# Local QPDF WebAssembly vendor

QPDF 12.4.2, copyright Jay Berkenbilt and Manfred Holger; Apache-2.0.
See LICENSE-QPDF.txt and NOTICE-QPDF.md, including embedded crypto notices.

Browser build: https://github.com/le0pard/qpdf-wasm, copyright 2026 Oleksii
Vasyliev; MIT (LICENSE-browser-build.txt). The generated Emscripten factory
was extracted from its published worker and exported as ESM. The application
and Comlink wrapper were removed. Engine logic and the WASM binary are
unchanged. Exact asset URLs and SHA-256 hashes are in source.json. This is a
browser/worker build; its Vite-transformed Node branch is not supported.

Build recipe: https://github.com/le0pard/qpdf-wasm/blob/main/wasm/Dockerfile
QPDF source: https://github.com/qpdf/qpdf/tree/v12.4.2
Emscripten: LICENSE-emscripten.txt.
libjpeg-turbo: LICENSE-libjpeg-turbo.md and README-libjpeg-ijg.txt.
This software is based in part on the work of the Independent JPEG Group.
zlib: README-zlib.txt.

The version is checked in regression tests. The binary was not rebuilt from
source here, and this record is not an independent security audit. Before a
production release, review upstream security changes, dependency licensing
and the reproducible build/toolchain as part of the project's release review.