NOTICE

anonde
Copyright 2026 anonde authors

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this product except in compliance with the License.
A copy of the License is included in the LICENSE file or available at:

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.

-------------------------------------------------------------------------------

Third-party attributions
========================

gitleaks (https://github.com/gitleaks/gitleaks)
  The provider credential patterns in analyzer/recognizers/secret.go
  (AWS / GitHub / GitLab / Stripe / Slack / Google / SendGrid / Twilio /
  npm / PyPI / OpenAI / Anthropic key shapes) are derived from gitleaks'
  rule set. gitleaks is distributed under the MIT License:

    MIT License
    Copyright (c) 2019 Zachary Rice

    Permission is hereby granted, free of charge, to any person obtaining a
    copy of this software and associated documentation files (the "Software"),
    to deal in the Software without restriction, including without limitation
    the rights to use, copy, modify, merge, publish, distribute, sublicense,
    and/or sell copies of the Software, and to permit persons to whom the
    Software is furnished to do so, subject to the following conditions:

    The above copyright notice and this permission notice shall be included in
    all copies or substantial portions of the Software.

    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
    FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
    DEALINGS IN THE SOFTWARE.

-------------------------------------------------------------------------------

Redistributed binary artifacts
==============================

The attributions below attach to material the published Docker images
redistribute: statically linked Go dependencies, the bundled ONNX Runtime
shared library, and the baked model weights. The `go get` library path
redistributes no third-party artifacts — a consumer's Go toolchain fetches
each dependency with its own LICENSE — so these apply only to the images.
A full copy of the Apache License 2.0 travels in the LICENSE file. Items
tagged [ner] ship only in the anonde-ner image.

ONNX Runtime — libonnxruntime.so.1 v1.26.0   [ner]
--------------------------------------------------
The anonde-ner image bundles Microsoft ONNX Runtime as a shared object. MIT
requires the permission notice to travel with the binary:

    MIT License

    Copyright (c) Microsoft Corporation

    Permission is hereby granted, free of charge, to any person obtaining a copy
    of this software and associated documentation files (the "Software"), to deal
    in the Software without restriction, including without limitation the rights
    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    copies of the Software, and to permit persons to whom the Software is
    furnished to do so, subject to the following conditions:

    The above copyright notice and this permission notice shall be included in all
    copies or substantial portions of the Software.

    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
    SOFTWARE.

Bundled model weights — Apache-2.0, redistributed unmodified   [ner]
--------------------------------------------------------------------
  - GLiNER PII detector — `knowledgator/gliner-pii-base-v1.0`, © Knowledgator.
  - YOLOS signature detector — `onnx-community/yolos-base-signature-detection-ONNX`.
Both are baked into the image unmodified under the Apache License 2.0 (full
text in LICENSE).

Statically linked Go dependencies — MIT
---------------------------------------
Compiled into the anonde binaries under the MIT License. Copyright holders
retained below; the MIT permission/warranty text is reproduced once thereafter.

  - github.com/beorn7/perks — Copyright (C) 2013 Blake Mizerany
  - github.com/cespare/xxhash/v2 — Copyright (c) 2016 Caleb Spare
  - github.com/go-pdf/fpdf — Copyright (c) 2021 The Go-PDF authors
  - go.etcd.io/bbolt — Copyright (c) 2013 Ben Johnson
  - github.com/dustin/go-humanize — Copyright (c) 2005-2008 Dustin Sallings   [ner]
  - github.com/go-errors/errors — Copyright (c) 2015 Conrad Irwin   [ner]
  - github.com/x448/float16 — Copyright (c) 2019 Montgomery Edwards⁴⁴⁸ and Faye Amacker   [ner]
  - github.com/yalue/onnxruntime_go — Copyright (c) 2023 Nathan Otterness   [ner]

    Permission is hereby granted, free of charge, to any person obtaining a copy
    of this software and associated documentation files (the "Software"), to deal
    in the Software without restriction, including without limitation the rights
    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    copies of the Software, and to permit persons to whom the Software is
    furnished to do so, subject to the following conditions:

    The above copyright notice and this permission notice shall be included in all
    copies or substantial portions of the Software.

    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
    SOFTWARE.

