# PDF.js — Practice Split rendering only

Version: **pdfjs-dist 6.3.289**, Mozilla PDF.js contributors.

Official package: https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-6.3.289.tgz

Verified package SHA-512 (base64):
`ZHjSVpDa3D6izMq8/04lvkhkATUmL9px6ChPaXc1k6nU2Mrhlg1/7F0bdUqCwUjw3NsPTfPZsMDUU6ZIcRaeQw==`

This subset contains `build/pdf.min.mjs`, the corresponding
`build/pdf.worker.min.mjs`, and rendering support directories `cmaps`,
`standard_fonts`, `wasm`, `iccs`. The core module is unmodified; the local worker
modification is described below. No full viewer, legacy build, source maps,
types, examples, Node bindings, or sandbox viewer application are included.
The rendering codecs are used on demand by the worker. The unused QuickJS
sandbox pair (`wasm/quickjs-eval.js` and `wasm/quickjs-eval.wasm`) was removed
from this subset and from precaching on 2026-09-20. The canvas renderer, its
worker/fake-worker path, and codec fallbacks have no dependency on those files.
The QuickJS removal did not change the renderer or its worker. Historical hashes,
exact upstream artifact/engine provenance and MIT licensing evidence are retained in the
repository's `dev-docs/QUICKJS_PROVENANCE_CLEANUP.md` and canonical inventory.

On 2026-09-20, the four `standard_fonts/LiberationSans-*.ttf` files and their
`LICENSE_LIBERATION` were also removed, along with their precache entries.
The worker's only executable change removes the four downloadable Liberation
font paths from its active Helvetica-family system-font substitutions. A dated
modification notice was added; its original copyright header and Apache license
are preserved. Installed-font lookup and
the existing generic `sans-serif` fallback remain; no replacement font package
was added. Other standard-font/XFA maps and numeric metrics remain in the code.
The current presenter explicitly uses system fonts and disables XFA; alternate
configurations require a review of those retained paths.

Bounded synthetic rendering found no missing ordinary text, row reflow or
material clipping, with measurable glyph/ink differences under simulated missing
local fonts. This is not a cross-platform rendering guarantee. Historical font
hashes, GPLv2/Liberation license evidence, source-release mismatch and validation
limits are in `dev-docs/LIBERATION_SANS_CLEANUP.md` and its artifact inventory in
the repository. This removal does not certify earlier distributions.

Core license: [Apache-2.0](6.3.289/LICENSE).
Additional bundled-asset notices must remain with the assets:

- [Adobe CMaps](6.3.289/cmaps/LICENSE)
- [Foxit fonts](6.3.289/standard_fonts/LICENSE_FOXIT)
- `6.3.289/wasm/LICENSE_*`: codec and wrapper licenses (JBIG2, OpenJPEG, QCMS)
- [ICC profile CC0 notice](6.3.289/iccs/LICENSE)

These asset licenses are not replaced by the core Apache license.
The versioned runtime/support files including notices total 196 files,
4,188,982 bytes (approximately 4.19 MB uncompressed).
PDF.js executes lazily only for Practice Split PDFs. The local app-shell cache
includes the files for offline rendering; it does not cache private PDF bytes.