Legal
Open Source Licenses
Third-party components used to build ToolBuddy, and the licenses they are provided under.
Last updated: September 4, 2026
About these notices
ToolBuddy processes your files in your browser, and to do that it bundles open source software. This page lists those components and their licenses so the attribution requirements are met and you can review what runs on your device.
Each component remains under its own license. Nothing here changes the terms of ToolBuddy itself, which are covered by the Terms of Service.
Components requiring specific attribution
These components carry obligations beyond a standard permissive license.
| Component | Version | License | Notes |
|---|---|---|---|
| LAME (@breezystack/lamejs) | 1.2.7 | LGPL-3.0 | Used for MP3 export, which runs entirely in your browser. Provided under the GNU Lesser General Public License v3.0. The encoder is loaded as a separate module and can be replaced with a compatible build. |
| libheif (libheif-js) | 1.23.2 | LGPL-3.0 | Used to open HEIC and HEIF photos in Convert to JPG when your browser cannot decode them natively. It runs entirely in your browser. Provided under the GNU Lesser General Public License v3.0. The decoder is served unmodified as a separate module (/vendor/libheif/) and can be replaced with a compatible build. |
| Spine Player | 4.2.115 | Esoteric Software License | Runtime for viewing Spine animations, used under the Esoteric Software license. Viewing Spine content may require your own Spine license. |
| JSZip | 3.10.1 | MIT OR GPL-3.0-or-later | Dual licensed. ToolBuddy uses it under the MIT option. |
| node-forge | 1.4.0 | BSD-3-Clause OR GPL-2.0 | Dual licensed. ToolBuddy uses it under the BSD-3-Clause option. |
Audio, image, and animation
| Component | Version | License | Notes |
|---|---|---|---|
| LAME (@breezystack/lamejs) | 1.2.7 | LGPL-3.0 | Used for MP3 export, which runs entirely in your browser. Provided under the GNU Lesser General Public License v3.0. The encoder is loaded as a separate module and can be replaced with a compatible build. |
| libheif (libheif-js) | 1.23.2 | LGPL-3.0 | Used to open HEIC and HEIF photos in Convert to JPG when your browser cannot decode them natively. It runs entirely in your browser. Provided under the GNU Lesser General Public License v3.0. The decoder is served unmodified as a separate module (/vendor/libheif/) and can be replaced with a compatible build. |
| Spine Player | 4.2.115 | Esoteric Software License | Runtime for viewing Spine animations, used under the Esoteric Software license. Viewing Spine content may require your own Spine license. |
| FFmpeg.wasm wrapper (@ffmpeg/ffmpeg) | 0.12.15 | MIT | The MIT-licensed command wrapper only. ToolBuddy does not bundle an FFmpeg core; encoded formats beyond WAV and MP3 require a separately configured codec runtime. |
| @ffmpeg/util | 0.12.2 | MIT | |
| Rive Canvas | 2.38.1 | MIT | |
| browser-image-compression | 2.0.2 | MIT | |
| Cropper.js | 1.6.2 | MIT | |
| gifenc | 1.0.3 | MIT | |
| html-to-image | 1.11.13 | MIT | |
| Color Thief | 3.3.1 | MIT | |
| piexifjs | 1.0.6 | MIT | |
| sharp | 0.34.5 | Apache-2.0 | |
| Three.js (three) | 0.185.1 | MIT | |
| glTF-Transform (@gltf-transform) | 4.5.0 | MIT | |
| meshoptimizer | 1.2.0 | MIT | |
| mp4-muxer | 5.2.2 | MIT | |
| Mediabunny | 1.61.0 | MPL-2.0 | |
| MODNet (Xenova/modnet, ONNX) | 2026-10-03 | Apache-2.0 | |
| libflac.js (libflacjs) | 5.6.0 | MIT |
Documents and text
| Component | Version | License | Notes |
|---|---|---|---|
| JSZip | 3.10.1 | MIT OR GPL-3.0-or-later | Dual licensed. ToolBuddy uses it under the MIT option. |
| pdf-lib | 1.17.1 | MIT | |
| pdf.js (pdfjs-dist) | 5.5.207 | Apache-2.0 | |
| pdf-fontkit | 1.8.9 | MIT | |
| qpdf-wasm | 0.3.0 | ISC | |
| zgapdfsigner | 2.7.6 | MIT | |
| docx | 9.6.1 | MIT | |
| Tesseract.js | 7.0.0 | Apache-2.0 | |
| QRCode | 1.5.4 | MIT | |
| sql-formatter | 15.8.2 | MIT | |
| pako | 2.1.0 | MIT AND Zlib |
Application platform
| Component | Version | License | Notes |
|---|---|---|---|
| node-forge | 1.4.0 | BSD-3-Clause OR GPL-2.0 | Dual licensed. ToolBuddy uses it under the BSD-3-Clause option. |
| React | 19.2.3 | MIT | |
| React DOM | 19.2.3 | MIT | |
| Next.js | 16.2.10 | MIT | |
| Serwist | 9.5.11 | MIT | |
| clsx | 2.1.1 | MIT | |
| tailwind-merge | 3.5.0 | MIT | |
| nanoid | 5.1.6 | MIT | |
| Nodemailer | 9.0.3 | MIT-0 |
Data and search
| Component | Version | License |
|---|---|---|
| Supabase JS | 2.110.1 | MIT |
| Fuse.js | 7.1.0 | Apache-2.0 |
| Mixpanel Browser | 2.77.0 | Apache-2.0 |
| Transformers.js | 4.2.0 | Apache-2.0 |
License questions
If you need a license notice corrected, or want the written offer for any copyleft component listed here, contact us through the Contact page.
Please include the component name and the license concern so we can respond accurately.