Publisher license declarations verified against integrity-checked npm release packages, 2026-10-15.

@foliojs-fork/fontkit 1.9.2
License: MIT
Author metadata: {"name": "Devon Govett", "email": "devongovett@gmail.com"}
https://registry.npmjs.org/@foliojs-fork%2ffontkit/1.9.2
Tarball SHA256: 2ee9abc9d58d2c85558f2dfe838a2f375b7f69507f268acaacc3aa3741fbb366

dfa 1.2.0
License: MIT
Author metadata: {"name": "Devon Govett", "email": "devongovett@gmail.com"}
https://registry.npmjs.org/dfa/1.2.0
Tarball SHA256: d781eb3a307ab6aa2d97028f695b17dbeadf6fd27788c333b1fb96d18d2a23ad

brotli 1.3.3
License: MIT
Author metadata: {"name": "Devon Govett", "email": "devongovett@gmail.com"}
https://registry.npmjs.org/brotli/1.3.3
Tarball SHA256: 3c7c260f6263df95fee49a9119e9fd21227d628b6c9d99080a75edfd9e2bdb24

The release package explicitly identifies MIT. Existing author metadata, original supplied notices, inherited-component attributions and the full MIT permission/warranty terms are retained in notices/. No copyright years or missing original author statements are invented. The separate JSON files retain the publisher declarations and package provenance. The MIT declarations apply to the published packages; independently attributed inherited components keep their own notices and terms.