BREEZO — THIRD-PARTY NOTICES https://breezofile.com/licenses (English) https://breezofile.com/zh-tw/licenses (繁體中文) Last reviewed: 2026-08-24 This file lists the third-party components that are actually delivered to your browser when you use breezofile.com, the licence each one is distributed under, and where its source code can be obtained. Scope note: this file covers components that are *published as part of this website*. Tools that only run on the machine that builds the site (compilers, bundlers, test runners, image optimisers) are not distributed to you and are listed separately at the end for transparency. This file is a factual record, not a legal opinion. ================================================================= 1. COMPONENTS UNDER COPYLEFT LICENCES ================================================================= ----------------------------------------------------------------- 1.1 heic-to 1.5.2 ----------------------------------------------------------------- Licence : GNU Lesser General Public License v3.0 or later (the package metadata declares the deprecated SPDX id "LGPL-3.0"; the LICENSE text itself says "either version 3 of the License, or (at your option) any later version", which is LGPL-3.0-or-later) Copyright : Hopper Gee and the heic-to contributors Source : https://github.com/hoppergee/heic-to (tag v1.5.2) https://registry.npmjs.org/heic-to/-/heic-to-1.5.2.tgz Licence text : /licenses/LGPL-3.0.txt /licenses/GPL-3.0.txt (the LGPL is written as a set of additional permissions on top of the GPL, so both are included) Used for : decoding HEIC / HEIF images (the "HEIC to JPG" and "HEIC to PNG" tools, and any tool given a HEIC input). Upstream components inside it: * libheif 1.22.2 — LGPL-3.0-or-later — https://github.com/strukturag/libheif This is the actual origin of the LGPL obligation. libheif's own COPYING states that the library is under the LGPL, while its sample applications and Go/C++ wrappers are MIT. We use the library. * libde265 1.0.16 — HEVC decoder — https://github.com/strukturag/libde265 Named in the heic-to build configuration. We have not independently verified libde265's own licence file; do not rely on this line for that. How it is published, and how to replace it: The library is delivered as a single standalone JavaScript module whose file name begins with "heic-to." under /_astro/ (the rest of the name is a content hash that changes whenever the file changes). It is loaded on demand — only when a HEIC file is actually processed — and it is the only place that code exists on this site. It is not merged into, and does not contain, any Breezo application code; it ends with a plain ES module export. That means the library can be replaced without touching anything else: build your own copy of heic-to (modified or not) as an ES module that exports "heicTo", and substitute it for that file. What we do NOT claim: the file we publish is not byte-identical to the file published by the heic-to project. Our bundler minifies it a second time during the build. The source code is unmodified — we change no line of it — but the published bytes are a re-compressed form of the upstream distribution. Whether that re-compressed form satisfies every reading of LGPL-3.0 section 4(d)(0) ("a form suitable for ... relinking") is a question we do not attempt to answer here. ----------------------------------------------------------------- 1.2 mediabunny 1.53.0 ----------------------------------------------------------------- Licence : Mozilla Public License 2.0 Copyright : Vanilagy and the mediabunny contributors Source : https://github.com/Vanilagy/mediabunny https://registry.npmjs.org/mediabunny/-/mediabunny-1.53.0.tgz Licence text : /licenses/MPL-2.0.txt Used for : reading and writing video containers, so that already-encoded video can be moved from one container to another without being re-encoded (the video tools). How it is published: Delivered as its own standalone JavaScript module under /_astro/, loaded on demand, containing no Breezo application code. We do not modify its source files. The MPL is a file-level copyleft licence: the source of the files covered by it is available at the URLs above, in the form the project publishes them. ================================================================= 