THIRD PARTY NOTICES

This file lists third-party components that may be bundled with the Fuxin Office SDK
release package. The Fuxin Office SDK license is provided in legal.txt. Third-party
components remain subject to their own license terms.

This notice is based on package metadata, lockfile entries, bundled source
headers, and runtime artifacts present in this repository at release build time.

Scope

This notice covers third-party code or assets distributed in the published
Fuxin Office SDK package and in the external package that embeds lib/. Build-only,
test-only, and development-only dependencies are excluded unless their code is
included in the published runtime artifacts.

SBOM fields

Each component entry provides:

name | version | license | source URL | copyright holder | included files

Bundled copied files

| name | version | license | source URL | copyright holder | included files |
| --- | --- | --- | --- | --- | --- |
| js-cookie | 3.0.1 | MIT | https://github.com/js-cookie/js-cookie | Klaus Hartl, Fagner Brack, GitHub contributors | lib/vendor/js.cookie.min.js |
| XRegExp-All | 3.0.0 | MIT | https://github.com/slevithan/xregexp | Steven Levithan and contributors | lib/vendor/xregexp-all-min.js |
| Zepto | 1.2.0-30-gb5ed8d6 | MIT | https://github.com/madrobby/zepto | Thomas Fuchs and Zepto contributors | lib/vendor/zepto.min.js |
| blueimp-md5 compatible MD5 runtime | 2.19.0-compatible | MIT and BSD-style portions | https://github.com/blueimp/JavaScript-MD5 | Sebastian Tschan; Paul Johnston MD5 implementation contributors | lib/vendor/md5.min.js |

Client UI runtime

The following production UI dependency set may be bundled into lib/UI.runtime.js,
lib/ApiBase.js, lib/DropdownPopoverList.js, and lib/mount*.js.

| name | version | license | source URL | copyright holder | included files |
| --- | --- | --- | --- | --- | --- |
| vue | 3.5.29 | MIT | https://github.com/vuejs/core | Yuxi (Evan) You | Client UI runtime chunks |
| @vue/runtime-core | 3.5.29 | MIT | https://github.com/vuejs/core | Yuxi (Evan) You | Client UI runtime chunks |
| @vue/runtime-dom | 3.5.29 | MIT | https://github.com/vuejs/core | Yuxi (Evan) You | Client UI runtime chunks |
| @vue/reactivity | 3.5.29 | MIT | https://github.com/vuejs/core | Yuxi (Evan) You | Client UI runtime chunks |
| @vue/shared | 3.5.29 | MIT | https://github.com/vuejs/core | Yuxi (Evan) You | Client UI runtime chunks |
| vuex | 4.1.0 | MIT | https://github.com/vuejs/vuex | Evan You | Client UI runtime chunks |
| vue-i18n | 9.14.4 | MIT | https://github.com/intlify/vue-i18n | kazuya kawaguchi | Client UI runtime chunks |
| @intlify/core-base | 9.14.4 | MIT | https://github.com/intlify/vue-i18n | kazuya kawaguchi | Client UI runtime chunks |
| @intlify/message-compiler | 9.14.4 | MIT | https://github.com/intlify/vue-i18n | kazuya kawaguchi | Client UI runtime chunks |
| @intlify/shared | 9.14.4 | MIT | https://github.com/intlify/vue-i18n | kazuya kawaguchi | Client UI runtime chunks |
| Naive UI | 2.44.1 | MIT | https://github.com/tusen-ai/naive-ui | TuSimple / 07akioni | Client UI runtime chunks |
| css-render | 0.15.14 | MIT | https://github.com/07akioni/css-render | 07akioni | Client UI runtime chunks |
| @css-render/plugin-bem | 0.15.14 | MIT | https://github.com/07akioni/css-render | 07akioni | Client UI runtime chunks |
| @css-render/vue3-ssr | 0.15.14 | MIT | https://github.com/07akioni/css-render | 07akioni | Client UI runtime chunks |
| @vicons/ionicons5 | 0.13.0 | MIT | https://github.com/07akioni/xicons | 07akioni; Ionicons contributors | Client UI runtime chunks |
| deepmerge | 4.3.1 | MIT | https://github.com/TehShrike/deepmerge | James Halliday, Josh Duff, and contributors | Client UI runtime chunks |
| async-validator | 4.2.5 | MIT | https://github.com/yiminghe/async-validator | yiminghe | Client UI runtime chunks |
| date-fns | 4.1.0 | MIT | https://github.com/date-fns/date-fns | Sasha Koss, Lesha Koss, and contributors | Client UI runtime chunks |
| evtd | 0.2.4 | MIT | https://github.com/07akioni/evtd | 07akioni | Client UI runtime chunks |
| lodash-es | 4.17.23 | MIT | https://github.com/lodash/lodash | OpenJS Foundation and contributors | Client UI runtime chunks |
| seemly | 0.3.10 | MIT | https://github.com/07akioni/seemly | 07akioni | Client UI runtime chunks |
| treemate | 0.3.11 | MIT | https://github.com/07akioni/treemate | 07akioni | Client UI runtime chunks |
| vdirs | 0.1.8 | MIT | https://github.com/07akioni/vdirs | 07akioni | Client UI runtime chunks |
| vooks | 0.2.12 | MIT | https://github.com/07akioni/vooks | 07akioni | Client UI runtime chunks |
| vueuc | 0.4.65 | MIT | https://github.com/07akioni/vueuc | 07akioni | Client UI runtime chunks |
| @vue/devtools-api | 6.6.4 | MIT | https://github.com/vuejs/vue-devtools | Guillaume Chau and Vue Devtools contributors | Client UI runtime chunks |
| @juggle/resize-observer | 3.4.0 | Apache-2.0 | https://github.com/juggle/resize-observer | Juggle contributors | Client UI runtime chunks |
| highlight.js | 11.11.1 | BSD-3-Clause | https://github.com/highlightjs/highlight.js | Ivan Sagalaev, Josh Goebel, and contributors | Client UI runtime chunks |
| @popperjs/core | 2.11.8 | MIT | https://github.com/popperjs/popper-core | Federico Zivolo and contributors | Client UI runtime chunks |
| csstype | 3.2.3 | MIT | https://github.com/frenic/csstype | Fredrik Nicol | Client UI runtime chunks |

