# Third-party notices

This project uses third-party open-source packages. Keep this file updated when dependencies change.

Direct NuGet dependencies:

| Package | License | Notes |
| --- | --- | --- |
| Avalonia | MIT | UI framework |
| Avalonia.Desktop | MIT | Desktop host |
| Avalonia.Themes.Fluent | MIT | UI theme |
| Avalonia.Fonts.Inter | MIT | Font package |
| CommunityToolkit.Mvvm | MIT | MVVM helpers |
| PDFsharp | MIT | PDF manipulation |
| Docnet.Core | MIT | PDF rendering via PDFium |
| PdfPig | Apache-2.0 | Text extraction |
| System.Drawing.Common | MIT | .NET drawing helpers |
| Velopack | MIT | Installer and updater |
| iTextSharp.LGPLv2.Core | LGPL-2.0-only | Digital signature feature |

Compliance checklist:

- Include MIT, Apache-2.0, and LGPL notices in distributed builds.
- Do not remove copyright/license files from packaged dependencies.
- For `iTextSharp.LGPLv2.Core`, avoid modifying the library. If it is modified, publish the modified library source under the LGPL terms.
- Keep the library as a separate dependency/package where practical so users can identify and replace it.
- Review this list before commercial release and after every dependency update.

This is an engineering compliance checklist, not legal advice.
