Third-party licences

ISC since v7; earlier releases were BSD-3-Clause.

Bundles JSZip 3.10.1 (dual MIT or GPLv3 — MIT elected) and pako (MIT).

Offered under either licence at the recipient's choice; MIT elected, and its text is kept alongside the library in static/interactives/jsxgraph.

Composite licence: ISC, plus MIT (Copyright (c) 2013-present Cole Bemis) for the icons derived from the Feather project.

The distributed bundle also contains decimal.js (MIT, Copyright (c) 2025 Michael Mclaughlin) and, with their headers stripped by the minifier, complex.js, fraction.js, typed-function, escape-latex, seedrandom, tiny-emitter, javascript-natural-sort and @babel/runtime (all MIT). The upstream notice file is kept beside the library in static/interactives/mathjs.

The distributed bundle also contains KaTeX (MIT), Lodash (MIT), dagre and dagre-d3 (MIT), D3 (ISC), Cytoscape.js (MIT), Rough.js (MIT), marked (MIT), Langium (MIT), Chevrotain (Apache-2.0) and DOMPurify (Apache-2.0 elected).

Pinned to 1.x rather than 2.x: the 2.0 rewrite changed the API, and educational material and examples overwhelmingly target 1.x.

LGPL-2.1 section 6. p5.js is served unmodified to the browser and linked dynamically: a mini app calls its API and is not a derivative work of it. The obligations that do apply are met by shipping the library unchanged, keeping the full licence text and the unminified source next to it in static/interactives/p5, and naming it here with a link upstream. Nothing in Cogniti is statically linked against it or modifies it; if either changes, this entry has to be revisited.

Includes the text layer rules extracted from the upstream viewer stylesheet (web/pdf_viewer.css), served as text-layer.css. Ships with standard font data: the Foxit fonts (BSD-3-Clause, Copyright 2014 PDFium Authors) and the Liberation fonts (SIL OFL-1.1, Copyright (c) 2012 Red Hat, Inc. and digitized data Copyright (c) 2010 Google Corporation). Both licence texts are kept alongside the fonts in static/interactives/pdfjs/standard_fonts.

The distributed bundle carries no licence header; attribution is recorded here.

MIT since 3.1.0; earlier releases were Apache-2.0.

Bundles date-fns (MIT).

Dual licensed MPL-2.0 OR Apache-2.0; Apache-2.0 elected.

Date range picker on the insights pages. Replaced easepick, which is GPL-2.0-or-later in every release it ever published.

Forked from TinyMCE 6 while that project was MIT licensed. Bundles DOMPurify.

MIT since 2012; 1.x was dual MIT/GPL-2.0.

The distributed build carries no licence header; attribution is recorded here.

MIT since the 2014 relicence; 3.5.2 and earlier were dual Apache-2.0 or GPL-2.0.

Community Edition.

MIT since 2.0.0; 1.x and earlier were BSD-3-Clause.

Bundles DOMPurify 2.3.3.

Distributed under a Microsoft licence notice; the npm package declares MIT.