{
  "audit_date": "2026-10-10",
  "scope": "Exact retained upstream source/packages for GPL DWG path and principal MIT viewer dependencies; not a legal-compliance certification or a byte-for-byte rebuild claim.",
  "npm_packages": [
    {
      "name": "@mlightcad/cad-simple-viewer",
      "version": "1.7.4",
      "declared_license": "MIT",
      "npm_archive": "cad-simple-viewer-1.7.4-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/cad-simple-viewer/-/cad-simple-viewer-1.7.4.tgz",
      "npm_integrity": "sha512-RojEGKrVbGPHhroI4uHU9Uq0il6r+DtEFOafnJ6DPUSLrm03s7PIwfisRoczPIcFL1jjMn5ApX7lklFEdnLX6g==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "cad-simple-viewer-1.7.4-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "cad-simple-viewer-1.7.4-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/cad-viewer@refs/tags/v1.7.4",
          "digest": {
            "gitCommit": "17cf21a4195ce77a41cc983bc9a22c9e20c14b06"
          }
        }
      ]
    },
    {
      "name": "@mlightcad/data-model",
      "version": "1.15.1",
      "declared_license": "MIT",
      "npm_archive": "data-model-1.15.1-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/data-model/-/data-model-1.15.1.tgz",
      "npm_integrity": "sha512-m5KURnMp6SL8uAqrQQwswn2y8xW3mgEsDbkW0AlFrclhR6q8cbcWivjWIpkhrHShR6RRnzyeukQCyxXBjrkfYg==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "data-model-1.15.1-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "data-model-1.15.1-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/realdwg-web@refs/tags/v1.15.1",
          "digest": {
            "gitCommit": "9f0b3382a9c201c4826a09dd76c2df3ce7067b6d"
          }
        }
      ]
    },
    {
      "name": "@mlightcad/libredwg-converter",
      "version": "3.15.1",
      "declared_license": "GPL-3.0",
      "npm_archive": "libredwg-converter-3.15.1-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/libredwg-converter/-/libredwg-converter-3.15.1.tgz",
      "npm_integrity": "sha512-rjH299FJ7YVV1E3/ZsGYYBkXbKjzeml2yb/z0DbL4hEH/dQkPbBqCYh8d1F3R74pKqEV+HDAxV+Z+ZM5oRK6PA==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "libredwg-converter-3.15.1-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "libredwg-converter-3.15.1-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/realdwg-web@refs/tags/v1.15.1",
          "digest": {
            "gitCommit": "9f0b3382a9c201c4826a09dd76c2df3ce7067b6d"
          }
        }
      ]
    },
    {
      "name": "@mlightcad/libredwg-web",
      "version": "0.7.14",
      "declared_license": "GPL-3.0",
      "npm_archive": "libredwg-web-0.7.14-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/libredwg-web/-/libredwg-web-0.7.14.tgz",
      "npm_integrity": "sha512-5zuTw+x5o/qj9czjkcf2o3PWuh8v+XEEFM9ZEMEhVRaJySZ6+C7Ua6y6hyGcwJ3WfmXhWAHEdVYsKtx4XAlvfA==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "libredwg-web-0.7.14-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "libredwg-web-0.7.14-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/libredwg-web@refs/tags/v0.7.14",
          "digest": {
            "gitCommit": "1dd682f46339f37b67c5ff1085d10d04a8c16d7e"
          }
        }
      ]
    },
    {
      "name": "@mlightcad/libredwg-web",
      "version": "0.7.15",
      "declared_license": "GPL-3.0",
      "npm_archive": "libredwg-web-0.7.15-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/libredwg-web/-/libredwg-web-0.7.15.tgz",
