Open source licenses
Sticraft is built on open-source software. Because every Sticraft tool runs entirely inside your browser, these components are not something we merely use on a server — they are downloaded to your device and executed there. This page names each of them, with the version, the license it is used under, and where to get its source.
Third-party components
The list below is Sticraft's declared runtime dependency set. Each license string is the one published by that package itself, at the exact version we ship. Where a package is dual-licensed, we state which option we use — silence on a dual license only creates ambiguity later.
| Component | Version | License | Source |
|---|---|---|---|
| @jspawn/qpdf-wasm WebAssembly build of qpdf (itself Apache-2.0). Powers PDF encryption, decryption, repair, and the lossless structural pass of the PDF compressor. | 0.0.2 | Apache-2.0 | source |
| @jsquash/avif | 2.1.1 | Apache-2.0 | source |
| @jsquash/jpeg | 1.6.0 | Apache-2.0 | source |
| @jsquash/oxipng | 2.3.0 | Apache-2.0 | source |
| @jsquash/png | 3.1.1 | Apache-2.0 | source |
| @jsquash/webp | 1.5.0 | Apache-2.0 | source |
| @types/dompurify TypeScript type declarations only — no code from this package is shipped to your browser. | 3.0.5 | MIT | source |
| clsx | 2.1.1 | MIT | source |
| docx | 9.7.1 | MIT | source |
| dompurify Dual-licensed. Sticraft uses DOMPurify under the Apache-2.0 option of that dual license. | 3.4.11 | (MPL-2.0 OR Apache-2.0) | source |
| gifenc | 1.0.3 | MIT | source |
| jsbarcode | 3.12.3 | MIT | source |
| jspdf | 4.2.1 | MIT | source |
| jszip Dual-licensed. Sticraft uses JSZip under the MIT option of that dual license. | 3.10.1 | (MIT OR GPL-3.0-or-later) | source |
| lucide-react | 1.17.0 | ISC | source |
| next | 16.2.7 | MIT | source |
| onnxruntime-web | 1.27.0 | MIT | source |
| pdf-lib | 1.17.1 | MIT | source |
| pdfjs-dist | 6.0.227 | Apache-2.0 | source |
| qrcode | 1.5.4 | MIT | source |
| react | 19.2.7 | MIT | source |
| react-dom | 19.2.7 | MIT | source |
| svgo | 4.0.1 | MIT | source |
| tailwind-merge | 3.6.0 | MIT | source |
| tesseract.js Wraps the Tesseract OCR engine (Apache-2.0), compiled to WebAssembly. | 7.0.0 | Apache-2.0 | source |
| wasm_vtracer WebAssembly build of VTracer (MIT). Powers the image-to-vector tracer. | 0.2.0 | MIT | source |
Some of these packages bundle further open-source components (for example, qpdf, Tesseract, MozJPEG, libwebp and libavif are compiled to WebAssembly inside the packages above). Except where stated otherwise on this page, those components are distributed under the license of the package that ships them, and their copyright notices travel with the code in the package sources linked above.
Fonts
Sticraft's PDF text tools embed Liberation Sans so that Turkish, European, Cyrillic and Greek characters render correctly. The font files are served from /fonts/ and embedded into the PDFs you generate. They are not covered by the license of the package they arrive in — they carry their own:
- Liberation Sans(Regular and Bold), copyright Red Hat, Inc., with Reserved Font Name "Liberation"; digitized data copyright Google Corporation. Licensed under the SIL Open Font License, version 1.1. The files ship with pdf.js (see
node_modules/pdfjs-dist/standard_fonts/LICENSE_LIBERATION), whose own package license is Apache-2.0 — the OFL governs the font itself. The OFL permits this embedding; the font is not sold on its own and the Reserved Font Name is unchanged.
Corrections
We keep this page pinned to what is actually installed, not to what we remember installing. If you believe a license, a version or an attribution here is wrong, tell us at support@sticraft.com and we will fix it. See also our privacy policy and the proof that these components run on your device, not ours.