LibraryAttributions
In this page
Identify the major software, fonts, and knowledge sources used by Tuvima Library and its documentation. Dependency manifests and retained license notices provide the exact version and license records.
Where this lives in the code
Directory.Packages.propsTHIRD-PARTY-NOTICES.mdsite/package-lock.jsonsite/LICENSES.md
Tuvima Library is built on open-source software, public knowledge projects, and optional metadata providers. This page is a practical acknowledgement list, not a substitute for each dependency’s license file.
The authoritative package version list is Directory.Packages.props; the project license is AGPLv3.
Core Platform
| Project | Role |
|---|---|
| .NET, ASP.NET Core, Blazor Server | Runtime, API host, and Dashboard framework |
First-party App* components | Dashboard controls maintained in this repository |
| SignalR | Live Engine-to-Dashboard updates |
| SQLite, SQLitePCLRaw, and Microsoft.Data.Sqlite | Local database |
| Dapper | Data access |
| Serilog | Structured logging |
| Polly / Microsoft.Extensions.Http.Resilience | Resilient outbound HTTP calls |
| Swashbuckle | Swagger/OpenAPI UI |
| Cronos | Cron schedule parsing |
| xUnit, bUnit, coverlet | Automated tests |
JUnit 4 and android-json (Apache 2.0, Android’s own org.json) | Android app tests only; not shipped in the apps |
| Astro and Starlight | GitHub Pages documentation site; exact versions and licenses below |
Media Processing
| Project | Role |
|---|---|
| FFmpeg | Media probing, extraction, direct-play inspection, and adaptive HLS generation. Windows installers use the checksum-pinned gyan.dev GPLv3 build recorded in tools/ffmpeg/README.md; its license is shipped with the installer. |
| Xabe.FFmpeg | .NET wrapper around FFmpeg operations |
| TagLibSharp | Audio and video tag reading/writing |
| VersOne.Epub | EPUB metadata and content reading |
| SkiaSharp | Image processing, thumbnailing, and generated artwork support |
| SharpCompress | Archive reading for comic formats such as CBZ/CBR |
| PDF.js | Draws PDFs, page navigation, zoom and find in the View Documents viewer (Apache-2.0). Bundled unmodified under wwwroot/vendor/pdfjs/ and loaded locally, never from a CDN |
| hls.js | Plays adaptive HLS in the Dashboard player and in the TV web client (Apache-2.0). Version 1.7.3, bundled unmodified under src/MediaEngine.Web/wwwroot/vendor/hls/ and clients/tv-web/vendor/ and loaded locally, never from a CDN |
| PdfPig | Reads the embedded text layer of PDFs so View documents are searchable (Apache-2.0) |
| PDFtoImage | Draws PDF pages as images for text recognition (MIT); uses PDFium (BSD-3-Clause) through the bblanchon.PDFium packages |
| Tesseract OCR | Reads scanned pages and photos of paper on the Engine host (Apache-2.0). Windows installers use the checksum-pinned UB Mannheim build recorded in tools/tesseract/README.md; containers install the distribution package |
| tessdata_fast | English and orientation language data for Tesseract (Apache-2.0), pinned to a commit; other languages are an opt-in download |
| ExifTool | Writes the profile name that added a file into the embedded metadata (XMP) of photos, phone videos and PDFs in View, run as a separate program. Copyright Phil Harvey; free software under the same terms as Perl (Perl Artistic License or GNU General Public License, used here under the GPL, which is compatible with AGPLv3). Version 13.59; the Windows build also contains Strawberry Perl, with its licences in Licenses_Strawberry_Perl.zip beside it. The Engine fetches unmodified copies from the Library’s own GitHub release exiftool-13.59; container images clone the official tag from https://github.com/exiftool/exiftool. Details in THIRD-PARTY-NOTICES.md |
| DocumentFormat.OpenXml | Reads text from Word, Excel and PowerPoint files for View document search (MIT) |
| QRCoder | Draws the QR code for invitation links (MIT) |
Book reader
| Component | Use | License |
|---|---|---|
foliate-js (pinned copy in src/MediaEngine.Web/wwwroot/lib/foliate-js/) | In-browser EPUB rendering, pagination and reading positions | MIT |
| zip.js (bundled with foliate-js) | Reading EPUB files by range in the browser | BSD-3-Clause |
The exact version and the files kept are recorded in PINNED.md beside the copy; full notices are in THIRD-PARTY-NOTICES.md and licenses/.
Local AI
| Project | Role |
|---|---|
| LLamaSharp | Local LLM inference through llama.cpp bindings |
| Whisper.net | Local speech-to-text and language detection through whisper.cpp bindings |
| llama.cpp and whisper.cpp ecosystems | Underlying local model execution projects used by the .NET bindings |
Model weights are downloaded separately according to configured model URLs and their own license terms.
Security Data
| Source | Role |
|---|---|
| SecLists (MIT, Daniel Miessler) | Common-password list used by the 12-character password rule. Derived from the NCSC “100k most used passwords” file in SecLists and filtered to 12+ characters; see THIRD-PARTY-NOTICES.md and licenses/SecLists-MIT.txt. |
Public Knowledge and Metadata Sources
| Source | Role |
|---|---|
| Wikidata | Canonical identity, structured facts, bridge identifiers, and relationship data |
| Wikipedia | Human-readable summaries and contextual article content where available |
| Wikimedia Commons | Public media assets such as images when linked through Wikimedia data |
| Tuvima.Wikidata | Tuvima’s .NET integration library for Wikidata/Wikipedia reconciliation and graph behavior |
| MusicBrainz | Music metadata and identifiers |
| TMDB | Movie and TV metadata, identifiers, images, and ratings where configured |
| Apple APIs | Book, audiobook, and music metadata where configured |
| Comic Vine identifiers | Comics metadata and bridge identifiers where configured |
| LRCLIB | Lyrics where configured |
| SubDL | Subtitle lookup where configured |
| OpenSubtitles | Historical source of previously downloaded subtitle tracks; no longer queried |
Some providers require credentials or API keys. Provider trademarks and data remain owned by their respective organizations.
Design and Documentation Assets
Tuvima’s own logos, documentation styling, and product copy are maintained in this repository unless otherwise noted. Documentation screenshots are deferred. The documentation site is built from the tuvima-docs repository and published through GitHub Pages.
| Documentation dependency | Locked version | License |
|---|---|---|
| Astro | 7.3.8 | MIT |
Starlight (@astrojs/starlight) | 0.42.6 | MIT |
| Starlight Sidebar Topics | 0.9.0 | MIT |
| Pagefind | 1.5.2 | MIT |
| Expressive Code | 0.44.2 | MIT |
| Shiki | 4.5.0 | MIT |
| Montserrat | Locally bundled font assets | SIL Open Font License 1.1 |
| JetBrains Mono | Locally bundled font assets | SIL Open Font License 1.1 |
These records cover the shipped documentation stack; no image-zoom plugin is used. See site licenses for retained notices, the package lock for the complete dependency graph, and site maintenance for verification commands.