Space Connect Third-Party Notices

Version: 2.0

Inventory date: September 30, 2026

Document ID: third-party-notices Status: Factual Early Access inventory; reconcile against both exact final MSIX payloads before public distribution.

SC.Community and SC.Artifacts include third-party software. The applicable third-party licenses govern those components and may grant rights in them that differ from the Space Connect Software License & Terms. Nothing in the Space Connect Software License & Terms restricts rights independently granted by a third-party license.

This notice is based on both Products' current production project references and package-lock.json files, the pinned PostgreSQL/PostGIS desktop supply manifests, the SC.Artifacts document-renderer supply manifest, and the prepared native runtime payloads. The final release process must compare this notice to each actual final MSIX file inventory and preserve all license and notice files required by the included components.

1. Inventory basis and release requirement

The current Products have five third-party runtime families:

1. the Microsoft .NET runtime and managed application libraries;
2. Microsoft Windows App SDK and WebView2 components used by the Windows desktop shell;
3. bundled React/JavaScript dependencies in the compiled web application; and
4. the pinned PostgreSQL 17.11 and PostGIS 3.6.2 Windows x64 native runtime payload; and
5. the SC.Artifacts document renderer, including Node.js, pdfme, fontkit, and pinned Noto Sans fonts.

Development-only test, lint, TypeScript, build, and packaging dependencies are not application runtime components merely because they exist in a lockfile. Conversely, native libraries included transitively in the PostgreSQL/PostGIS or document-renderer bundles remain part of the shipped inventory even when Product code does not reference them directly.

Before any public package is released, the package owner must:

• inventory the expanded final MSIX rather than relying only on source manifests;
• compare every managed assembly, JavaScript production module, native executable, native library, font, style, icon, image, and other redistributable asset to this notice;
• include all required copyright notices and license texts;
• provide corresponding-source or written-offer material when a copyleft component requires it;
• remove a component that is not actually used when its redistribution obligations are not satisfied; and
• create a new immutable notice version if the final shipped inventory changes.

2. Microsoft .NET and managed runtime components

Both Products' APIs are published with the Microsoft .NET runtime. Microsoft's .NET runtime and many Microsoft-managed libraries are licensed under the MIT License and may include additional third-party notices distributed with the runtime.

Current managed runtime packages evidenced by the API dependency graph include:

Design-time and build-time packages appearing in the restore graph must be included in the final notice only if they are present in the final application package. Current examples requiring that byte-level decision include Humanizer.Core, Microsoft.Build.Framework, Microsoft.CodeAnalysis components, Microsoft.EntityFrameworkCore.Design, Microsoft.VisualStudio.SolutionPersistence, Mono.TextTemplating, System.CodeDom, and System.Composition components.

Project and license information:

• .NET: https://github.com/dotnet/runtime
• ASP.NET Core: https://github.com/dotnet/aspnetcore
• Entity Framework Core: https://github.com/dotnet/efcore
• Open XML SDK: https://github.com/dotnet/Open-XML-SDK
• NetTopologySuite: https://github.com/NetTopologySuite/NetTopologySuite
• Npgsql: https://github.com/npgsql/npgsql
• Newtonsoft.Json: https://github.com/JamesNK/Newtonsoft.Json
• AWS SDK for .NET: https://github.com/aws/aws-sdk-net
• SkiaSharp: https://github.com/mono/SkiaSharp

3. Windows desktop runtime components

The Windows desktop shell depends on Microsoft software distributed through current Microsoft package terms and license files, including:

The package build also uses Microsoft Windows SDK build and MSIX tooling. Those tools are not necessarily redistributed inside the application package; if their binaries or assets are present in the final MSIX, their Microsoft license terms must accompany this notice as required.

Microsoft license and product information:

• Windows App SDK: https://github.com/microsoft/WindowsAppSDK
• WebView2: https://developer.microsoft.com/microsoft-edge/webview2/
• Windows SDK license: https://aka.ms/WinSDKLicenseURL

Microsoft software is licensed under the terms supplied with the applicable packages and runtime. Those terms are not replaced by the license templates reproduced later in this notice.

4. Web application runtime components

The compiled React applications currently have these direct runtime dependencies. Product-specific packages are distributed only with the Product that uses them.

The current production dependency closure also includes modules under the following license families. Inclusion in the final notice must follow the actual compiled bundle and associated distributed assets.

