# Bundled components

Markdown parser: markdown-it15.0.3 at a8c00d474ec9b304fad9b71c16d6fa8b4909279e,
MIT, copyright2014 Vitaly Puzrin and Alex Kocharin. Full text: LICENSE.

The browser bundle includes these locked dependencies (full texts in licences/):
- entities8.1.0, BSD-2-Clause, licences/entities.txt
- linkify-it6.1.0, MIT, licences/linkify-it.txt
- mdurl2.1.0, MIT, licences/mdurl.txt
- punycode.js2.3.1, MIT, licences/punycode.js.txt
- uc.micro3.0.0, MIT, licences/uc.micro.txt

Build metafile confirms these five packages and markdown-it source. The CLI
argparse package is not bundled. No plugins, highlight.js, webfonts or other
runtime dependency is included. New Chawso policy/worker/UI/export code uses MIT.

Parser source is unmodified. Chawso renderer rules replace images with inert
alt-text placeholders and remove unsupported link destinations, retain safe
external links with noreferrer/noopener and target=_blank. Raw HTML stays disabled.