are used only for preparation/testing and are not embedded as runtimes in the released application. System frameworks and installed OS codecs keep their respective owners' terms.

## Windows archive runtime

The Windows application bundles SharpCompress 0.50.4 (Adam Hathcock and contributors, MIT) for read-only ZIP/RAR/7z/TAR and compression-wrapper browsing. The upstream MIT text is in `licenses/SharpCompress-MIT.txt`. No RAR compression/writing is offered.

The pinned .NET Framework compatibility dependencies are Microsoft.Bcl.AsyncInterfaces 8.0.0, System.Text.Encoding.CodePages 8.0.0, System.Memory 4.6.3, System.Runtime.CompilerServices.Unsafe 6.1.2, System.Threading.Tasks.Extensions 4.6.3, System.Buffers 4.6.1 and System.Numerics.Vectors 4.6.1. These Microsoft components use MIT terms; see `licenses/dotnet-runtime-MIT.txt` and the per-package notices/version provenance in `licenses/archive-runtime/`. They are installed with the app; .NET Framework reference assemblies and the .NET SDK are build-time dependencies only.