Elaris Staffing Planner - third-party notices ============================================= This file lists the third-party software that the Staffing Planner sends to your browser. None of it is Elaris-owned. Each component is licensed by its authors under the licence named below, whose full text is in licenses/. The Elaris proprietary notice in NOTICES.txt does not apply to these components, and nothing in it or in the Elaris Terms of Use limits the rights these licences give you. How the software reaches your browser ------------------------------------- Five files under /assets/planner/runtime/pyodide-314.0.7/ are the only third-party software the planner delivers: pyodide.mjs JavaScript loader pyodide.asm.mjs JavaScript runtime (Emscripten output) pyodide.asm.wasm WebAssembly binary: the Python interpreter and the libraries built into it python_stdlib.zip Python standard library and Pyodide's Python packages (source) pyodide-lock.json package metadata These five files are byte-for-byte identical to the files in the npm package pyodide@314.0.7 (https://registry.npmjs.org/pyodide/-/pyodide-314.0.7.tgz). Elaris has not modified them. Verified 2026-09-27: SHA-256 of each file compared with the package, and the package's SHA-512 compared with the registry's published integrity value. The entries below are established from those files and from the upstream build and licence files at the exact versions named. "Evidence" gives the sources for each entry. Where a detail could not be established from them, the entry says so. 1. Pyodide Version: 314.0.7 Copyright: Pyodide contributors (the upstream LICENSE contains no copyright line) Licence: Mozilla Public License 2.0 Full text: licenses/Pyodide-314.0.7-MPL-2.0.txt (the LICENSE file at tag 314.0.7) Distributed: JavaScript and WebAssembly (all five runtime files); Python source of Pyodide's own packages inside python_stdlib.zip Source: https://github.com/pyodide/pyodide/tree/314.0.7 https://registry.npmjs.org/pyodide/-/pyodide-314.0.7.tgz Notes: Distributed unmodified (see above). MPL-2.0 section 3.2 concerns distribution in Executable Form and how recipients can obtain the Source Code Form; the source is at the links above. Evidence: npm package.json ("license": "MPL-2.0", "version": "314.0.7"); upstream LICENSE at tag 314.0.7; file hashes compared with the package. 2. hiwire Version: commit 6a1e67280a15d929ebeceee54a6358c9c8d5f697 Copyright: not stated in the upstream LICENSE file Licence: Mozilla Public License 2.0 Full text: licenses/hiwire-6a1e672-LICENSE.txt Distributed: compiled into pyodide.asm.wasm Source: https://github.com/pyodide/hiwire/tree/6a1e67280a15d929ebeceee54a6358c9c8d5f697 Evidence: Pyodide 314.0.7 cpython/Makefile (HIWIRE_COMMIT) and Makefile.envs (-lhiwire); LICENSE at that commit. 3. stackframe / error-stack-parser (port vendored in Pyodide) Version: the port in Pyodide 314.0.7 src/js/vendor/stackframe/; the upstream release it was ported from is not stated (unresolved, see end) Copyright: Copyright (c) 2017 Eric Wendelin and other contributors Licence: MIT Full text: licenses/stackframe-error-stack-parser-Pyodide-314.0.7-LICENSE.txt Distributed: bundled into pyodide.mjs and pyodide.asm.mjs (JavaScript) Source: https://github.com/pyodide/pyodide/tree/314.0.7/src/js/vendor/stackframe Evidence: ErrorStackParser and StackFrame code in both files; LICENSE in the vendor directory at tag 314.0.7. 4. CPython (the Python interpreter and standard library) Version: 3.14.2 Copyright: Copyright (c) 2001 Python Software Foundation; All Rights Reserved, and the historical notices in the licence text Licence: Python Software Foundation License Version 2, with the historical BeOpen, CNRI and CWI licences, and the Zero-Clause BSD licence for code in the documentation Full text: licenses/CPython-3.14.2-LICENSE.txt (LICENSE at tag v3.14.2); licenses/CPython-3.14.2-license-and-acknowledgements.rst (Doc/license.rst at tag v3.14.2, which includes "Licenses and Acknowledgements for Incorporated Software") Distributed: the interpreter compiled into pyodide.asm.wasm; the standard library as Python source in python_stdlib.zip Source: https://github.com/python/cpython/tree/v3.14.2 Notes: The acknowledgements file covers software incorporated into CPython (among them Mersenne Twister, SipHash24, strtod and dtoa, expat, libffi, zlib, cfuhash, libmpdec, mimalloc, asyncio, Global Unbounded Sequences and the Zstandard bindings). It is provided in full; which of those sections apply to this particular build was not established one by one. The OpenSSL section is provided with the rest, but no OpenSSL identifiers were found in pyodide.asm.wasm. Evidence: pyodide-lock.json ("python": "3.14.2"); Pyodide Makefile.envs (PYVERSION ?