      "npm_integrity": "sha512-OblFsinWJcDacbQNPMAey6aIuHOrB2+ziUXvzJfix9XmBZ6461kDAiyz4jFs3hNxVc65Ojuqv15VPtSdfiggKA==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "libredwg-web-0.7.15-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "libredwg-web-0.7.15-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/libredwg-web@refs/tags/v0.7.15",
          "digest": {
            "gitCommit": "18588818df66d4258b83fda19aa40fd892cdf49d"
          }
        }
      ]
    },
    {
      "name": "@mlightcad/libredwg-web",
      "version": "0.7.16",
      "declared_license": "GPL-3.0",
      "npm_archive": "libredwg-web-0.7.16-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/libredwg-web/-/libredwg-web-0.7.16.tgz",
      "npm_integrity": "sha512-gWmjJ5TVNHR7JSHSke0Y8WmvTDPRTUNiRUejbIiymdjR4FV8Jv3hulR0Cv4TNwihr+r1DaxoD0phOFDENY5+Nw==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "libredwg-web-0.7.16-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "libredwg-web-0.7.16-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/libredwg-web@refs/tags/v0.7.16",
          "digest": {
            "gitCommit": "0d4fd3fbe6eb1a451d7c5ce286d0785e4d65dd29"
          }
        }
      ]
    },
    {
      "name": "@mlightcad/libredwg-web",
      "version": "0.7.17",
      "declared_license": "GPL-3.0",
      "npm_archive": "libredwg-web-0.7.17-npm.tgz",
      "npm_tarball_url": "https://registry.npmjs.org/@mlightcad/libredwg-web/-/libredwg-web-0.7.17.tgz",
      "npm_integrity": "sha512-fI2GgP2RgX5e3HcETx1u5FeL9YKAzoN7RSe0vWyrdVNV5wLcy/VR64hZPM8H8/Lg2izC/qJIUprEfK+6vjSi7Q==",
      "npm_integrity_matches": true,
      "npm_gitHead": null,
      "npm_gitHead_present": false,
      "registry_metadata": "libredwg-web-0.7.17-registry.json",
      "attestation_signature_verified": false,
      "attestations_file": "libredwg-web-0.7.17-attestations.json",
      "attestation_claimed_source_dependencies": [
        {
          "uri": "git+https://github.com/mlightcad/libredwg-web@refs/tags/v0.7.17",
          "digest": {
            "gitCommit": "2654a724bce3d5f588a0d16b6426a23e3f0fef46"
          }
        }
      ]
    }
  ],
  "source_archives": [
    {
      "repository": "https://github.com/mlightcad/cad-viewer",
      "tag": "v1.7.4",
      "commit": "17cf21a4195ce77a41cc983bc9a22c9e20c14b06",
      "archive": "cad-viewer-17cf21a4195ce77a41cc983bc9a22c9e20c14b06-source.tar.gz",
      "archive_url": "https://codeload.github.com/mlightcad/cad-viewer/tar.gz/17cf21a4195ce77a41cc983bc9a22c9e20c14b06"
    },
    {
      "repository": "https://github.com/mlightcad/realdwg-web",
      "tag": "v1.15.1",
      "commit": "9f0b3382a9c201c4826a09dd76c2df3ce7067b6d",
      "archive": "realdwg-web-9f0b3382a9c201c4826a09dd76c2df3ce7067b6d-source.tar.gz",
      "archive_url": "https://codeload.github.com/mlightcad/realdwg-web/tar.gz/9f0b3382a9c201c4826a09dd76c2df3ce7067b6d"
    },
    {
      "repository": "https://github.com/mlightcad/libredwg-web",
      "tag": "v0.7.14",
      "commit": "1dd682f46339f37b67c5ff1085d10d04a8c16d7e",
      "archive": "libredwg-web-1dd682f46339f37b67c5ff1085d10d04a8c16d7e-source.tar.gz",
      "archive_url": "https://codeload.github.com/mlightcad/libredwg-web/tar.gz/1dd682f46339f37b67c5ff1085d10d04a8c16d7e"
    },
    {
      "repository": "https://github.com/mlightcad/libredwg-web",
      "tag": "v0.7.17",
      "commit": "2654a724bce3d5f588a0d16b6426a23e3f0fef46",
      "archive": "libredwg-web-2654a724bce3d5f588a0d16b6426a23e3f0fef46-source.tar.gz",
      "archive_url": "https://codeload.github.com/mlightcad/libredwg-web/tar.gz/2654a724bce3d5f588a0d16b6426a23e3f0fef46"
    },
    {
      "repository": "https://github.com/zserge/jsmn",