Statically linked Go dependencies — BSD
---------------------------------------
BSD-3-Clause unless noted. Copyright holders retained below; the BSD text is
reproduced once thereafter.

  - github.com/grpc-ecosystem/grpc-gateway/v2 — Copyright (c) 2015, Gengo, Inc.
  - github.com/ledongthuc/pdf — Copyright (c) 2009 The Go Authors
  - github.com/munnerz/goautoneg — Copyright (c) 2011, Open Knowledge Foundation Ltd.
  - google.golang.org/protobuf — Copyright (c) 2018 The Go Authors
  - golang.org/x/net, golang.org/x/sys, golang.org/x/text — Copyright 2009 The Go Authors
  - github.com/gofrs/flock — Copyright (c) 2018-2025, The Gofrs   [ner]
  - github.com/google/uuid — Copyright (c) 2009,2014 Google Inc.   [ner]
  - golang.org/x/crypto, golang.org/x/exp, golang.org/x/image, golang.org/x/sync — Copyright 2009 The Go Authors   [ner]
  - github.com/pkg/errors — Copyright (c) 2015, Dave Cheney — BSD-2-Clause   [ner]

    Redistribution and use in source and binary forms, with or without
    modification, are permitted provided that the following conditions are met:

    1. Redistributions of source code must retain the above copyright notice, this
       list of conditions and the following disclaimer.
    2. Redistributions in binary form must reproduce the above copyright notice,
       this list of conditions and the following disclaimer in the documentation
       and/or other materials provided with the distribution.
    3. (BSD-3-Clause only) Neither the name of the copyright holder nor the names
       of its contributors may be used to endorse or promote products derived
       from this software without specific prior written permission.

    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
    AND ANY EXPRESS OR IMPLIED WARRANTIES ARE DISCLAIMED. IN NO EVENT SHALL THE
    COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
    INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES ARISING IN ANY WAY
    OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
    DAMAGE.

Apache-2.0 dependencies carrying their own NOTICE (Apache-2.0 §4(d))
-------------------------------------------------------------------
Apache-2.0 §4(d) requires carrying the upstream NOTICE contents. Reproduced:

  google.golang.org/grpc

    Copyright 2014 gRPC authors.

  github.com/prometheus/client_golang

    Prometheus instrumentation library for Go applications
    Copyright 2012-2015 The Prometheus Authors

    This product includes software developed at
    SoundCloud Ltd. (http://soundcloud.com/).

    The following components are included in this product:

    perks - a fork of https://github.com/bmizerany/perks
    https://github.com/beorn7/perks
    Copyright 2013-2015 Blake Mizerany, Björn Rabenstein
    See https://github.com/beorn7/perks/blob/master/README.md for license details.

    Go support for Protocol Buffers - Google's data interchange format
    http://github.com/golang/protobuf/
    Copyright 2010 The Go Authors
    See source code for license details.

  github.com/prometheus/common

    Common libraries shared by Prometheus Go components.
    Copyright 2015 The Prometheus Authors

    This product includes software developed at
    SoundCloud Ltd. (http://soundcloud.com/).

  go.yaml.in/yaml/v2

    Copyright 2011-2016 Canonical Ltd.

  github.com/viant/afs   [ner]

    Viant, inc. Abstract File Storage (afs)
    Copyright 2012-2016 Viant

    This product includes software developed at
    Viant (http://viantinc.com/)

MPL-2.0 — github.com/hashicorp/golang-lru/v2 v2.0.7
---------------------------------------------------
Used unmodified under the Mozilla Public License 2.0 (© 2014 HashiCorp, Inc.;
text at https://www.mozilla.org/MPL/2.0/). MPL-2.0 §3.3 is satisfied by the
unmodified, canonically-versioned module source at the `v2.0.7` pin recorded
in go.mod / go.sum.

poppler-utils (GPL-2.0)   [ner]
-------------------------------
The anonde-ner image redistributes Debian's `poppler-utils` binary (pdftoppm)
unmodified. The complete corresponding source is offered via the Debian
bookworm source archive (https://snapshot.debian.org). anonde invokes
pdftoppm as a separate process (exec, not linking), so no copyleft attaches
to anonde's own code.