= 3.14.2); upstream files at tag v3.14.2. 5. Expat Version: 2.7.3 (the copy bundled with CPython 3.14.2) Copyright: Copyright (c) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper; Copyright (c) 2001-2022 Expat maintainers Licence: MIT Full text: licenses/expat-2.7.3-COPYING.txt (Modules/expat/COPYING, CPython v3.14.2) Distributed: compiled into pyodide.asm.wasm Source: https://github.com/python/cpython/tree/v3.14.2/Modules/expat Evidence: Modules/expat/expat.h at v3.14.2 (XML_MAJOR/MINOR/MICRO_VERSION 2.7.3); "expat_2.7.3" in pyodide.asm.wasm. 6. libmpdec Version: 2.5.1 (the copy bundled with CPython 3.14.2) Copyright: Copyright (c) 2008-2020 Stefan Krah (see the "libmpdec" section) Licence: BSD 2-Clause, as given in the CPython acknowledgements Full text: licenses/CPython-3.14.2-license-and-acknowledgements.rst, "libmpdec" Distributed: compiled into pyodide.asm.wasm Source: https://github.com/python/cpython/tree/v3.14.2/Modules/_decimal/libmpdec Evidence: mpdecimal.h at v3.14.2 (MPD_VERSION "2.5.1"); "mpdecimal.c" in pyodide.asm.wasm. 7. mimalloc Version: 2.1.2 (the copy bundled with CPython 3.14.2) Copyright: Copyright (c) 2018-2021 Microsoft Corporation, Daan Leijen (see the "mimalloc" section) Licence: MIT, as given in the CPython acknowledgements Full text: licenses/CPython-3.14.2-license-and-acknowledgements.rst, "mimalloc" Distributed: compiled into pyodide.asm.wasm Source: https://github.com/python/cpython/tree/v3.14.2/Objects/mimalloc Evidence: Include/internal/mimalloc/mimalloc.h at v3.14.2 (MI_MALLOC_VERSION 212); mimalloc identifiers in pyodide.asm.wasm. 8. HACL* (hash functions used by hashlib) Version: revision 8ba599b2f6c9701b3dc961db895b0856a2210f76 (the copy bundled with CPython 3.14.2) Copyright: Copyright (c) 2016-2022 INRIA, CMU and Microsoft Corporation; Copyright (c) 2022-2023 HACL* Contributors Licence: MIT Full text: licenses/HACL-star-8ba599b-MIT.txt (licence header of Modules/_hacl/Hacl_Hash_SHA2.h at v3.14.2) Distributed: compiled into pyodide.asm.wasm Source: https://github.com/python/cpython/tree/v3.14.2/Modules/_hacl Evidence: Modules/_hacl/refresh.sh at v3.14.2 (expected_hacl_star_rev); Hacl_ identifiers in pyodide.asm.wasm. HACL* has no section in CPython's acknowledgements file, so its notice is taken from its source headers. 9. libffi Version: commit f08493d249d2067c8b3207ba46693dd858f95db3 Copyright: Copyright (c) 1996-2022 Anthony Green, Red Hat, Inc and others Licence: MIT Full text: licenses/libffi-f08493d-LICENSE.txt (LICENSE at that commit) Distributed: compiled into pyodide.asm.wasm Source: https://github.com/libffi/libffi/tree/f08493d249d2067c8b3207ba46693dd858f95db3 Evidence: Pyodide 314.0.7 cpython/Makefile (LIBFFI_COMMIT) and Makefile.envs (-lffi); ffi_call and ffi_prep_cif in pyodide.asm.wasm. 10. XZ Utils (liblzma) Version: 5.2.2 Copyright: none for liblzma: its COPYING file states "liblzma is in the public domain" Licence: as stated in the XZ Utils COPYING file Full text: licenses/xz-5.2.2-COPYING.txt Distributed: liblzma compiled into pyodide.asm.wasm Source: https://github.com/xz-mirror/xz/releases/download/v5.2.2/xz-5.2.2.tar.gz Evidence: Pyodide 314.0.7 cpython/Makefile (LZMATARBALL); "5.2.2" and liblzma identifiers in pyodide.asm.wasm. 11. Zstandard (libzstd) Version: 1.5.7 Copyright: Copyright (c) Meta Platforms, Inc. and affiliates (see the licence text) Licence: BSD 3-Clause, as given in the LICENSE file (Zstandard is dual-licensed BSD / GPLv2; this entry follows the LICENSE file shipped with the source used) Full text: licenses/zstd-1.5.7-LICENSE.txt Distributed: compiled