      "tag": null,
      "commit": "85695f3d5903b1cd5b4030efe50db3b4f5f3c928",
      "archive": "jsmn-85695f3d5903b1cd5b4030efe50db3b4f5f3c928-source.tar.gz",
      "archive_url": "https://codeload.github.com/zserge/jsmn/tar.gz/85695f3d5903b1cd5b4030efe50db3b4f5f3c928"
    }
  ],
  "converter_worker_sha256": "3e60db7bb26fef8327f846ff19b437788004a46bef299412984a75d670b67357",
  "converter_wasm_sha256": "431576487027122a28e5ac99d91fe6366f81ecda743a4676878c75c85fe82c53",
  "converter_wasm_bytes": 9496803,
  "converter_wasm_matches_retained_v0_7_14_tree": true,
  "wasm_comparisons": [
    {
      "libredwg_web_npm_version": "0.7.14",
      "size": 9496803,
      "sha256": "431576487027122a28e5ac99d91fe6366f81ecda743a4676878c75c85fe82c53",
      "matches_converter_wasm": true
    },
    {
      "libredwg_web_npm_version": "0.7.15",
      "size": 9496803,
      "sha256": "431576487027122a28e5ac99d91fe6366f81ecda743a4676878c75c85fe82c53",
      "matches_converter_wasm": true
    },
    {
      "libredwg_web_npm_version": "0.7.16",
      "size": 9496803,
      "sha256": "431576487027122a28e5ac99d91fe6366f81ecda743a4676878c75c85fe82c53",
      "matches_converter_wasm": true
    },
    {
      "libredwg_web_npm_version": "0.7.17",
      "size": 10816837,
      "sha256": "2bd963e881cfa08d645e1c869f31ca7ae3e47552276c29e41829cd84250e301a",
      "matches_converter_wasm": false
    }
  ],
  "wasm_recompiled_from_C_source": false,
  "upstream_wasm_compiler_version_pinned_in_release_build": false,
  "archive_files": [
    {
      "file": "audit_sources.py",
      "size": 6679,
      "sha256": "556b508ebff778c552295173c423f88f63fd0371e33936767ca259f9bd4fcf1b"
    },
    {
      "file": "cad-simple-viewer-1.7.4-attestations.json",
      "size": 14845,
      "sha256": "886d696852a4fdd270f8240aa05a4408060a89623d4562cab5b6219725cdd203"
    },
    {
      "file": "cad-simple-viewer-1.7.4-npm.tgz",
      "size": 2779754,
      "sha256": "e43cb066ac64db1c4e24b7ea330f5b33e13d894b9877c48e3f30df25012fb331"
    },
    {
      "file": "cad-simple-viewer-1.7.4-registry.json",
      "size": 3396,
      "sha256": "14271fea7c2c4fc348de3278b191cad677ba56b92c235b8cd239943e8c7efc06"
    },
    {
      "file": "cad-viewer-17cf21a4195ce77a41cc983bc9a22c9e20c14b06-source.tar.gz",
      "size": 7146842,
      "sha256": "ddd18456d23325f8c88d7eab375db05e76ef7b078c99754fa732ab44c6312173"
    },
    {
      "file": "cad-viewer-tags.json",
      "size": 13343,
      "sha256": "e5e2ac3a978a5cfee27824a9344fbea2cea10fe2f4ca0dee1de9dd39c58d28ea"
    },
    {
      "file": "data-model-1.15.1-attestations.json",
      "size": 14629,
      "sha256": "e09f5f403c467e0264c7c6df04681f73c3a0d048fbcf72d3e0d881a33390c79d"
    },
    {
      "file": "data-model-1.15.1-npm.tgz",
      "size": 1423345,
      "sha256": "71c885466005a7869ca8495ecb48c4df6dbebd5a9d1bf81e00cffa6e419dd126"
    },
    {
      "file": "data-model-1.15.1-registry.json",
      "size": 2918,
      "sha256": "39aeacaea5c0ae084de96178c8325d76b81d4fb38a5d7db472893c53f937955a"
    },
    {
      "file": "GPL-3.0.txt",
      "size": 35149,
      "sha256": "3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
    },
    {
      "file": "jsmn-85695f3d5903b1cd5b4030efe50db3b4f5f3c928-source.tar.gz",
      "size": 12597,
      "sha256": "715610f7fdbaf6aa2d90b1f3d10cc6b9e89cfb58eab74fb4c057b12fd913f993"
    },
    {
      "file": "libredwg-converter-3.15.1-attestations.json",
      "size": 14761,
      "sha256": "44329d310d7930b254a1d3479e9b5544dc6c0323aa9e4b3c67dada47dfa1187c"
    },
    {
      "file": "libredwg-converter-3.15.1-npm.tgz",