Worker and WebAssembly runtime

| name | version | license | source URL | copyright holder | included files |
| --- | --- | --- | --- | --- | --- |
| CanvasKit / Skia | bundled runtime artifact | BSD-3-Clause | https://skia.org/docs/user/modules/canvaskit/ ; https://skia.googlesource.com/skia | Google LLC and Skia contributors | lib/worker/wasm/canvaskit.js, lib/worker/wasm/canvaskit.wasm |
| Emscripten-generated loader/runtime support | bundled runtime artifact | MIT / NCSA-style | https://github.com/emscripten-core/emscripten | Emscripten authors and LLVM contributors | lib/worker/wasm/*.js |
| Fuxin Office SDK bootloader wasm module | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/worker/wasm/bootloader.js, lib/worker/wasm/bootloader.wasm |
| Fuxin Office SDK CFB to OOXML conversion wasm module | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/worker/wasm/cfb2ooxml.js, lib/worker/wasm/cfb2ooxml.wasm |
| Fuxin Office SDK VML to DML conversion wasm module | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/worker/wasm/vml2dml.js, lib/worker/wasm/vml2dml.wasm |
| Fuxin Office SDK EMF conversion wasm module | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/worker/wasm/emfjs.js, lib/worker/wasm/emfjs.wasm |
| Fuxin Office SDK OOXML encryption wasm module | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/worker/wasm/ooxmlcrypt.js, lib/worker/wasm/ooxmlcrypt.wasm |
| Fuxin Office SDK WordArt generation wasm module | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/worker/wasm/wordart_generate.js, lib/worker/wasm/wordart_generate.wasm |

Additional license notices for worker wasm artifacts are shipped under:

lib/worker/wasm/LICENSES/

OOXML schema-derived data and generated runtime assets

| name | version | license | source URL | copyright holder | included files |
| --- | --- | --- | --- | --- | --- |
| OOXML schema bundle | ECMA-376 schema-derived package | ECMA / Microsoft schema terms as applicable to source schemas; packaged runtime data under Fuxin Office SDK distribution | https://www.ecma-international.org/publications-and-standards/standards/ecma-376/ | ECMA International, Microsoft, and Fuxin Office SDK copyright holder | lib/worker/xsd.zip |
| Fuxin Office SDK sample blank documents | 1.0.0 | SEE LICENSE IN legal.txt | Internal Fuxin Office SDK source | Fuxin Office SDK copyright holder | lib/locale-assets/deploy/sample/blank.docx, blank.xlsx, blank.pptx |

Do not remove copyright, NOTICE, or license files from third-party files or from
lib/worker/wasm/LICENSES.
