NEWREVIEW
Open-source notices and licenses
newReview is proudly built with open-source software. This page identifies the third-party components distributed with, or loaded by, the application, including how each component is used and why it is included. The applicable upstream licenses and notices govern each component.
Browser-delivered components
| Component | Version | Used for | Why newReview uses it | License | Source and notice |
|---|---|---|---|---|---|
| PDF.js | 6.2.108 | Renders artwork PDFs, reads native text/layers, and supplies canvas pages to review and export tools. | It keeps PDF viewing and page rendering in the browser, including artwork layers needed by the reviewer. | Apache License 2.0 | Mozilla PDF.js |
| Konva | 10.3.2 | Draws, selects, transforms, and edits artwork annotations. | It provides the interactive canvas primitives behind the established annotation tools. | MIT | Konva |
| pdf-lib | 1.17.1 | Creates annotated PDF exports and artwork-scope PDF output. | It applies approved review marks to downloadable PDFs without a server-side PDF editor. | MIT | pdf-lib |
| JSZip | 3.10.1 | Builds route-level multi-file download archives in the browser. | It lets reviewers download the selected route files together without server-side archive generation. | MIT (the project also offers GPL-3.0-or-later) | JSZip |
| PaddleOCR.js (optional) | 0.4.2 | Provides an additional browser OCR observation for difficult CA CRV recognition. | It supplies independent text evidence only when the normal OCR path is insufficient; it does not replace the established evidence rules. | Apache License 2.0 | PaddleOCR |
| ONNX Runtime Web (optional PaddleOCR runtime) | 1.22.0 | Runs PaddleOCR inference models in the browser. | It is the browser execution layer required for the optional PaddleOCR observation. | MIT | ONNX Runtime · third-party notices |
| OpenCV.js (optional) | 4.10.0-release.1 pinned fallback | Supports visual diagnostics and candidate localization in the US Element Identification workbench. | It adds computer-vision diagnostics where they can help review a visual candidate; it does not decode barcodes or create a production finding by itself. | Apache License 2.0 | OpenCV |
Bundled server components
| Component | Version | Used for | Why newReview uses it | License | Source and notice |
|---|---|---|---|---|---|
| ZXing-C++ | 2.3.0 | Decodes QR codes and product barcodes on the server. | It provides the authoritative decoded barcode evidence used by QR validation and applicable Decision Engine checks. | Apache License 2.0 | ZXing-C++ |
| Tesseract OCR | 5.5.0 | Extracts positioned text evidence from rendered artwork pages. | It supports the Mandatory Elements scanner and metadata analysis when reliable OCR evidence is available; OCR absence is never treated as proof of absence. | Apache License 2.0 | Tesseract |
| Leptonica | Bundled runtime dependency | Provides image processing and image-format support to Tesseract. | It is a required Tesseract dependency for preparing artwork raster images for OCR. | BSD 2-Clause | Leptonica |
The complete, unmodified Debian package copyright and license notices for every bundled OCR-runtime dependency are distributed with newReview in bin/ocr-runtime/licenses/. Those package-specific notices remain authoritative. If a deployment vendors a different OpenCV build or enables a different PaddleOCR model, its exact upstream notice must be added before release.
Word list
The bundled SCOWL English word list supports the US Element Identification workbench’s possible OCR spelling-issue review. It is used only to surface review candidates; it does not make a regulatory decision or alter artwork content. Its required attribution and license text are available in the SCOWL word-list notice.
System-provided tools
Some deployments may use a system-installed PDF renderer (Poppler or ImageMagick) to rasterize PDFs for the legacy OCR path; PHP to run the application; and MySQL/MariaDB to store application data. They are deployment prerequisites rather than components redistributed by newReview. The deployment operator must retain and comply with their applicable notices and licenses.