tosijs-ui
Copyright 2023-2026 Tonio Loewald

This product includes software developed by Tonio Loewald.

Licensed under the Apache License, Version 2.0 (the "License"); you may not
use this file except in compliance with the License. You may obtain a copy
of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
License for the specific language governing permissions and limitations
under the License.

tosijs-ui was licensed under the MIT License through version 1.11.1, and is
Apache-2.0 from 1.12.0 onward. Nothing already released changes licence:
1.11.1 and everything before it remain MIT under the terms they shipped with.

==========================================================================
THIRD-PARTY NOTICES
==========================================================================

`dist/iife.js` inlines its dependencies so a page can use the components from
a single <script> tag. The ESM build does NOT — tosijs and marked are peer
dependencies there, resolved from the consumer's own node_modules — so the
attribution below travels with the iife and with anything built from it.

--------------------------------------------------------------------------
tosijs — https://github.com/tonioloewald/tosijs
Apache-2.0 as of 1.8.0 (BSD-3-Clause through 1.7.x).
Reproduced from the tosijs package's own NOTICE:
--------------------------------------------------------------------------

tosijs
Copyright 2022-2026 Tonio Loewald

This product includes software developed by Tonio Loewald.

Portions of the published bundles (dist/module.js, dist/main.js,
dist/index.js, dist/module.debug.js and dist/module.safe.js) are generated
from tosijs-floorplan (https://github.com/tonioloewald/tosijs-floorplan),
Copyright 2026 Tonio Loewald, licensed under the Apache License, Version 2.0
— vendored at build time so tosijs ships with zero runtime dependencies.

Licensed under the Apache License, Version 2.0 (the "License"); you may not
use this file except in compliance with the License. You may obtain a copy
of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
License for the specific language governing permissions and limitations
under the License.

--------------------------------------------------------------------------
marked — https://github.com/markedjs/marked
MIT. Ships no NOTICE; its copyright and permission notice travel in the
bundle's own header.
--------------------------------------------------------------------------

--------------------------------------------------------------------------
Feather Icons — https://github.com/feathericons/feather
Copyright (c) 2013-2023 Cole Bemis. MIT.
Some icons in `icons/` and the generated `src/icon-data.ts` derive from
Feather. The full permission notice is reproduced in `src/icons.ts` and on
the icons documentation page.
--------------------------------------------------------------------------

--------------------------------------------------------------------------
tosijs-kilpi — https://www.npmjs.com/package/tosijs-kilpi
Apache License 2.0. Bundled into `dist/iife.js` (the sanitizer behind
<tosi-md>). Reproduced from the tosijs-kilpi package's own NOTICE:

kilpi
Copyright 2026 Tonio Loewald

This product includes software developed as part of DOMPurify.

  test/dompurify-fixtures.mjs is vendored verbatim from DOMPurify
  (https://github.com/cure53/DOMPurify), test/fixtures/expect.mjs
  Copyright (c) 2015 Mario Heiderich
  Licensed under (MPL-2.0 OR Apache-2.0); used here under Apache-2.0.

That file is DOMPurify's published XSS payload corpus, used as kilpi's
verification gate. No DOMPurify source code is included or distributed in the
published package — the corpus is a test fixture only, and is not part of the
npm tarball.
--------------------------------------------------------------------------

--------------------------------------------------------------------------
tosijs-schema — https://github.com/tonioloewald/tosijs-schema
MIT. Bundled into `dist/iife.js`, which wires it in as the <tosi-schema-form>
validator for CDN users. The ESM build does not bundle it (it is an optional
peer there).
--------------------------------------------------------------------------

--------------------------------------------------------------------------
CodeMirror — https://codemirror.net/
Copyright (c) by Marijn Haverbeke and others. MIT.
The @codemirror/* and @lezer/* packages are runtime dependencies, bundled
into `dist/iife.js` and into the lazy `dist/code-editor-cm.js` chunk.
--------------------------------------------------------------------------
Prism — https://prismjs.com/
Copyright (c) 2012 Lea Verou. MIT.

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.

prismjs is a runtime dependency. Prism core and 27 grammar modules are
bundled into `dist/iife.js` (which cannot code-split), so the attribution
above travels with the iife and with anything built from it. The ESM build
loads them as lazy chunks instead and inlines nothing.
--------------------------------------------------------------------------