      "size": 2310800,
      "sha256": "3b0d5f277da735064c42fd820bd54b0da5398c50b4e4d6c501ce8180d731c37f"
    },
    {
      "file": "libredwg-converter-3.15.1-registry.json",
      "size": 3436,
      "sha256": "87416a5ab969d42c8a74db96391f44ed5da3dbace51a4675d11d5d9a07b0755b"
    },
    {
      "file": "libredwg-web-0.7.14-attestations.json",
      "size": 14665,
      "sha256": "0a791a7eac753d0c51dcc54c620dc9338e43de614f1ff0d471b285baf2280595"
    },
    {
      "file": "libredwg-web-0.7.14-npm.tgz",
      "size": 2433572,
      "sha256": "2d0db885b3924426bf8a51713c0ce7b06d5e4062559f74e4d7213b450811fd4a"
    },
    {
      "file": "libredwg-web-0.7.14-registry.json",
      "size": 4585,
      "sha256": "bc7ab43a27d5a3688ed587588d052cc37057b809929f035919447046dbe2ff7c"
    },
    {
      "file": "libredwg-web-0.7.14-tree.json",
      "size": 335393,
      "sha256": "769eacc279d1c34207c35a72a36029893b57e737854cfb9bcee4da18b1d5fea9"
    },
    {
      "file": "libredwg-web-0.7.15-attestations.json",
      "size": 14781,
      "sha256": "d4a1ec99db8559652ccfeaf3a18b90c2e6755ae8e2e067229db9cb93f5dd5bf0"
    },
    {
      "file": "libredwg-web-0.7.15-npm.tgz",
      "size": 2433803,
      "sha256": "661d2dd6babec17ad5066c0ee8906c42c6c33c55100da2ea4f6ffe4acaa67e34"
    },
    {
      "file": "libredwg-web-0.7.15-registry.json",
      "size": 4580,
      "sha256": "52ad2afe9f4301800af774fdcdc8123e0824e8b8ffbfb5bcd1f57a422f15c803"
    },
    {
      "file": "libredwg-web-0.7.16-attestations.json",
      "size": 14445,
      "sha256": "dac12c942ff86244254d90c65d3e561fe556d7322dcee29bf03a2f835a4f3cdf"
    },
    {
      "file": "libredwg-web-0.7.16-npm.tgz",
      "size": 2434209,
      "sha256": "1f99fca3b7d6cfbe20b52289218d80706660218e380686ab4ba210d3d28ee961"
    },
    {
      "file": "libredwg-web-0.7.16-registry.json",
      "size": 4580,
      "sha256": "2501dc78890ffbb702deca85e5f0e37fc356c453019952358e55805ffad55de8"
    },
    {
      "file": "libredwg-web-0.7.17-attestations.json",
      "size": 14881,
      "sha256": "2ed32cf7dc1ddd8ef6b15d973bdd0e2dceb57220a5613f8bc3a105a7fd76496b"
    },
    {
      "file": "libredwg-web-0.7.17-npm.tgz",
      "size": 2743114,
      "sha256": "b2fe9f53502c30006f6b13fe76f86a7d7b4294fd4585867cf9e097b775e611ba"
    },
    {
      "file": "libredwg-web-0.7.17-registry.json",
      "size": 4580,
      "sha256": "c3c1ac12f4b5fc4dbce3a39f6d8b5d6b0bcbda4d2c4eecdd76d84b611a7944c5"
    },
    {
      "file": "libredwg-web-0.7.17-tree.json",
      "size": 335657,
      "sha256": "7cc263e5c14736cd8389a96760f6777aa8bf2346f4d56b7cd5e3dd8e18b06626"
    },
    {
      "file": "libredwg-web-1dd682f46339f37b67c5ff1085d10d04a8c16d7e-source.tar.gz",
      "size": 23477915,
      "sha256": "aba26b3b303e47460351feda6a22f97b27496714bf6b8719cc1715ca840a8072"
    },
    {
      "file": "libredwg-web-2654a724bce3d5f588a0d16b6426a23e3f0fef46-source.tar.gz",
      "size": 23787599,
      "sha256": "cb68ac80ed164c6a275c40c087ed0c991d6fe0ab9795ad0532a8cc42d1cd1d59"
    },
    {
      "file": "libredwg-web-tags.json",
      "size": 5949,
      "sha256": "fecf35a609c5b6ce9a62e6e14386cbb81af8d63af74a8bbefeb30c135d41cbca"
    },
    {
      "file": "realdwg-web-9f0b3382a9c201c4826a09dd76c2df3ce7067b6d-source.tar.gz",
      "size": 1363498,
      "sha256": "41c641493f10b9cb203a6660499775d4db9387c7fccbe6af5b0b5d16c8a6c6ce"
    },
    {
      "file": "realdwg-web-tags.json",
      "size": 42306,
      "sha256": "c9297e9896a3e81972e900d2adda21534726e8917af5bff39dbdca8a7bb4b15f"
    }
  ]
}