FOURAPI / LEGAL INFORMATION
Third-party software & notices
Preserved licence texts and clear limits on our ownership claims.
Updated 1 November 2026
Independent components
FourAPI combines FourPoint-specific code with third-party software. The currently pinned Python requirements are pypdf 6.21.4, ReportLab 4.4.9, Pillow 13.0.0 and charset-normalizer 3.5.2. Their primary licences are BSD-3-Clause, BSD-style, MIT-CMU-style and MIT respectively; the actual licence texts and copyright notices control.
Pillow wheels can include additional native libraries, each with its own terms. The preserved API notices include those components and FreeType attribution under the selected FreeType Project License option. The bundled DejaVu fonts retain their font licence. The portal’s Montserrat font uses the SIL Open Font License 1.1. None of these components becomes FourPoint-owned by inclusion.
The portal vendors the unmodified Supabase JavaScript SDK 2.118.0. Its MIT and 0BSD dependency notices, source provenance and distribution hash are preserved with the shipped files. Inclusion does not transfer ownership to FourPoint.
Read the full notices
Unmodified reference notice bundles are provided below. They describe the reviewed dependency inventory, not a guarantee that every listed component is present or used in every deployment. The parent FourPoint website inventory is broader than the standalone portal. A final container/software inventory must match the shipped service.
Fonts and release evidence
The reference ReportLab notice bundle includes notices for optional fonts shipped by its distribution, including DarkGarden GPL font notices. The engine is not designed to use that font; the prepared Docker recipe removes unused fonts. The Docker image has not yet been built and audited to confirm the final shipped contents, so these pages do not certify an entirely permissive production image.
The wider FourPoint website audit still records original licence-text evidence gaps for four packages: client-only 0.0.1, server-only 0.0.1, eastasianwidth 0.2.0 and tr46 0.0.3. Their manifests declare MIT, but that is not a recovered original copyright notice. This is a parent-site evidence issue, not a claim that all four are included in the standalone portal.
Required notices must be preserved when distributing components. General FourAPI terms do not override third-party licence permissions or obligations. New dependencies, fonts, browser libraries and container packages require review before release.