into pyodide.asm.wasm Source: https://github.com/python/cpython-source-deps/archive/refs/tags/zstd-1.5.7.tar.gz Evidence: Pyodide 314.0.7 cpython/Makefile (ZSTDTARBALL) and Makefile.envs (-lzstd); "1.5.7" and zstd identifiers in pyodide.asm.wasm. 12. SQLite Version: 3.39.0 (source id 2022-06-25 14:57:57 14e166f40dbfa6e05554...) Copyright: none: the authors disclaim copyright (public domain) Licence: public domain dedication Full text: licenses/SQLite-3.39.0-LICENSE.md (LICENSE.md at tag version-3.39.0) Distributed: compiled into pyodide.asm.wasm Source: https://www.sqlite.org/2022/sqlite-autoconf-3390000.tar.gz Evidence: Pyodide 314.0.7 cpython/Makefile (SQLITE3TARBALL) and Makefile.envs (-lsqlite3); "3.39.0" and the source id in pyodide.asm.wasm. 13. zlib Version: 1.3.1 Copyright: Copyright (C) 1995-2024 Jean-loup Gailly and Mark Adler (as embedded in pyodide.asm.wasm) Licence: zlib License Full text: licenses/zlib-1.3.1-LICENSE.txt (LICENSE at tag v1.3.1) Distributed: compiled into pyodide.asm.wasm Source: https://github.com/madler/zlib/archive/refs/tags/v1.3.1.tar.gz Evidence: Pyodide Makefile.envs (-s USE_ZLIB); Emscripten 5.0.3 tools/ports/zlib.py (VERSION = '1.3.1'); "deflate 1.3.1" and "inflate 1.3.1" copyright strings in pyodide.asm.wasm. 14. bzip2 (libbzip2) Version: 1.0.6 Copyright: Copyright (C) 1996-2010 Julian R Seward Licence: the bzip2 licence (BSD-style), as given in the LICENSE file Full text: licenses/bzip2-1.0.6-LICENSE.txt Distributed: compiled into pyodide.asm.wasm Source: https://github.com/emscripten-ports/bzip2/archive/1.0.6.zip Evidence: Pyodide Makefile.envs (-s USE_BZIP2); Emscripten 5.0.3 tools/ports/bzip2.py (VERSION = '1.0.6'); "1.0.6, 6-Sept-2010" in pyodide.asm.wasm. 15. Emscripten (compiler runtime and JavaScript support code) Version: 5.0.3 Copyright: Copyright (c) 2010-2014 Emscripten authors, and the further notices in the licence text Licence: MIT and the University of Illinois/NCSA Open Source License (both texts in the licence file) Full text: licenses/Emscripten-5.0.3-LICENSE.txt Distributed: JavaScript runtime code in pyodide.asm.mjs; system library code compiled into pyodide.asm.wasm Source: https://github.com/emscripten-core/emscripten/tree/5.0.3 Evidence: pyodide-lock.json ("platform": "emscripten_5_0_3"); Pyodide Makefile.envs (PYODIDE_EMSCRIPTEN_VERSION ?= 5.0.3); LICENSE at tag 5.0.3. 16. Libraries that Emscripten 5.0.3 bundles and links into its output musl libc: MIT licenses/musl-Emscripten-5.0.3-COPYRIGHT.txt LLVM libc++: Apache License 2.0 with LLVM Exceptions licenses/LLVM-libcxx-Emscripten-5.0.3-LICENSE.txt LLVM libc++abi: Apache License 2.0 with LLVM Exceptions licenses/LLVM-libcxxabi-Emscripten-5.0.3-LICENSE.txt LLVM compiler-rt: Apache License 2.0 with LLVM Exceptions licenses/LLVM-compiler-rt-Emscripten-5.0.3-LICENSE.txt dlmalloc: public domain (CC0) licenses/dlmalloc-Emscripten-5.0.3-notice.txt Versions: as bundled in Emscripten 5.0.3 (system/lib) Distributed: compiled into pyodide.asm.wasm Source: https://github.com/emscripten-core/emscripten/tree/5.0.3/system/lib Evidence: Emscripten 5.0.3 LICENSE (musl bundled); Pyodide Makefile.envs (-lstdc++, which is libc++ under Emscripten); "compiler-rt" in pyodide.asm.wasm. The presence of libc++abi and dlmalloc was not confirmed from the binary. They are listed because Emscripten links them by default, and inclusion is the conservative choice. 17. ws (npm package): NOT distributed pyodide.mjs and pyodide.asm.mjs contain import("ws"), which runs only under Node.js. The package is not bundled, is not among the files served, and is never loaded in a browser. Unresolved items ---------------- a. stackframe / error-stack-parser: the upstream release from which Pyodide's port was made is not stated in the Pyodide source. Its licence and copyright are established from the LICENSE file shipped with the port. b. The CPython acknowledgements (entry 4) were not matched section by section against this particular build. All of them are provided. c. libc++abi and dlmalloc (entry 16) are included conservatively, without binary confirmation. These are the facts established on 2026-09-27. They are not a legal opinion.