2. COMPONENTS UNDER PERMISSIVE LICENCES ================================================================= ----------------------------------------------------------------- 2.1 SheetJS Community Edition 0.20.3 ----------------------------------------------------------------- Licence : Apache License 2.0 Licence text: /licenses/Apache-2.0.txt Copyright : (C) 2013-present SheetJS LLC — https://sheetjs.com Source : https://cdn.sheetjs.com/xlsx-0.20.3/ File : xlsx.full.min.js, 951,904 bytes SHA-256 : cc015130aa8521e7f088f88898eba949ccdcbfb38df0bd129b44b7273c3a6f41 Used for : reading spreadsheets (XLSX to PDF). Note : shipped byte-for-byte as published by SheetJS; not re-minified. ----------------------------------------------------------------- 2.2 HarfBuzz (subsetting build, via harfbuzzjs) ----------------------------------------------------------------- Licence : the "Old MIT" licence used by HarfBuzz Licence text: /licenses/HarfBuzz.txt Copyright : the HarfBuzz project authors; harfbuzzjs project authors Source : https://github.com/harfbuzz/harfbuzz https://github.com/harfbuzz/harfbuzzjs Artifact : harfbuzz-subset.wasm from harfbuzzjs release v1.6.0 (the identical binary is also published under v1.5.0) 612,552 bytes SHA-256 : e3bf5ad5841bfdcc37878dff5330a13eea071b5860471d9d6515e31506e4ff96 Used for : cutting embedded fonts down to the characters a document actually uses, when converting Office documents to PDF. Note : shipped byte-for-byte as published by harfbuzzjs. ----------------------------------------------------------------- 2.3 PDF.js (pdfjs-dist 6.2.108) ----------------------------------------------------------------- Licence : Apache License 2.0 Licence text: /licenses/Apache-2.0.txt Copyright : Mozilla Foundation and the PDF.js contributors Source : https://github.com/mozilla/pdf.js Used for : rendering PDF pages to images (PDF to JPG / PDF to PNG). ----------------------------------------------------------------- 2.4 pdf-lib 1.17.1 ----------------------------------------------------------------- Licence : MIT Copyright (c) 2019 Andrew Dillon Source : https://github.com/Hopding/pdf-lib Used for : creating and editing PDF files (merge, split, rotate, page numbers, images to PDF, Office to PDF). Contains : pako 1.0.11 — Copyright (C) 2014-2017 by Vitaly Puzrin and Andrei Tuputcyn. The LICENSE file shipped with pako is the MIT licence; its npm metadata declares "(MIT AND Zlib)". https://github.com/nodeca/pako ----------------------------------------------------------------- 2.5 @cantoo/pdf-lib 2.8.1 ----------------------------------------------------------------- Licence : MIT Copyright (c) 2019 Andrew Dillon Source : https://github.com/cantoo-scribe/pdf-lib (fork of https://github.com/Hopding/pdf-lib) Used for : decrypting password-protected PDFs (Remove PDF password), and reading restricted PDFs so the other PDF tools do not silently produce blank pages. Loaded on demand: it is only fetched when a file turns out to be encrypted. Contains : crypto-js 4.2.0 - Copyright (c) 2009-2013 Jeff Mott, Copyright (c) 2013-2016 Evan Vosberg. MIT licence. https://github.com/brix/crypto-js ----------------------------------------------------------------- 2.6 @pdf-lib/fontkit 1.1.1 ----------------------------------------------------------------- Licence : MIT Copyright : Devon Govett and the fontkit contributors; fork maintained by Andrew Dillon Source : https://github.com/Hopding/fontkit (fork of https://github.com/foliojs/fontkit) Used for : embedding fonts into generated PDFs. ----------------------------------------------------------------- 2.7 fflate 0.8.3 ----------------------------------------------------------------- Licence : MIT Copyright (c) 2026 Arjun Barrett Source : https://github.com/101arrowz/fflate Used for : reading and creating ZIP archives. ----------------------------------------------------------------- 2.8 qrcode 1.5.4 ----------------------------------------------------------------- Licence : MIT Copyright (c) 2012 Ryan Day Source : https://github.com/soldair/node-qrcode Used for : the QR code generator. ----------------------------------------------------------------- 2.9 jsQR 1.4.0 ----------------------------------------------------------------- Licence : Apache License 2.0 