LICENSING CHOICES FOR THIS DISTRIBUTION

JSZip 3.10.1: select MIT from (MIT OR GPL-3.0-or-later). Retain original upstream LICENSE.markdown without alterations; presence of the alternative GPL text does not mean GPL was selected.
DOMPurify 2.3.0: select Apache-2.0 from (MPL-2.0 OR Apache-2.0). This package does NOT offer an MIT option. Retain copyright, full Apache text and the unchanged upstream dual-license file.
rgbcolor 1.0.1: select MIT from MIT OR SEE LICENSE IN FEEL-FREE.md; retain LICENSE.md and authorship, with FEEL-FREE.md supplied as provenance.
pako 1.0.5: MIT applies to wrapper/code by Vitaly Puzrin/Andrei Tuputcyn; inherited lib/zlib sources also carry zlib terms. These are cumulative, not an OR choice. Preserve ZLIB-origin-NOTICES.txt.
Microsoft tslib helpers: exact embedded file matches tslib 1.9.3, licensed Apache-2.0. Do not substitute the 0BSD license of a newer tslib release. The downloaded 1.14.1 was comparison-only and is not included as the selected runtime component.
Other package licenses remain as specified in manifest.json. jsPDF's internally vendored components retain their individual MIT/BSD/permissive notices. No relicensing or new grants are invented.

The historical MD5 qualification applied to the unmodified upstream bundle. Iskra replaces that code in its shipped executable; see ../source/CHANGES.txt. All notices for the remaining upstream components are retained.
