Component licenses
PDF Editor is built on open-source libraries. The main components involved in PDF and OCR processing are listed below.
Ghostscript-backed PDF/A is disabled in the public service. Poppler runs as an unmodified server-side CLI and its Docker image is not distributed; veraPDF is used under MPLv2+. Written legal confirmation of these conditions remains pending before PDF/A can be enabled publicly.
| Component | License | Purpose |
|---|---|---|
| PDFBox 3.0.8 | Apache-2.0 | Validation and limited modification of PDF files |
| qpdf 12.3.2 | Apache-2.0 | PDF structure, merging, splitting and encryption |
| PDF.js 5.7.284 | Apache-2.0 | PDF viewing in the browser |
| Tesseract + tessdata | Apache-2.0 | Local OCR for English and Russian |
| Poppler | GPL | Unmodified server-side CLI; its Docker image is not distributed to users |
| Ghostscript | AGPL or commercial | PDF/A is disabled in the public service |
| veraPDF 1.30.2 | MPLv2+ | Server-side PDF/A validation with notices and a source link |
What we publish and review
- A complete machine-readable SBOM for runtime dependencies.
- Required license texts and notices.
- A separate decision for features covered by copyleft or commercial licenses.
- A new review whenever runtime dependencies change.