Open-source notices

Licenses, clearly documented.

AGPL-3.0Third-party inventory

OpenReader is AGPL-3.0. This file records the top-level third-party components OpenReader directly depends on, bundles, vendors, or downloads at runtime.

This is a launch compliance inventory, not legal advice. Transitive dependency notices remain governed by each package manager lockfile and each package's own metadata.

Scope

Included here:

Runtime JavaScript/TypeScript dependencies declared in workspace package.json files.
Runtime Python backend dependencies declared in apps/desktop/pyproject.toml.
Runtime Rust/Tauri dependencies declared in apps/desktop/src-tauri/Cargo.toml.
Vendored browser/runtime assets copied into app builds.
Hugging Face model weights OpenReader can download through the model manager.

Excluded here:

Test-only and lint/build-only tools unless they ship in a release artifact.
Full transitive dependency trees.
User-provided documents, RSS feeds, OPDS catalogs, and voice reference clips.

Vendored and downloaded runtime assets

Component	Version / repo	License status	Source
pdfjs-dist	6.2.108	Apache-2.0	github.com/mozilla/pdf.js
Fraunces font	via `@fontsource-variable/fraunces`	OFL-1.1	github.com/undercasetype/Fraunces
Geist font	via `@fontsource/geist` / `next/font`	OFL-1.1	github.com/vercel/geist-font
Apple system voices	macOS system component	Apple platform component, not redistributed by OpenReader	macOS
Kokoro model weights	`mlx-community/Kokoro-82M-bf16`	Apache-2.0 per the pinned upstream model card	huggingface.co/mlx-community/Kokoro-82M-bf16
Qwen3 TTS model weights	`mlx-community/Qwen3-TTS-12Hz-1.7B-CustomVoice-4bit`	Apache-2.0 per the upstream model card	huggingface.co/mlx-community/Qwen3-TTS-12Hz-1.7B-CustomVoice-4bit
Qwen3 forced aligner	`mlx-community/Qwen3-ForcedAligner-0.6B-8bit`	Apache-2.0 per the upstream model card	huggingface.co/mlx-community/Qwen3-ForcedAligner-0.6B-8bit
Voxtral model weights	`mlx-community/Voxtral-4B-TTS-2603-mlx-4bit`	CC-BY-NC-4.0 is currently declared upstream; excluded from the Mac App Store build pending legal clearance	huggingface.co/mlx-community/Voxtral-4B-TTS-2603-mlx-4bit
Higgs Audio v2 model weights	`mlx-community/higgs-audio-v2-3B-mlx-q6`	Apache-2.0 is declared by the conversion, but the required tokenizer has separate terms; excluded from the Mac App Store build pending legal clearance	huggingface.co/mlx-community/higgs-audio-v2-3B-mlx-q6
Higgs Audio v2 tokenizer	`mlx-community/higgs-audio-v2-tokenizer`	Derived from Boson Higgs Audio 2 tokenizer materials governed by the Boson community license; legal review required	huggingface.co/bosonai/higgs-audio-v2-tokenizer/blob/main/LICENSE
spaCy English model	`en_core_web_sm` 3.8.0	MIT	github.com/explosion/spacy-models

Model weights are downloaded to the user's Hugging Face cache on demand. They are not bundled into the macOS app. Any public pre-generated catalog audio should also track source-content licenses separately in each catalog manifest.

JavaScript / TypeScript runtime dependencies

Package	Declared version	License	Source
react	19.2.8	MIT	github.com/facebook/react
react-dom	19.2.8	MIT	github.com/facebook/react
next	16.2.12	MIT	github.com/vercel/next.js
vite	^8.1.5	MIT	github.com/vitejs/vite
@vitejs/plugin-react	^6.0.4	MIT	github.com/vitejs/vite-plugin-react
@tailwindcss/vite	^4.3.3	MIT	github.com/tailwindlabs/tailwindcss
tailwindcss	^4.3.3	MIT	github.com/tailwindlabs/tailwindcss
tw-animate-css	^1.4.0	MIT	github.com/Wombosvideo/tw-animate-css
zustand	^5.0.14	MIT	github.com/pmndrs/zustand
@mozilla/readability	^0.6.0	Apache-2.0	github.com/mozilla/readability
dompurify	^3.4.12	Apache-2.0 OR MPL-2.0	github.com/cure53/DOMPurify
sonner	^2.0.7	MIT	github.com/emilkowalski/sonner
framer-motion	^12.43.0	MIT	github.com/framer/motion
@radix-ui/react-dialog	^1.1.23	MIT	github.com/radix-ui/primitives
@radix-ui/react-dropdown-menu	^2.1.24	MIT	github.com/radix-ui/primitives
@radix-ui/react-popover	^1.1.23	MIT	github.com/radix-ui/primitives
@radix-ui/react-slider	^1.4.7	MIT	github.com/radix-ui/primitives
@radix-ui/react-slot	^1.3.3	MIT	github.com/radix-ui/primitives
@radix-ui/react-tabs	^1.1.21	MIT	github.com/radix-ui/primitives
radix-ui	^1.6.7	MIT	github.com/radix-ui/primitives
lucide-react	^1.27.0	ISC	github.com/lucide-icons/lucide
class-variance-authority	^0.7.1	Apache-2.0	github.com/joe-bell/cva
clsx	^2.1.1	MIT	github.com/lukeed/clsx
tailwind-merge	^3.6.0	MIT	github.com/dcastil/tailwind-merge
fflate	^0.8.3	MIT	github.com/101arrowz/fflate
foliate-js	1.0.1	MIT	github.com/johnfactotum/foliate-js
pdfjs-dist	^6.2.108	Apache-2.0	github.com/mozilla/pdf.js
@fontsource-variable/fraunces	^5.3.0	OFL-1.1	github.com/fontsource/fontsource
@fontsource/geist	^5.3.0	OFL-1.1	github.com/fontsource/fontsource
@tauri-apps/api	^2.11.1	Apache-2.0 OR MIT	github.com/tauri-apps/tauri
@tauri-apps/plugin-dialog	^2.7.2	Apache-2.0 OR MIT	github.com/tauri-apps/plugins-workspace
@tauri-apps/plugin-fs	^2.5.1	Apache-2.0 OR MIT	github.com/tauri-apps/plugins-workspace
@tauri-apps/plugin-shell	^2.3.5	Apache-2.0 OR MIT	github.com/tauri-apps/plugins-workspace

