OPEN SOURCE

Open-source notices

WhaleTu is built with established open-source foundations. We keep material licenses and adaptation notes visible.

Last updated: July 27, 2026

Material projects

ProjectLicenseUse and modification
pdf-lib1.17.1MITPDF creation, page copying and rotationUsed as an unmodified npm dependency.
PDF.js6.1.200Apache-2.0Local PDF parsing and renderingWorker distributed with WhaleTu; attribution retained.
jsep1.4.0MITSafe expression syntax parsingUsed as an unmodified npm dependency with a WhaleTu function whitelist.
DOMPurify3.4.12Apache-2.0 / MPL-2.0Sanitizing rendered HTMLUsed as an unmodified npm dependency.
marked18.0.7MITMarkdown parsingUsed as an unmodified npm dependency.
qrcode1.5.4MITLocal QR code generationUsed as an unmodified npm dependency.
sql-formatter15.8.2MITSQL formattingUsed as an unmodified npm dependency.
yaml2.9.0ISCYAML parsing and serializationUsed as an unmodified npm dependency.
smol-toml1.7.1BSD-3-ClauseTOML parsing and serializationUsed as an unmodified npm dependency.
bcryptjs3.0.3BSD-3-ClauseBcrypt hashing and comparisonUsed as an unmodified npm dependency.
libphonenumber-js1.13.9MITInternational phone number parsingUsed as an unmodified npm dependency.
ibantools4.5.4MIT or MPL-2.0IBAN checksum validation and formattingUsed as an unmodified npm dependency.
diff9.0.0BSD-3-ClauseText and JSON line comparisonUsed as an unmodified npm dependency.
cronstrue3.24.0MITReadable cron schedule descriptionsUsed as an unmodified npm dependency.
AJV8.20.0MITLocal JSON Schema Draft 2020-12 validationDynamically loaded and configured without remote schema fetching.
Papa Parse5.5.4MITStandards-aware CSV parsing and serializationDynamically loaded inside the CSV/JSON workspace.
JSZip3.10.1MIT optionLocal ZIP creation for multi-file exportsUsed under the MIT option of its MIT-or-GPL license expression and loaded only for ZIP export.
exifr7.1.3MITLocal EXIF and GPS metadata parsingDynamically loaded; WhaleTu limits displayed fields and verifies metadata removal after re-encoding.
SVGO4.0.2MITLocal SVG optimizationBrowser build loaded only in the SVG workspace after unsafe SVG content is rejected.
Luxon3.7.2MITIANA time-zone conversion and daylight-saving handlingDynamically loaded only by the time-zone converter.

License copies

Complete license texts are distributed with the application source and npm dependency tree. Copyright and attribution notices belonging to third-party projects are not removed.

Corrections

If you believe a notice is incomplete, contact [email protected] with the project name and relevant license requirement.