# Third-party licenses

This app is licensed under AGPL-3.0-or-later (`LICENSE-AGPL-3.0-or-later`). The distributed binary statically links third-party Rust crates and bundles font assets. Their terms are recorded here.

## Fonts

DejaVu Sans and DejaVu Sans Mono, version 2.37 (`assets/DejaVuSans.ttf`, `assets/DejaVuSansMono.ttf`). Licensed under the Bitstream Vera and Arev font licenses, with DejaVu's own changes released into the public domain. Full text: `assets/DejaVu-LICENSE`.

## STEP import and export

The STEP reader and writer link the `truck` and `ruststep` crate families, all under Apache-2.0:

- truck: `truck-base`, `truck-geotrait`, `truck-geometry`, `truck-topology`, `truck-polymesh`, `truck-meshalgo`, `truck-modeling`, `truck-derivers`, `truck-stepio`
- ruststep: `ruststep`, `ruststep-derive`

Copyright RICOS Co., Ltd., Yoshinori Tanimura, and Toshiki Teramura.
Source: https://github.com/ricosjp/truck and https://github.com/ricosjp/ruststep. Full text: `assets/LICENSE-Apache-2.0`.

## Dependency graph

Every third-party crate in the resolved dependency graph carries a permissive license that is inbound-compatible with AGPL-3.0-or-later: MIT, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, Zlib, Unicode-3.0, CC0-1.0, and their disjunctions. `deny.toml` pins the allowed set and `just license` enforces it through `cargo deny`. A license outside that set entering the graph fails the check.
