# Bundled third-party license texts

Generated by `scripts/build-license-inventory.mjs` on 2026-11-03 from `package.json` and the installed packages. The texts are unmodified copies; paths, sources and SHA-256 hashes are in [inventory.json](inventory.json), which also records metadata for all 748 package-lock entries (lock SHA-256 `c741e23fc943…`).

This is not a final build reachability audit or an exhaustive transitive notice bundle. A redistributable artifact must be reviewed with its actual source, server bundle and browser assets. `THIRD_PARTY_NOTICES.md` and the Braila Commercial Single-Site License (`LICENSE.md`) live in the repository root and in the EmDash admin (Template → License & Credits); they are not served by the public site. The public credits page is `/kreditering/`.

## Direct packages

- `@astrojs/node@11.1.9` — MIT: [LICENSE](astrojs--node/LICENSE)
- `@astrojs/react@7.1.2` — MIT: [LICENSE](astrojs--react/LICENSE)
- `@fontsource-variable/geist@5.3.0` — OFL-1.1: [LICENSE](fontsource-variable--geist/LICENSE)
- `@tabler/icons-react@3.47.0` — MIT: [LICENSE](tabler--icons-react/LICENSE)
- `@tailwindcss/vite@4.3.3` — MIT: [LICENSE](tailwindcss--vite/LICENSE)
- `astro@7.4.4` — MIT: [LICENSE](astro/LICENSE)
- `clsx@2.1.1` — MIT: [license](clsx/license)
- `emdash@1.4.0` — MIT: [LICENSE](emdash/LICENSE)
- `motion@14.9.0` — MIT: [LICENSE.md](motion/LICENSE.md)
- `react@19.3.1` — MIT: [LICENSE](react/LICENSE)
- `react-dom@19.3.1` — MIT: [LICENSE](react-dom/LICENSE)
- `tailwind-merge@3.7.0` — MIT: [LICENSE.md](tailwind-merge/LICENSE.md)
- `tailwindcss@4.3.3` — MIT: [LICENSE](tailwindcss/LICENSE)
- `@astrojs/check@0.9.12` — MIT, development only: [LICENSE](astrojs--check/LICENSE)
- `@types/node@25.9.9` — MIT, development only: [LICENSE](types--node/LICENSE)
- `@types/react@19.3.0` — MIT, development only: [LICENSE](types--react/LICENSE)
- `@types/react-dom@19.3.0` — MIT, development only: [LICENSE](types--react-dom/LICENSE)
- `typescript@6.0.3` — Apache-2.0, development only: [LICENSE.txt](typescript/LICENSE.txt), [ThirdPartyNoticeText.txt](typescript/ThirdPartyNoticeText.txt)

## Fonts and icon assets

- Geist Variable — public site font (self-hosted latin wght subset): [geist-OFL.txt](fonts/geist-OFL.txt)
- Lora — review canvas only (review-canvas/brand.css): [lora-OFL.txt](fonts/lora-OFL.txt)
- Source Sans 3 — review canvas only (review-canvas/*.css): [sourcesans3-OFL.txt](fonts/sourcesans3-OFL.txt)
- Marcellus — public site display font (public/fonts/display.woff2): [marcellus-OFL.txt](fonts/marcellus-OFL.txt)
- Noto Sans 400/500/600 — public site body font (public/fonts/body*.woff2): [noto-sans-OFL.txt](fonts/noto-sans-OFL.txt)
- Lucide icon paths copied inline into src/components/site/icons.tsx (booking flow): [LICENSE](lucide/LICENSE)
- Tabler SVG icon sources: [LICENSE](tabler-svg/LICENSE)

## Selected transitive notices

- `@wordpress/block-serialization-default-parser@5.57.0` — GPL-2.0-or-later: [LICENSE.md](transitive/wordpress--block-serialization-default-parser/LICENSE.md)
- `dompurify@3.4.17` — (MPL-2.0 OR Apache-2.0): [LICENSE](transitive/dompurify/LICENSE), [LICENSE-MPL](transitive/dompurify/LICENSE-MPL)
- `lightningcss@1.32.0` — MPL-2.0: [LICENSE](transitive/lightningcss/LICENSE)
- `lightningcss@1.33.0` — MPL-2.0: [LICENSE](transitive/vite--lightningcss/LICENSE)
- `sharp@0.35.5` — Apache-2.0: [LICENSE](transitive/sharp/LICENSE)
- `@img/sharp-libvips-darwin-arm64@1.3.4` — LGPL-3.0-or-later: no root notice file found; review upstream before distribution.