# Third-party notices

The local build redistributes the active model and runtime files documented in the project's `reports/model-manifest.json` audit record. The MAXIM files are retained only in local source assets and are excluded from the production build while Enhance Photo is unavailable.

| Component | Version / source | License evidence | Notice |
| --- | --- | --- | --- |
| BEN2 Base official ONNX | [Official publisher](https://huggingface.co/PramaLLC/BEN2) | BEN2 Base artifact and repository MIT; the author's full commercial model is separate | `ben2-MIT.txt` |
| MI-GAN pipeline v2 ONNX | [Author model card](https://huggingface.co/andraniksargsyan/migan), [upstream weights license](https://github.com/Picsart-AI-Research/MI-GAN/blob/main/LICENSE-WEIGHTS) | MIT | `migan-weights-MIT.txt` |
| ESRGAN Slim 2×/4× | `@upscalerjs/esrgan-slim@1.0.0` | MIT package; original ESRGAN Apache-2.0 | `esrgan-slim-MIT.txt`, `apache-2.0.txt` |
| MAXIM Low light, Denoise, Unblur | `@upscalerjs/maxim-*@0.1.0` from [UpscalerJS](https://upscalerjs.com/models/) | MIT packages; original MAXIM Apache-2.0 | `maxim-MIT.txt`, `apache-2.0.txt` |
| UpscalerJS runtime | `upscaler@1.0.0` | MIT | `upscaler-MIT.txt` |
| TensorFlow.js | `@tensorflow/tfjs@4.11.0` (transitive) | Apache-2.0 | `apache-2.0.txt` |
| ONNX Runtime Web | `onnxruntime-web@1.22.0` | MIT | `onnxruntime-MIT.txt`, `onnxruntime-1.22.0-ThirdPartyNotices.txt` |
| Inter and EB Garamond fonts | [Google Fonts repository](https://github.com/google/fonts) | SIL Open Font License 1.1 | `inter-OFL.txt`, `eb-garamond-OFL.txt` |

**Scoped NOTICE inventory (10 October 2026):** The three redistributed code-only MAXIM archives each contain `package/LICENSE` and no separate `NOTICE` entry. The official repository root listings for [DIS](https://github.com/xuebinqin/DIS), [ESRGAN](https://github.com/xinntao/ESRGAN) and [MAXIM](https://github.com/google-research/maxim) show their Apache licenses but no root `NOTICE` file; this does not rule out notices in nested source files or model derivatives. The installed TensorFlow.js 4.11.0 browser bundle includes `Copyright 2023 Google LLC. All Rights Reserved.` and an Apache-2.0 header, which is acknowledged here alongside `apache-2.0.txt`. ONNX Runtime's full published third-party notice remains copied locally. The deeper derivative and conversion-chain review remains a release gate.

The `vendor/model-packages/` archives retain the original package JavaScript and license while omitting duplicate weight shards; weights are served from `public/models/v1/` with pinned hashes. The source archives' SHA-256 values are recorded in the local manifest below.

The active background model is the official Prama LLC BEN2 Base ONNX artifact, SHA-256 `22cea62108ff53b7ccc20f7a008bf30494228d84b1687f29ecbe76936a998101`, distributed with its MIT notice. MI-GAN and ESRGAN notices remain listed above. ONNX Runtime's published third-party notices remain copied locally. Historical audit reports describe earlier model builds and do not represent the current production assets.

| Code-only archive | SHA-256 |
| --- | --- |
| `maxim-enhancement-code-0.1.0.tgz` | `e59d781116bf9211d61fc204e9397288ee9c13cfab427eec30ed2d67a185771b` |
| `maxim-denoising-code-0.1.0.tgz` | `21f0d2b53715dfdd39043badd817ad2d8493568048e7fe8f923c57be17c18df6` |
| `maxim-deblurring-code-0.1.0.tgz` | `e9134bfd1cf27c803709e766f5580f9bdf963a8e6749dd62c791c296ef1a3984` |

## Installed runtime dependency inventory — 11 October 2026

[runtime-dependency-notices.txt](runtime-dependency-notices.txt) preserves the available license files and source copyright headers from the 86 installed production/peer dependencies (a conservative superset of browser-bundled code). ONNX Runtime Web/Common are covered by the existing upstream MIT and full ThirdPartyNotices files above. `tr46@0.0.3` omits its root license file in the installed package; [tr46-0.0.3-MIT.txt](tr46-0.0.3-MIT.txt) now copies the MIT notice from the original repository named in that package's metadata. `guid-typescript@1.0.9` declares ISC but its installed package and original repository provide no exact historical copyright/license notice. The site's code imports only `onnxruntime-web/wasm`; its selected `ort.wasm` source map have no `guid-typescript` source, while the unused `ort.all` map does. The static `dist` contains no `guid-typescript` package or module. Thus its missing historical file is not a notice gap for this static website bundle; it would need resolution if a future distribution includes ONNX Runtime's `ort.all`/WebGL code or the installed package tree. The aggregate must not be interpreted as complete model-conversion or derivative NOTICE sign-off. No model conversion was newly reproduced.