Licence text: /licenses/Apache-2.0.txt Copyright : Cosmo Wolfe and contributors Source : https://github.com/cozmo/jsQR Used for : reading QR codes on the Scan QR Code page — examining the pixels of an image you choose, or of a camera frame, entirely inside your browser tab. Note: until 2026-08-24 this package was listed in section 3 below, marked "test fixtures only". That was accurate then and is not accurate now — the scan page loads it as part of the published site. It was moved here rather than left in place, because section 3 exists to state what does NOT reach you, and a wrong entry there is worse than no entry at all. ----------------------------------------------------------------- 2.10 jSquash — @jsquash/jpeg 1.6.0, @jsquash/png 3.1.1, @jsquash/webp 1.5.0, @jsquash/oxipng 2.3.0, @jsquash/resize 2.1.1 ----------------------------------------------------------------- Licence : Apache License 2.0 Licence text: /licenses/Apache-2.0.txt Copyright : Jamie Sinclair and contributors; derived from Google's Squoosh Source : https://github.com/jamsinclair/jSquash https://github.com/GoogleChromeLabs/squoosh Used for : encoding and decoding JPEG, PNG and WebP, lossless PNG optimisation, and image resizing. These packages ship WebAssembly builds of upstream C / C++ / Rust codecs, which carry their own licences: MozJPEG (mozjpeg_enc.wasm, mozjpeg_dec.wasm) libwebp (webp_enc.wasm, webp_enc_simd.wasm, webp_dec.wasm) oxipng (squoosh_oxipng_bg.wasm) libpng / zlib (squoosh_png_bg.wasm) hqx and a magic-kernel resizer (squooshhqx_bg.wasm, squoosh_resize_bg.wasm, jsquash_magic_kernel_bg.wasm) We have not individually verified each upstream codec's own licence file in this review; the licence stated above is the one declared by the jSquash packages that publish these binaries. This is an open item, recorded here rather than glossed over. ----------------------------------------------------------------- 2.10 wasm-feature-detect 1.8.0 ----------------------------------------------------------------- Licence : Apache License 2.0 Licence text: /licenses/Apache-2.0.txt Copyright : Google LLC / GoogleChromeLabs Source : https://github.com/GoogleChromeLabs/wasm-feature-detect Used for : checking whether your browser supports WebAssembly SIMD and threads, so the fastest available codec build can be chosen. ----------------------------------------------------------------- 2.11 Astro 7.2.0 ----------------------------------------------------------------- Licence : MIT Copyright (c) 2021 Fred K. Schott Source : https://github.com/withastro/astro Used for : building this site. Astro is primarily a build-time tool, but it emits small runtime helper modules (a module preload helper and a bundler runtime shim) that are part of the published site. ================================================================= 3. COMPONENTS THAT ARE **NOT** DELIVERED TO YOUR BROWSER ================================================================= These are used only on the machine that builds the site. They are listed for completeness, because some of them carry copyleft licences and their absence from the published files is the reason they are not covered above. We checked the published output for each of them and found no trace. sharp / libvips (LGPL-3.0-or-later) — build-time image optimisation lightningcss (MPL-2.0) — build-time CSS transformation esbuild, TypeScript, Playwright, Wrangler — build and test tooling jsQR used to be on this list, described as "test fixtures only". Since 2026-08-24 it is delivered to your browser on the Scan QR Code page, so it has moved up to section 2.9. ================================================================= 4. WHAT THIS SITE ITSELF DOES NOT DO ================================================================= None of the components above send your files anywhere. Every one of them runs inside your browser tab, on your own machine. That is described, and can be verified by you, at https://breezofile.com/privacy ================================================================= 5. CORRECTIONS ================================================================= If something on this page is wrong, incomplete, or out of date, please write to hello@breezofile.com and it will be corrected here rather than only answered privately.