Third-Party Licenses

PageFlow is built on open-source software. All dependencies below use permissive licenses (MIT or Apache-2.0) that allow commercial use without requiring PageFlow's own source code to be published. No AGPL-licensed dependency is used anywhere in this project.

Package	License	Used for
Astro	MIT	Static site generation, routing, and content collections for every marketing and tool page.
@astrojs/react	MIT	Hydrates the interactive PDF Workspace as a React island.
@astrojs/sitemap	MIT	Generates the sitemap used for search engine indexing.
React / React DOM	MIT	Powers the interactive Workspace UI.
Zustand	MIT	Lightweight state management for the Workspace (page order, history, operations).
Zod	MIT	Runtime validation for page-range input, passwords, and uploaded file checks.
pdf.js (pdfjs-dist)	Apache-2.0	Renders PDF pages to canvas, extracts text for search, and detects scanned pages.
@cantoo/pdf-lib	MIT	Reads and writes PDF documents: merging, page operations, watermarks, page numbers, and password protection/removal. See note below.
Tesseract.js	Apache-2.0	Local, in-browser OCR for the OCR PDF tool.

A note on PDF encryption

The original technical brief for this project suggested a dedicated QPDF WebAssembly build for password protection and removal. After review, PageFlow instead uses @cantoo/pdf-lib, an actively maintained, MIT-licensed fork of pdf-lib that adds AES/RC4-based PDF encryption and decryption support. This keeps the entire encryption engine — like everything else in PageFlow — running client-side in plain JavaScript, under a clearly permissive license, without adding a separate WASM toolchain for a single feature. It is used the same way across Protect PDF and Unlock PDF.

Full license texts

Full license texts for each dependency are included in its published npm package and are available from the respective project repositories. This page summarizes usage; it is not a substitute for those license documents.