NOTICE

webtessera
Copyright 2026 MedDeck LTDA

This product is licensed under the Apache License, Version 2.0 (see LICENSE).

webtessera is a TypeScript port of Tessera and of the Go libraries Tessera is built
on. It contains translations of their source code and uses their test material. The
attributions below are required by those projects' licences; the per-file headers in
src/ retain the original copyright lines and are authoritative for individual files.

The texts of the third-party licences that are not Apache-2.0 are reproduced verbatim
under LICENSES/.

--------------------------------------------------------------------------------
Apache-2.0 sources
--------------------------------------------------------------------------------

Tessera - https://github.com/transparency-dev/tessera
Copyright The Tessera authors; Copyright Google LLC
Licensed under the Apache License, Version 2.0.
Ported at commit 4a6d9f9da21fe7d160d0ee5b800f78b60c3e5640 (scripts/upstream.json).
Translated into: src/ (outside src/vendor/ and src/internal/gostd/). The golden
fixtures in fixtures/data/ are produced by running Tessera (fixtures/gen/) and
embed upstream test material (testdata/log).
Tessera ships no NOTICE file at that commit.

transparency-dev/merkle - https://github.com/transparency-dev/merkle
Copyright Google LLC
Licensed under the Apache License, Version 2.0.
Ported at v0.0.2.
Translated into: src/vendor/merkle/ (hasher, rfc6962, compact, proof, testonly).
The module ships no NOTICE file at that version.

transparency-dev/formats (package log) - https://github.com/transparency-dev/formats
Copyright Google LLC
Licensed under the Apache License, Version 2.0.
Ported at v0.0.0-20251017110053-404c0d5b696c.
Translated into: src/vendor/formats/log/.
The module ships no NOTICE file at that version.

transparency-dev/formats (package note, note_verifier.go) - https://github.com/transparency-dev/formats
Copyright 2021 Google LLC
Licensed under the Apache License, Version 2.0.
Ported at v0.0.0-20251017110053-404c0d5b696c.
Translated into: src/vendor/formats/note/note_cosigv1.ts (the `verifier` type only;
the rest of that file is the BSD-licensed note_cosigv1.go, listed below).
The module ships no NOTICE file at that version.

transparency-dev/formats (package proof) - https://github.com/transparency-dev/formats
Copyright Google LLC
Licensed under the Apache License, Version 2.0.
Ported at v0.1.1.
Translated into: src/vendor/formats/proof/.
The module ships no NOTICE file at that version.

AWS Signature Version 4 test suite, as published in AWS C Auth -
https://github.com/awslabs/aws-c-auth
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
Licensed under the Apache License, Version 2.0.
Test material only, at commit c4bc791ac6985eedb503e882cd450cc5b344c2f2
(tests/aws-signing-test-suite/v4), transcribed into
src/mirror/testing/sigv4_suite.ts; not part of the published package.
AWS C Auth's NOTICE reads: "AWS C Auth / Copyright Amazon.com, Inc. or its
affiliates. All Rights Reserved. / SPDX-License-Identifier: Apache-2.0."

--------------------------------------------------------------------------------
BSD-3-Clause sources (The Go Authors)
--------------------------------------------------------------------------------

The following files are translations of code that is licensed under the BSD
3-Clause licence of the Go project, not under the Apache License. They keep the
Go Authors' copyright notice and the BSD notice in their headers. They are
distributed under the terms of that licence, reproduced in
LICENSES/BSD-3-Clause-Go.txt. The Go project's additional patent grant
(LICENSES/Go-PATENTS.txt) accompanies it.

golang.org/x/mod v0.31.0, package sumdb/note
Copyright 2019 The Go Authors
  src/vendor/note/note.ts
  src/vendor/note/note_test.ts
  src/vendor/note/example_test.ts

golang.org/x/crypto v0.46.0, package cryptobyte
Copyright 2017 The Go Authors
  src/internal/gostd/cryptobyte.ts
  src/internal/gostd/cryptobyte_test.ts
  src/internal/gostd/cryptobyte_example_test.ts (from cryptobyte/example_test.go)

transparency-dev/formats v0.0.0-20251017110053-404c0d5b696c, package note
(note_cosigv1.go and its test, which carry a Go Authors BSD-style header upstream)
Copyright 2023 The Go Authors
  src/vendor/formats/note/note_cosigv1.ts
  src/vendor/formats/note/note_cosigv1_test.ts

Go standard library 1.25.5, package bufio
Copyright 2013 The Go Authors
  src/internal/gostd/bufio.ts (Scanner with ScanLines, transcribed from bufio/scan.go)

Go standard library 1.25.5, packages net/url, net/netip and path
Copyright 2009 The Go Authors (net/url/url.go, path/path.go)
Copyright 2020 The Go Authors (net/netip/netip.go)
  src/internal/gostd/url.ts (url.Parse, URL.JoinPath and URL.String with their helpers,
  the validation half of netip.ParseAddr, path.Join and path.Clean)

Go standard library 1.25.5, package time
Copyright 2009 The Go Authors
  src/internal/gostd/time.ts (durationString, fmtFrac and fmtInt are derived from
  Duration.String in time.go)
  src/internal/gostd/time_test.ts (the durationTests table, taken from time_test.go)

Go standard library 1.25.5, package container/list
Copyright 2009 The Go Authors
  src/internal/gostd/list.ts
  src/internal/gostd/list_test.ts

