# Third-Party Notices for Image Compressor Codecs

This folder vendors pinned browser/WASM codec packages used by the public Image Compressor tool. The tool runs entirely client-side and does not upload user images.

## @jsquash/jpeg 1.6.0

- Package: `@jsquash/jpeg`
- Version: `1.6.0`
- License: Apache-2.0
- Source: https://www.npmjs.com/package/@jsquash/jpeg
- Vendored files: `jsquash-jpeg-1.6.0/`

The package includes MozJPEG/libjpeg-turbo codec code. Its bundled codec notice says libjpeg-turbo is covered by IJG, Modified BSD, and zlib-style licenses. The package includes the upstream `LICENSE` and `codec/LICENSE.codec.md` files.

Required attribution from the bundled codec notice:

This software is based in part on the work of the Independent JPEG Group.

## @jsquash/webp 1.5.0

- Package: `@jsquash/webp`
- Version: `1.5.0`
- License: Apache-2.0
- Source: https://www.npmjs.com/package/@jsquash/webp
- Vendored files: `jsquash-webp-1.5.0/`

The package includes libwebp codec code. Its bundled codec notice uses a BSD-style license. The package includes the upstream `LICENSE` and `codec/LICENSE.codec.md` files.

## @jsquash/oxipng 2.3.0

- Package: `@jsquash/oxipng`
- Version: `2.3.0`
- License: Apache-2.0
- Source: https://www.npmjs.com/package/@jsquash/oxipng
- Vendored files: `jsquash-oxipng-2.3.0/`

The package includes OxiPNG codec code. Its bundled codec notice uses the MIT License. The package includes the upstream `LICENSE` and `codec/LICENSE.codec.md` files.

## Runtime policy

- Codecs are loaded from this local vendored directory only.
- The compressor does not import codec code from external CDNs.
- Package versions are pinned in the folder names above.
- User-supplied images are decoded and encoded in the browser.