Open-source licences

Bundled into the engine (vendored source, shipped in the client)

polybooljs v1.2.2, MIT

Copyright (c) 2016 Sean Connelly (@voidqk), https://syntheti.cc https://github.com/velipso/polybooljs 2-D polygon boolean ops behind the Eraser and Shape Builder. Vendored in public/engine/parts/tools/58b-eraserBoolean.js.

perfect-freehand v1.2.3, MIT

Copyright (c) Steve Ruiz https://github.com/steveruizok/perfect-freehand Pressure-sensitive stroke outlines for the Pencil/Brush tools. Vendored in public/engine/parts/vendor/19c-PerfectFreehand.js.

spiro (be5invis), MIT / Apache-2.0

A JavaScript port of Raph Levien's libspiro (clothoid / Euler-spiral splines). Powers the Pencil's Spiro mode. Vendored in public/engine/parts/vendor/19b-SpiroLib.js.

opentype.js v2.0.0, MIT

https://github.com/opentypejs/opentype.js Font parsing: text-to-path, glyph metrics, uploaded-font handling. Vendored in public/engine/parts/vendor/04b-opentype.js.

PDF / EPS reader data: Adobe Glyph List and the Core 14 font metrics, BSD-3-Clause / Adobe AFM terms

src/import/pdf/fontdata.js (generated by scripts/gen-pdf-fontdata.py) holds the standard PDF encodings, the Adobe Glyph List (glyph name to Unicode) and the advance widths of the 14 standard PDF fonts, as distributed with ReportLab (BSD licence, Copyright ReportLab Europe Ltd.). The Adobe Glyph List is Copyright 2002-2019 Adobe (https://github.com/adobe-type-tools/agl-aglfn, BSD-3-Clause); the widths come from Adobe's Core 14 AFM files, which Adobe permits to be used, copied and distributed for any purpose and without charge. No font program is included. Used only when a PDF / EPS being opened names a glyph or a standard font without its own data.

npm dependencies shipped to the browser

Vendored libraries shipped as their own files

CanvasKit bundles FreeType. Portions of this software are copyright (c) The FreeType Project (https://freetype.org). All rights reserved. FreeType is used under the FreeType License (FTL).

Icon sets (the editor's icon library and its chrome icons)

The editor's Icons library (public/icon-assets/, built by scripts/build-icon-assets.mjs) and the chrome icons drawn from the same sets. Each glyph is the set's own SVG, unmodified apart from normalising the size.

Emoji and illustration sets (the editor's Graphics library)

public/graphic-assets/, built by scripts/build-graphic-assets.mjs. The rows below are the sets that public/graphic-assets/NOTICE.md lists as shipped.

The rc-* graphics are not third-party: they were generated by Rayzia with Recraft AI and cut into pieces (public/graphic-assets/NOTICE-recraft.md). No open-source licence applies to them.

Colour profile

Machine-learning models and runtime

None of these is bundled with our code. The runtime and the two models are downloaded by the browser the first time the feature is used, from the pinned URLs in public/ml/sam-worker.js; VTracer ships as its own unmodified files.

Apache-2.0: the full text ships with the site at /vendor/material-symbols/LICENSE (the same text is in public/ml/vtracer/1.0.0-alpha.4/LICENSE-APACHE-2.0.txt).

Compiled into Rayzia's own WebAssembly

public/wasm/rz-geom/0.1.0/rz_geom.wasm (Offset Path and dense booleans; source in wasm/rz-geom, our own code) links these Rust crates and the Rust standard library. Their full licence texts ship next to the module in public/wasm/rz-geom/0.1.0/THIRD_PARTY.txt and are kept in wasm/licenses/; scripts/build-wasm.mjs refuses to build if a crate's licence is not on its permissive allow-list or its text is missing.

rz-import (files made in other apps: .ai, EPS, PDF fallback, EMF, WMF, DXF)

public/wasm/rz-import/0.1.0/rz_import.wasm (source in wasm/rz-import: our adapter around VectorCraft's file readers and SVG writer) is fetched only when such a file is opened. It links about 300 Rust crates; every one is on the build's permissive allow-list, and their full licence texts ship next to the module in public/wasm/rz-import/0.1.0/THIRD_PARTY.txt (kept in wasm/rz-import/licenses/, collected by scripts/wasm-licenses.mjs). The main ones:

VectorCraft's own NOTICE also says its name and logos are its team's trademarks, not covered by the licence: Rayzia uses neither (the copyright line above is the attribution the MIT licence asks for, and appears only here and in THIRD_PARTY.txt). The module's fallback face for text in an opened file is Inter (public/wasm/rz-import/0.1.0/fonts/Inter-Regular.ttf, SIL Open Font License 1.1, Copyright 2016 The Inter Project Authors, licence beside it in OFL-Inter.txt), with Noto Sans Thai from public/fonts/ for Thai. test/fixtures/ai-import/make-ai.mjs (tests only, not shipped) is a JavaScript port of VectorCraft's crates/testkit/src/ai.rs, under the same licence.

