Third Party and Vendoring

## Third Party Libraries This platform uses a small number of third-party open-source libraries to provide browser-based learning tools. Some files are vendored and served from this site's own static assets. Others remain loaded from pinned CDN URLs when vendoring would add unnecessary maintenance cost or when the runtime is intentionally network-based. ## Vendored Assets Several lightweight or central runtime dependencies are served locally, including syntax highlighting, terminal UI assets, SQLite browser support, and regular expression runtimes. Vendoring these files reduces ordinary page-load dependency on external CDNs and keeps critical UI/runtime pieces under the same deployment process as the rest of the site. ## CDN-backed Runtime Libraries Large or loader-sensitive runtimes such as Monaco Editor and Pyodide may still load from pinned CDN URLs. Selected JavaScript libraries in the online IDE, such as charting or visualization libraries, are user-selected sandbox dependencies. They run inside the isolated sandbox origin rather than the main authenticated site origin. Where the browser loading API supports it, CDN scripts use Subresource Integrity checks. Some worker-based APIs do not support native SRI; those cases rely on version pinning, CSP allowlists, sandbox isolation, runtime error handling, and smoke tests. ## Licenses and Ownership Third-party libraries, frameworks, trademarks, and logos remain the property of their respective authors and maintainers. Vendored license and notice files are kept with the corresponding static assets where required. This page is a human-readable summary and not a replacement for the original license texts. ## Main Third-Party Libraries The platform uses third-party open-source projects including, but not limited to: - Monaco Editor — browser-based code editor. - Pyodide — Python runtime for WebAssembly. - Xterm.js — terminal UI component. - Prism — syntax highlighting. - sql.js — SQLite compiled to WebAssembly. - XRegExp, PCRE2 WASM, and Oniguruma — regular expression engines. - D3, Chart.js, p5.js, Three.js, Lodash, Papa Parse, Marked, js-yaml, and similar libraries — optional sandbox/runtime dependencies selected by the user. License and notice files for vendored libraries are provided near the corresponding static assets where required.