# Credits

Everything under `vendor/` is unmodified upstream code, kept here so the
lab runs offline against a pinned copy of the real library rather than
against whatever a CDN is serving today. This file is the inventory.

**Generated by `scripts/credits.py`. Do not edit by hand.** Licences are
read from the registry per pinned version, not assumed. Re-run the script
after changing `scripts/vendor.sh`.

80 vendored items across 12 licences.

## Read this first

Most of `vendor/` is permissively licensed and needs nothing but the
attribution below. These are the exceptions, and they are the ones
that constrain what this project may do:

- **react-bits** (5 files) — MIT + Commons Clause. Source-available, not open source. Commons Clause removes the right to sell the software. Hosting a study is not selling it.
- **gsap** (3.15.0) — Standard 'no charge' license: https://gsap.com/standard-license. Proprietary. GreenSock's standard licence permits use on a site that does not charge for access, which is what this lab is, but it is not an open-source licence and it does not permit redistributing the source as part of a toolkit.
- **aceternity** (3 files) — unstated (source-available). NO LICENCE IS STATED by upstream. The files are published for copying and the registry serves them for that purpose, but nothing grants any rights in writing.

## By licence

### MIT (54)

- **7.css** 0.16.0 — <https://khang-nd.github.io/7.css>
- **98.css** 0.1.20 — <https://github.com/jdan/98.css>
- **@arwes/animator** 1.0.0-next.25020502 — <https://arwes.dev>
- **@arwes/bgs** 1.0.0-next.25020502 — <https://arwes.dev>
- **@arwes/bleeps** 1.0.0-next.25020502 — <https://arwes.dev>
- **@arwes/frames** 1.0.0-next.25020502 — <https://arwes.dev>
- **@babel/standalone** 7.28.4 — <https://babel.dev/docs/en/next/babel-standalone>
- **@picocss/pico** 2.1.1 — <https://picocss.com>
- **@sakun/system.css** 0.1.11 — <https://github.com/sakofchit/system.css>
- **@tailwindcss/browser** 4.1.13 — <https://tailwindcss.com>
- **@webtui/css** 0.1.10
- **@xterm/xterm** 5.5.0 — <https://github.com/xtermjs/xterm.js#readme>
- **animejs** 4.5.0 — <https://animejs.com>
- **ansi_up** 6.0.2 — <https://github.com/drudru/ansi_up#readme>
- **canvas-gauges** 2.1.7 — <https://github.com/Mikhus/canvas-gauges#readme>
- **clsx** 2.1.1 — <https://github.com/lukeed/clsx#readme>
- **crt-fx** 1.0.0 — <https://github.com/stefanlegg/crt-fx#readme>
- **cybercore-css** 0.3.0 — <https://sebyx07.github.io/cybercore-css>
- **dom-accessibility-api** 0.7.1 — <https://github.com/eps1lon/dom-accessibility-api#readme>
- **focus-trap** 8.2.2 — <https://github.com/focus-trap/focus-trap#readme>
- **framer-motion** 11.18.2 — <https://github.com/motiondivision/motion#readme>
- **glitch-canvas** 1.1.12 — <https://github.com/snorpey/glitch-canvas#readme>
- **glitched-writer** 2.0.29 — <https://glitched-writer.site/>
- **hotkeys-js** 4.0.7 — <https://jaywcjlove.github.io/hotkeys-js>
- **interactjs** 1.10.28 — <https://interactjs.io>
- **jquery** 3.7.1 — <https://jquery.com/>
  Fetched from code.jquery.com.
- **jquery.terminal** 2.44.1 — <https://terminal.jcubic.pl>
- **latex.css** 1.14.0 — <https://latex.vercel.app>
- **lcars.css** main@2026-08 — <https://github.com/joernweissenborn/lcars>
  Vendored from raw.githubusercontent at branch main, so it is pinned to a fetch date rather than a version.
- **litegraph.js** 0.7.18 — <https://github.com/jagenjo/litegraph.js#readme>
- **magicui** 3 files — <https://magicui.design/>
  Copy-paste React components, taken from upstream's own distribution point unmodified.
- **mos6502** 1.1.1 — <https://github.com/kgtrey1/mos6502#readme>
- **motion** 13.1.1 — <https://github.com/motiondivision/motion#readme>
- **motion-primitives** 3 files — <https://motion-primitives.com/>
  Copy-paste React components, taken from upstream's own distribution point unmodified.
- **nes.css** 2.3.0 — <https://github.com/nostalgic-css/NES.css#readme>
- **nexusui** 2.1.5 — <https://nexus-js.github.io/ui>
- **pagedjs** 0.4.3 — <https://pagedmedia.org>
- **react** 18.3.1 — <https://reactjs.org/>
- **react-dom** 18.3.1 — <https://reactjs.org/>
- **simple.css** 0.1.3 — <https://github.com/lofreer/simple-css#readme>
- **split.js** 1.6.5 — <https://split.js.org/>
- **splitting** 1.1.0 — <https://splitting.js.org>
- **tabbable** 6.5.0 — <https://github.com/focus-trap/tabbable#readme>
- **tabulator-tables** 6.5.2 — <https://tabulator.info/>
- **tailwind-merge** 2.6.0 — <https://github.com/dcastil/tailwind-merge>
- **terminal.css** 0.7.5 — <https://terminalcss.xyz>
- **three** 0.185.1 — <https://threejs.org/>
- **tone** 15.1.22 — <https://github.com/Tonejs/Tone.js#readme>
- **tufte-css** 1.9.0 — <https://edwardtufte.github.io/tufte-css/>
- **tuicss** 2.1.2 — <https://github.com/vinibiavatti1/TuiCss#readme>
- **uplot** 1.6.32 — <https://github.com/leeoniya/uPlot#readme>
- **water.css** 2.1.1 — <https://github.com/kognise/water.css>
- **xp.css** 0.2.6 — <https://botoxparty.github.io/XP.css/>
- **zzfx** 1.3.2 — <https://github.com/KilledByAPixel/ZzFX#readme>

