# Licenses, provenance and installation notes

The root MIT license covers OpenGlyph's new LaTeX/Python code and documentation.
Maintainer: Zejia FAN. Original copyright and attribution are retained; the
maintainer is not represented as the original author of third-party glyphs.

## GlyphWiki data and derived fonts

Source: <https://glyphwiki.org/dump.tar.gz>, <https://glyphwiki.org/>.
Original grant: `source/licenses/GlyphWiki.txt`, retained verbatim, with the
upstream explanatory README in the same directory.

This grant permits use, copying and distribution, with or without modification,
for commercial or non-commercial purposes, without warranty. We preserve this
grant for the data and generated fonts; we do not replace it with MIT or OFL.

Covered files include:

- `source/data/glyphwiki-ebag.kage.jsonl.gz`: 22,583 unversioned `ebag_s` master
  entries and exact dependencies, 38,462 programs in all;
- `fonts/OpenGlyphEbag.otf`: newly compiled vector OTF, not a repackaged SEAL
  font; `source/data/ebag-manifest.json` records glyph IDs and font metadata;
- the derived built-in glyph mapping, addresses, offline index data, and the
  glyph designs/font/program outputs in `doc/examples/myglyphs/`;
- `source/data/provenance.json`: original snapshot and engine hashes. Its
  `data_license` and `engine_license` paths are relative to `source/` here.

The built-in font bytes and PUA addresses are unchanged from upstream 0.2.0.
Credit belongs to GlyphWiki and its contributors, including the `ebag_s`
contributors. OpenGlyph does not claim original authorship of these designs
or verification of their historical readings.

No local SEAL fonts, local PNG collections, unverified local IDS annotations,
private publications or scanned pages are distributed.

## KAGE rendering engine

Source: <https://github.com/kamichikoichi/kage-engine>.
License: GPL v3; retained in `source/vendor/kage-engine/COPYING`.

All eight vendored JavaScript source files are unmodified, with hashes recorded
in `source/data/provenance.json`. The upstream filename `2d.js` is deliberately
retained so the source and hashes remain identical. It lives only in the
optional builder source, not in the TeX runtime namespace.

The builder invokes the engine in a Node subprocess; it is not run by LaTeX.
Redistributors must keep the applicable GPL notices and corresponding source.
This process boundary is not a general conclusion about derivative-work law.
The engine is not represented as MIT licensed.

## Dependencies installed separately

FontTools and skia-pathops are Python build dependencies; their binaries are
not bundled. Node.js is also not bundled. TeX engines, fontspec, iftex, xparse,
ctex, Fandol and the documentation's standard LaTeX packages come from the
user's TeX distribution, with their own licenses.

## CTAN preparation

The base is OpenGlyph-LaTeX v0.2.0, commit
`824fa2d3d8b0d5d23e9b74462522e6c3ef835627`. Candidate 0.2.1 adds TEXMF-aware
loading and documentation/packaging changes without altering the built-in
glyph drawings. See `CHANGELOG.md` and `AI-ASSISTANCE.md`.