MIT

@full-ui/headless-calendar, @fullcalendar/core, @fullcalendar/react, @mapbox/jsonlint-lines-primitives, @maplibre/vt-pbf, @tanstack/query-core, @tanstack/react-query, @tanstack/react-table, @tanstack/table-core, @ungap/structured-clone, bail, ccount, character-entities, character-entities-html4, character-entities-legacy, character-reference-invalid, comma-separated-tokens, debug, decode-named-character-reference, dequal, devlop, estree-util-is-identifier-name, extend, gl-matrix, hast-util-to-jsx-runtime, hast-util-whitespace, html-url-attributes, inline-style-parser, is-alphabetical, is-alphanumerical, is-decimal, is-hexadecimal, is-plain-obj, json-stringify-pretty-compact, longest-streak, mdast-util-from-markdown, mdast-util-mdx-expression, mdast-util-mdx-jsx, mdast-util-mdxjs-esm, mdast-util-phrasing, mdast-util-to-hast, mdast-util-to-markdown, mdast-util-to-string, micromark, micromark-core-commonmark, micromark-factory-destination, micromark-factory-label, micromark-factory-space, micromark-factory-title, micromark-util-character, micromark-util-chunked, micromark-util-classify-character, micromark-util-combine-extensions, micromark-util-decode-numeric-character-reference, micromark-util-decode-string, micromark-util-encode, micromark-util-html-tag-name, micromark-util-normalize-identifier, micromark-util-resolve-all, micromark-util-sanitize-uri, micromark-util-subtokenize, minimist, ms, murmurhash-js, parse-entities, property-information, react, react-dom, react-markdown, remark-parse, remark-rehype, resolve-protobuf-schema, scheduler, space-separated-tokens, stringify-entities, style-to-js, style-to-object, temporal-polyfill, temporal-utils, trim-lines, trough, unified, unist-util-is, unist-util-position, unist-util-stringify-position, unist-util-visit, unist-util-visit-parents, vfile, vfile-message, and zwitch.

ISC

@mapbox/point-geometry, @maplibre/geojson-vt, @maplibre/maplibre-gl-style-spec, earcut, kdbush, potpack, quickselect, and tinyqueue.

BSD 2-Clause

@mapbox/tiny-sdf and @mapbox/unitbezier.

BSD 3-Clause

@mapbox/vector-tile, maplibre-gl, and pbf.

MIT or Apache 2.0

@maplibre/mlt.

Apache 2.0

temporal-spec.

Type declaration packages and build-only modules are not listed as shipped runtime components unless the final compiled payload actually includes their content.

Project information:

• FullCalendar: https://github.com/fullcalendar/fullcalendar
• TanStack Query: https://github.com/TanStack/query
• TanStack Table: https://github.com/TanStack/table
• MapLibre GL JS: https://github.com/maplibre/maplibre-gl-js
• React: https://github.com/facebook/react
• react-markdown: https://github.com/remarkjs/react-markdown
• temporal-polyfill: https://github.com/fullcalendar/temporal-polyfill
• pdfme: https://github.com/pdfme/pdfme
• hash-wasm: https://github.com/Daninet/hash-wasm
• fontkit: https://github.com/foliojs/fontkit

SC.Artifacts document-renderer payload

SC.Artifacts packages the pinned sc-artifacts-document-renderer-node-22.23.2-pdfme-6.1.12-noto-sans-2.004 payload. It contains Node.js 22.23.2 x64 and its upstream license, the renderer built from the exact locked pdfme and fontkit dependency graph, and four pinned Noto Sans 2.004 font faces with the SIL Open Font License 1.1. The payload preserves Node/LICENSE, Fonts/LICENSE, and Licenses/THIRD-PARTY-NOTICES.md.

Project and license information:

• Node.js: https://github.com/nodejs/node
• Noto Fonts: https://github.com/notofonts/noto-fonts
• SIL Open Font License 1.1: https://openfontlicense.org/

5. PostgreSQL and PostGIS native payload

The Windows x64 desktop package uses the pinned native payload identified as:

postgresql-17.11-postgis-3.6.2-windows-x64-6eabdf00-7ba180ee

Its two acquisition archives are:

The prepared payload preserves these native notice files and they must remain in the final package:

• Runtime/Postgres/server_license.txt — PostgreSQL License;
• Runtime/Postgres/bin/COPYING — GNU General Public License version 2;
• Runtime/Postgres/commandlinetools_3rd_party_licenses.txt — third-party notices for command-line runtime dependencies, including zstd, gettext, libiconv, pthreads, and other included libraries;
• Runtime/Postgres/gdal-data/LICENSE.TXT — GDAL/OGR and bundled-data notices;
• Runtime/Postgres/COPYRIGHT.pg_sphere — pgSphere notice;
• Runtime/Postgres/ogrfdw_LICENSE.md — ogr_fdw notice;
• Runtime/Postgres/pgpointcloud_COPYRIGHT — pgPointCloud notice; and
• Runtime/Postgres/LICENSE — Apache License 2.0 included by the prepared bundle.