Python desktop backend dependencies

Package	Declared version	License	Source
fastapi	>=0.140.13	MIT	github.com/fastapi/fastapi
uvicorn[standard]	>=0.51	BSD-3-Clause	github.com/encode/uvicorn
pydantic	>=2.13.4	MIT	github.com/pydantic/pydantic
numpy	>=1.26,<2.0	BSD-3-Clause	github.com/numpy/numpy
soundfile	>=0.14	BSD-3-Clause	github.com/bastibe/python-soundfile
python-multipart	>=0.0.32	Apache-2.0	github.com/Kludex/python-multipart
huggingface-hub	>=1.25.1,<2.0	Apache-2.0	github.com/huggingface/huggingface_hub
tqdm	>=4.70	MIT AND MPL-2.0	github.com/tqdm/tqdm
typing-extensions	>=4.16	PSF-2.0	github.com/python/typing_extensions
feedparser	>=6.0.13	BSD-2-Clause	github.com/kurtmckee/feedparser
trafilatura	>=2.1	Apache-2.0	github.com/adbar/trafilatura
beautifulsoup4	>=4.15	MIT	www.crummy.com/software/BeautifulSoup
aiosqlite	>=0.22.1	MIT	github.com/omnilib/aiosqlite
httpx	>=0.28.1	BSD-3-Clause	github.com/encode/httpx
mlx-audio[tts]	>=0.4.6	MIT	github.com/Blaizzy/mlx-audio
mlx	>=0.32.0	MIT	github.com/ml-explore/mlx
mlx-lm	>=0.31.3	MIT	github.com/ml-explore/mlx-lm
transformers	>=5.12.1,<5.13	Apache-2.0	github.com/huggingface/transformers
mistral-common	>=1.11.7,<2.0	Apache-2.0	github.com/mistralai/mistral-common
misaki[en,ja,ko,zh]	>=0.9.4	Apache-2.0	github.com/hexgrad/misaki
phonemizer-fork	>=3.3.2	GPL-3.0-or-later	pypi.org/project/phonemizer-fork
num2words	>=0.5.14	LGPL	github.com/savoirfairelinux/num2words
espeakng-loader	>=0.2.4	Loader metadata has no declared license; its bundled eSpeak NG library and data are GPL-3.0-or-later	pypi.org/project/espeakng-loader
setuptools	<81	MIT	github.com/pypa/setuptools
typer	>=0.27	MIT	github.com/fastapi/typer
en_core_web_sm	3.8.0	MIT	github.com/explosion/spacy-models

Rust / Tauri runtime dependencies

Crate	Declared version	License	Source
tauri	2.11.5	Apache-2.0 OR MIT	github.com/tauri-apps/tauri
tauri-build	2.6.3	Apache-2.0 OR MIT	github.com/tauri-apps/tauri
tauri-plugin-shell	2.3.5	Apache-2.0 OR MIT	github.com/tauri-apps/plugins-workspace
tauri-plugin-dialog	2.7.2	Apache-2.0 OR MIT	github.com/tauri-apps/plugins-workspace
tauri-plugin-fs	2.5.1	Apache-2.0 OR MIT	github.com/tauri-apps/plugins-workspace
serde	1.0.229	Apache-2.0 OR MIT	github.com/serde-rs/serde
serde_json	1.0.151	Apache-2.0 OR MIT	github.com/serde-rs/json
tokio	1.53.1	MIT	github.com/tokio-rs/tokio
reqwest	0.13.4	Apache-2.0 OR MIT	github.com/seanmonstar/reqwest
zip	=2.4.2	MIT	github.com/zip-rs/zip2
objc2	0.6.4	MIT	github.com/madsmtm/objc2
objc2-foundation	0.3.2	MIT	github.com/madsmtm/objc2

Mac App Store distribution notes

The release bundle includes this file, LICENSE, and LICENSING.md under Contents/SharedSupport. Before submission, the following questions require qualified legal approval; a technical test cannot resolve them:

Confirm that distributing phonemizer-fork and the bundled GPL-3.0-or-later eSpeak NG library/data through Apple’s standard Mac App Store terms satisfies all corresponding-source, notice, and downstream-license obligations.
Keep Voxtral disabled in the Mac App Store edition unless counsel or the licensor confirms the intended distribution is permitted by its noncommercial terms.
Keep Higgs voice cloning disabled in the Mac App Store edition until the Boson tokenizer license, attribution language, commercial thresholds, acceptable-use policy, and voice-consent flow are approved.
Generate and review the complete transitive notice/SBOM inventory for the final frozen backend, including native libraries, rather than relying only on this top-level list.

See docs/app-store-legal-review.md for the submission-specific decision record.