### OFL-1.1 (11)

- **@fontsource-variable/recursive** 5.3.0 — <https://fontsource.org/fonts/recursive>
- **@fontsource/dotgothic16** 5.3.0 — <https://fontsource.org/fonts/dotgothic16>
  DotGothic16. 29 of 123 upstream subsets, 155 kB.
- **@fontsource/ibm-plex-mono** 5.3.0 — <https://fontsource.org/fonts/ibm-plex-mono>
- **@fontsource/ibm-plex-sans** 5.3.0 — <https://fontsource.org/fonts/ibm-plex-sans>
- **@fontsource/noto-sans-arabic** 5.3.0 — <https://fontsource.org/fonts/noto-sans-arabic>
- **@fontsource/noto-sans-kr** 5.3.0 — <https://fontsource.org/fonts/noto-sans-kr>
  Noto Sans KR. 7 of 124 upstream subsets, 64 kB.
- **@fontsource/noto-sans-thai** 5.3.0 — <https://fontsource.org/fonts/noto-sans-thai>
  Noto Sans Thai. 2 of 3 upstream subsets, 19 kB.
- **@fontsource/press-start-2p** 5.2.5 — <https://fontsource.org/fonts/press-start-2p>
- **@fontsource/rampart-one** 5.3.0 — <https://fontsource.org/fonts/rampart-one>
  Rampart One. 20 of 123 upstream subsets, 277 kB.
- **@fontsource/reggae-one** 5.3.0 — <https://fontsource.org/fonts/reggae-one>
  Reggae One. 20 of 123 upstream subsets, 148 kB.
- **@fontsource/stick** 5.3.0 — <https://fontsource.org/fonts/stick>
  Stick. 29 of 123 upstream subsets, 228 kB.

### Apache-2.0 (4)

- **@paper-design/shaders** 0.0.80
- **asciinema-player** 3.8.1 — <https://github.com/asciinema/asciinema-player>
- **cyberpunk2077-hacking-solver** da7af2a — <https://github.com/cxcorp/cyberpunk2077-hacking-solver>
  Four TypeScript files pinned to a commit, not a release. Upstream LICENSE is kept at vendor/solver/LICENSE.
- **winbox** 0.2.82 — <https://nextapps-de.github.io/winbox/>

### BSD-3-Clause (2)

- **maplibre-gl** 5.6.1 — <https://maplibre.org/>
- **wavesurfer.js** 7.12.11 — <https://wavesurfer.xyz>

### ISC (2)

- **topojson-client** 3.1.0 — <https://github.com/topojson/topojson-client>
- **world-atlas** 2.0.2 — <https://github.com/topojson/world-atlas#readme>

### BSD-2-Clause (1)

- **augmented-ui** 2.0.0 — <http://augmented-ui.com>

### MIT + Commons Clause (1)

- **react-bits** 5 files — <https://reactbits.dev/>
  Copy-paste React components, taken from upstream's own distribution point unmodified.

### MPL-2.0 (1)

- **axe-core** 4.10.2 — <https://www.deque.com/axe/>

### Standard 'no charge' license: https://gsap.com/standard-license. (1)

- **gsap** 3.15.0 — <https://gsap.com>

### Unlicense (1)

- **ogl** 1.0.11 — <https://github.com/oframe/ogl#readme>

### bsd (1)

- **glsl-ntsc-video** 2.0.2

### unstated (source-available) (1)

- **aceternity** 3 files — <https://ui.aceternity.com/>
  Copy-paste React components, taken from upstream's own distribution point unmodified.

## The lab's own code

Everything outside `vendor/` is MIT, see LICENSE. That covers `lab/`,
`examples/`, `scripts/`, the tool pages and the written survey.

## Licence texts

`vendor/licenses/` holds each package's own LICENSE file, fetched from
the pinned version. MIT, BSD and ISC all require the copyright notice to
travel with the code, and publishing a site distributes it, so an SPDX id
in a table is not enough on its own. 62 of 67 packages
publish a licence file that could be fetched this way.

Publishing no licence file at their pinned version, so the SPDX id
above and the notice in the vendored file header are all there is:

- @webtui/css
- gsap
- nexusui
- ogl
- simple.css