# Third-party notices

Review date: 2026-08-27  
Application: MIKA De-ID Local 0.2.1
Copyright holder for the application: NPO NT

This inventory covers the direct components used by the verified source-development environment. A signed macOS or Windows binary must receive a fresh transitive SBOM and licence scan because Python wheels and installers may bundle additional native libraries.

| Component | Version | Role | Selected licence / notice | Upstream |
|---|---:|---|---|---|
| PyMuPDF / MuPDF | 1.28.2 | PDF parsing, rendering and creation | GNU AGPLv3 path selected for this product; also offered commercially by Artifex | <https://github.com/pymupdf/PyMuPDF> |
| Pillow | 12.3.0 | image decoding and masking | MIT-CMU | <https://python-pillow.github.io/> |
| pypdf | 6.16.2 | strict output-structure verification | BSD-3-Clause | <https://pypdf.readthedocs.io/> |
| zxing-cpp | 3.1.1 | QR and barcode detection | Apache-2.0 | <https://github.com/zxing-cpp/zxing-cpp> |
| pillow-heif | 1.5.0 | HEIC/HEIF decoding | BSD-3-Clause; binary-native transitive review still required | <https://github.com/bigcat88/pillow_heif> |
| Tesseract OCR | 5.5.1 | offline OCR executable | Apache-2.0 | <https://github.com/tesseract-ocr/tesseract> |
| tessdata_fast rus/eng | tag 4.1.0 | offline OCR language data | Apache-2.0 | <https://github.com/tesseract-ocr/tessdata_fast> |
| ReportLab | 4.5.1 | development-only synthetic fixtures and dossier | BSD-style licence | <https://www.reportlab.com/> |
| pytest | 9.1.1 | development-only tests | MIT | <https://pytest.org/> |

Full licence copies available in this source distribution:

- application AGPLv3: `LICENSE`;
- PyMuPDF wheel notice: `third_party_licenses/PyMuPDF-COPYING.txt`;
- Pillow: `third_party_licenses/Pillow-LICENSE.txt`;
- pypdf: `third_party_licenses/pypdf-LICENSE.txt`;
- zxing-cpp: `third_party_licenses/zxing-cpp-LICENSE.txt`;
- pillow-heif: `third_party_licenses/pillow-heif-LICENSE.txt`;
- Tesseract: `third_party_licenses/Tesseract-LICENSE.txt`;
- tessdata_fast: `third_party_licenses/tessdata_fast-LICENSE.txt`;
- ReportLab: `third_party_licenses/ReportLab-LICENSE.txt`;
- pytest: `third_party_licenses/pytest-LICENSE.txt`.

The producer line in PDFs created by the application identifies MIKA De-ID Local and its version. No upstream project endorses NPO NT or MIKA De-ID Local.