The native bundle currently contains executables, extensions, data, and dynamic libraries associated with PostgreSQL, PostGIS, GEOS, PROJ, GDAL/OGR, SFCGAL, ICU, OpenSSL, libcurl, libarchive, zstd, lz4, xz, bzip2, zlib, libxml2, libxslt, SQLite, Expat, FreeXL, OpenJPEG, TIFF, PCRE2, protobuf-c, libssh2, GNU runtime libraries, gettext, libiconv, libidn2, libunistring, GNU Readline or compatible command-line libraries, wxWidgets runtime libraries, and other dependencies documented in the bundle’s preserved license files.

Because a prebuilt PostGIS archive can change its transitive contents without changing Product source references, the final release must scan the exact pinned extracted payload and verify that its preserved license files fully cover every distributed native binary.

Source and license information:

• PostgreSQL: https://www.postgresql.org/about/licence/
• PostGIS: https://postgis.net/source/
• GEOS: https://libgeos.org/
• PROJ: https://proj.org/
• GDAL: https://gdal.org/
• SFCGAL: https://gitlab.com/sfcgal/SFCGAL

The final distributor must satisfy all corresponding-source and relinking obligations applicable to GPL and LGPL components. The Space Connect Software License & Terms do not limit the rights recipients receive under those third-party licenses.

6. Map styles, fonts, tiles, and remote services

SC.Community requests OpenFreeMap styles and tiles and font resources referenced by the style from remote services. It also requests selected USGS National Map tiles and, when enabled, FEMA National Flood Hazard Layer resources. Those remote resources are not described here as bundled assets merely because the application requests them.

The Privacy Notice separately identifies the current external service routes and information sent in a requested operation. Before release, the package scan must confirm whether any map style, glyph, sprite, font, tile, imagery, or other provider asset has also been copied into the MSIX. If so, its exact license and attribution must be added to this notice.

MapLibre GL JS, which renders the map, is a bundled JavaScript component and is listed above.

7. Product assets

The SC.Community and SC.Artifacts names, logos, application icons, and product-specific artwork are Space Connect assets unless a source asset contains a separate notice. A final package scan must identify any third-party font, icon, image, or design asset; none may be assumed to be Space Connect-owned solely because it appears in a repository.

8. Common license texts

The following standard texts are reproduced for convenience. A component-specific copyright notice or license file controls where it differs.

8.1 MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

8.2 ISC License

Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.

THE SOFTWARE IS PROVIDED “AS IS” AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

8.3 BSD 2-Clause License

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

8.4 BSD 3-Clause License

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

8.5 PostgreSQL License

PostgreSQL Database Management System (formerly known as Postgres, then as Postgres95)

Portions Copyright © 1996–2025, The PostgreSQL Global Development Group

Portions Copyright © 1994, The Regents of the University of California

Permission to use, copy, modify, and distribute this software and its documentation for any purpose, without fee, and without a written agreement is hereby granted, provided that the above copyright notice and this paragraph and the following two paragraphs appear in all copies.

IN NO EVENT SHALL THE UNIVERSITY OF CALIFORNIA BE LIABLE TO ANY PARTY FOR DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, INCLUDING LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE AND ITS DOCUMENTATION, EVEN IF THE UNIVERSITY OF CALIFORNIA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

THE UNIVERSITY OF CALIFORNIA SPECIFICALLY DISCLAIMS ANY WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE SOFTWARE PROVIDED HEREUNDER IS ON AN “AS IS” BASIS, AND THE UNIVERSITY OF CALIFORNIA HAS NO OBLIGATIONS TO PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.

8.6 Apache License 2.0, GPL 2.0 or later, and LGPL notices

The final application package preserves the full applicable license texts supplied with components under the Apache License 2.0, GNU General Public License, and GNU Lesser General Public License. Those complete texts are not shortened by this summary and control for their components.

• Apache License 2.0: https://www.apache.org/licenses/LICENSE-2.0
• GNU General Public License version 2: https://www.gnu.org/licenses/old-licenses/gpl-2.0.html
• GNU Lesser General Public License version 2.1: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

9. No endorsement

Third-party names are used only to identify included or interoperating components. Their inclusion does not imply that the third party sponsors, endorses, or certifies SC.Community or Space Connect.

Release stop: Do not publish either Product package until this notice has been reconciled against that package’s exact bytes, every required component-specific notice and license text is included, and the release owner has verified the applicable redistribution obligations. Counsel or qualified open-source compliance review is recommended but is not an implementation prerequisite.