rz-photo (Pixel mode: filters, Filter Gallery, on-canvas tools)

public/wasm/rz-photo/0.2.0/rz_photo.wasm (Pixel mode's borrowed filters and the Filter Gallery, loaded only when a filter dialog opens; queue 3l, docs/handoff/pixel-borrow-1028/) is built from wasm/rz-photo: our own wrapper around PhotoCraft's crates (github.com/storytold/photocraft at eb6c1ab), vendored unchanged except their manifests in wasm/rz-photo/vendor/. PhotoCraft's own LICENSE-MIT, LICENSE-APACHE and NOTICE are kept there and in wasm/rz-photo/licenses/; the full texts ship next to the module in public/wasm/rz-photo/0.2.0/THIRD_PARTY.txt. The same source, built with its "tools" feature (wasm/rz-photo/canvas), is public/wasm/rz-photo-tools/0.2.0/rz_photo_tools.wasm (the Edge Lasso, Quick Select, the Paint Bucket and the Gradient, loaded on a tool's first use), under the same licences, its texts in that folder's THIRD_PARTY.txt. Built with its "warp" feature (wasm/rz-photo/warp) it is public/wasm/rz-photo-warp/0.1.0/rz_photo_warp.wasm (Free Transform's Distort, Perspective and Warp: Rayzia's own resampler on PhotoCraft's homography, Bezier mesh, Warp presets and mesh drags, loaded when a Free Transform begins), under the same licences, its texts in that folder's THIRD_PARTY.txt. Built with its "pin" feature (wasm/rz-photo/pin) it is public/wasm/rz-photo-pin/0.1.0/rz_photo_pin.wasm (Edit ▸ Pin Warp: PhotoCraft's puppet warp, puppet.rs, its mesh and as-rigid-as-possible solve; Edit ▸ Perspective Warp: PhotoCraft's perspective.rs, its planes' homographies with the shared edges blended and its Straighten; both drawn by Rayzia's own triangle resampler; loaded when either begins), under the same licences, its texts in that folder's THIRD_PARTY.txt. The ArtCraft name, wordmark and logos are NOT covered by PhotoCraft's licence and are not used anywhere in Rayzia. PhotoCraft's face-detection weights (vendor/photocraft-algo/data/libfacedetection.bin, BSD-3-Clause, Copyright (c) 2015-2019 Shiqi Yu, licence text beside it) sit in the vendored source but are NOT compiled into the web module (their code is native-only).

CanvasKit / Skia, BSD-3-Clause

CanvasKit is the WebAssembly build of Skia and is what actually draws every pixel in Rayzia. BSD-3-Clause requires this notice to be reproduced in binary distributions.

Copyright (c) 2011 Google Inc. All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

   * Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
   * Redistributions in binary form must reproduce the above
copyright notice, this list of conditions and the following disclaimer
in the documentation and/or other materials provided with the
distribution.
   * Neither the name of Google Inc. nor the names of its
contributors may be used to endorse or promote products derived from
this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

MIT

The MIT-licensed packages above are all under the standard MIT text, reproduced once here, with copyright held by each project's authors as named in its own repository:

Permission is hereby granted, free of charge, to any person obtaining a copy of this
software and associated documentation files (the "Software"), to deal in the Software
without restriction, including without limitation the rights to use, copy, modify,
merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to the following
conditions:

The above copyright notice and this permission notice shall be included in all copies
or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF
CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE
OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

ISC

Lucide is under the ISC licence:

Permission to use, copy, modify, and/or distribute this software for any purpose with or
without fee is hereby granted, provided that the above copyright notice and this permission
notice appear in all copies.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS
SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE
AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.

Fonts

Roboto (skiavg/src/font.js), Apache-2.0, Google Fonts. Embedded as the engine's fallback face so text renders before any webfont loads.

Noto Sans Thai (public/fonts/NotoSansThai-Regular.ttf): SIL Open Font License 1.1, Copyright 2022 The Noto Project Authors (github.com/notofonts/thai). The Thai face for text in opened files and on the canvas. The licence ships beside it in public/fonts/OFL-NotoSansThai.txt.

Inter (public/wasm/rz-import/0.1.0/fonts/Inter-Regular.ttf): SIL Open Font License 1.1, Copyright 2016 The Inter Project Authors; licence beside it in OFL-Inter.txt.

Loaded at run time as a separate file (LGPL-2.1)

replicad-opencascadejs v1.1.0, LGPL-2.1-only

A WebAssembly build of OpenCascade.js (Sebastian Alff and contributors, https://github.com/donalffons/opencascade.js), customised for replicad by Steve Genoud (https://github.com/sgenoud/replicad, npm replicad-opencascadejs). It contains Open CASCADE Technology (OCCT), Copyright (c) Open Cascade SAS, https://github.com/Open-Cascade-SAS/OCCT, licensed under the GNU LGPL version 2.1 with the Open CASCADE exception.

Used by Effect ▸ 3D to build an exact Extrude & Bevel solid (prism, fillet, chamfer, tessellation). Files, both unmodified copies of the package's dist/replicad_single.js and dist/replicad_single.wasm, renamed only:

• public/kernel3d/1.1.0/solid-kernel.js
• public/kernel3d/1.1.0/solid-kernel.wasm
• public/kernel3d/1.1.0/LICENSE.txt, the full LGPL-2.1 text shipped with the package

How the LGPL is respected: the kernel is a separate file, loaded dynamically by our own worker (public/kernel3d/solid-worker.js) the first time a bevelled 3D extrusion is drawn, never bundled, minified or obfuscated with our code (scripts/obfuscate.mjs does not touch kernel3d/). Anyone may replace the two files with their own build of the same library at the same path. The code that drives it (public/kernel3d/solid-build.js, solid-worker.js) is ours. The package's source is available from the links above; scripts/vendor-solid-kernel.mjs re-copies the files from the npm package.

If something is listed wrongly or is missing, that is a mistake to fix, not a position to defend, open a bug report and it gets corrected.