Go standard library 1.25.5, package encoding/base64 (the decoder)
Copyright 2009 The Go Authors
  src/internal/gostd/bytes.ts (fromBase64 and its helpers are a transcription of
  Go's Encoding.Decode and decodeQuantum)

Go standard library 1.25.5, package encoding/hex (the decoder)
Copyright 2009 The Go Authors
  src/internal/gostd/bytes.ts (REVERSE_HEX_TABLE, invalidByteError and fromHex are
  derived from Go's reverseHexTable, InvalidByteError and Decode)

Go standard library 1.25.5, package strconv
Copyright 2009 The Go Authors (atoi.go, quote.go, atoi_test.go)
Copyright 2013 The Go Authors (isprint.go)
  src/internal/gostd/strconv.ts (parseUint, underscoreOK, lower, NumError, ErrSyntax
  and ErrRange are derived from atoi.go; quote, quoteBytes, escapedRune, isPrint, bsearch
  and the IS_PRINT and IS_NOT_PRINT tables from quote.go and isprint.go)
  src/internal/gostd/strconv_test.ts (the parseUint64Tests, parseUint64BaseTests and
  parseUint32Tests tables, taken from atoi_test.go)

Go standard library 1.25.5, package strings
Copyright 2009 The Go Authors
  src/internal/gostd/strings.ts (the doc comments of cut, trimSpace and fields, taken
  from strings/strings.go)
  src/internal/gostd/strings_test.ts (the cutTests, trimSpaceTests and fieldsTests
  tables, taken from strings/strings_test.go)

Go standard library 1.25.5, packages unicode and unicode/utf8
Copyright 2011 The Go Authors (graphic.go, tables.go)
Copyright 2009 The Go Authors (utf8.go)
  src/internal/gostd/unicode.ts (isSpace is derived from unicode.IsSpace in graphic.go
  and from the White_Space range table in tables.go; decodeRune from utf8.DecodeRune)

Go standard library 1.25.5, package math/bits
Copyright 2017 The Go Authors
  src/internal/gostd/bits.ts (the doc sentences of trailingZeros64, len64 and
  onesCount64 are quoted from bits.go; onesCount32 follows the shape of OnesCount64)

Go standard library 1.25.5, packages crypto/ed25519 and crypto/internal/fips140/ed25519
Copyright 2016 The Go Authors (crypto/ed25519)
Copyright 2024 The Go Authors (crypto/internal/fips140/ed25519)
  src/vendor/note/note.ts (verifyEd25519 transcribes ed25519.Verify and verifyWithDom;
  the rest of the file is the translation of sumdb/note listed above)

--------------------------------------------------------------------------------
ISC sources
--------------------------------------------------------------------------------

Sunlight - https://github.com/FiloSottile/sunlight
Copyright 2023 The Sunlight Authors
Licensed under the ISC License, reproduced in LICENSES/ISC-Sunlight.txt.
Tessera's ctonly package adapts Sunlight's tile.go and carries its notice; the
translation keeps it:
  src/ctonly/ct.ts

--------------------------------------------------------------------------------
Website fonts
--------------------------------------------------------------------------------

The website in site/ serves three fonts from site/public/fonts/. They are not part of
the published package, and are redistributed under their own licences.

Inter - https://github.com/rsms/inter
Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter)
Licensed under the SIL Open Font License, Version 1.1, reproduced in
LICENSES/OFL-1.1-Inter.txt (the LICENSE file of @fontsource-variable/inter 5.3.0).
Google Fonts' Latin subsets of version 4.001, as packaged by
@fontsource-variable/inter 5.3.0, unmodified:
  site/public/fonts/inter-latin-opsz-normal.woff2
  site/public/fonts/inter-latin-wght-italic.woff2

JetBrains Mono - https://github.com/JetBrains/JetBrainsMono
Copyright 2020 The JetBrains Mono Project Authors
(https://github.com/JetBrains/JetBrainsMono)
Licensed under the SIL Open Font License, Version 1.1, reproduced in
LICENSES/OFL-1.1-JetBrains-Mono.txt (the LICENSE file of
@fontsource-variable/jetbrains-mono 5.3.0).
Google Fonts' Latin subsets of version 2.211, as packaged by
@fontsource-variable/jetbrains-mono 5.3.0, unmodified:
  site/public/fonts/jetbrains-mono-latin-wght-normal.woff2
  site/public/fonts/jetbrains-mono-latin-wght-italic.woff2

Go Mono - https://go.dev/blog/go-fonts
Copyright (c) 2016 Bigelow & Holmes Inc.
Licensed under the BSD 3-Clause licence that the Go fonts are distributed under,
reproduced in LICENSES/BSD-3-Clause-Go-Fonts.txt (golang.org/x/image v0.46.0,
font/gofont/ttfs/README).
Go-Mono.ttf version 2.010 from golang.org/x/image v0.46.0, subset to Latin-1,
general punctuation, arrows and box drawing and converted to WOFF2 with fontTools.
The site uses it for the arrows, mathematical signs and box drawing that the Latin
subset of JetBrains Mono lacks:
  site/public/fonts/go-mono-latin.woff2

--------------------------------------------------------------------------------
Runtime dependencies
--------------------------------------------------------------------------------

These are installed from npm, not redistributed in this repository or in the
webtessera package, and are listed for completeness.

@noble/hashes and @noble/curves - https://github.com/paulmillr/noble-hashes,
https://github.com/paulmillr/noble-curves
Copyright Paul Miller (https://paulmillr.com)
Licensed under the MIT License.