# Third-party files served by emailplane.com (#1023)

The site loads nothing from another host at runtime. These files are committed so the build stays
offline; `tools/vendor.sh` is the only way they change (it verifies each npm tarball's integrity hash).
The build copies them to `/assets/` under content-hashed names.

| File | What | Version | Licence | Source (npm integrity) |
|---|---|---|---|---|
| `three.min.js` | three.js, tree-shaken to the 20 classes `brand/js/scene.js` uses, minified with esbuild 0.25.10. Loaded only on the homepage and brand sheet, after idle, on a capable GPU. | 0.186.1 (r186) | MIT, notice kept at the top of the file; full text in `LICENSE-three.txt` | `three@0.186.1`, sha512-blFeqb49wRCSGUGj7gtpfnSGHy2lwDk94RhUmS1c/hTby70kvChbWpkJ4Pm1390LqzzvTmzgXKHPEafJwCb8jA== |
| `inter-latin.woff2` | Inter, variable (opsz 14–32, wght 100–900), Latin subset | Fontsource 5.3.0 | SIL Open Font License 1.1, `OFL-Inter.txt` | `@fontsource-variable/inter@5.3.0`, sha512-OupL48va4JNofb97w6NYeF9S7W/kHNKM0Er8Dem5nqi4jeOLrVJDoE8tZEpnMJmtkvNbB1EIPPwHcdkF6b1oUA== |
| `geist-mono-latin.woff2` | Geist Mono, variable (wght 100–900), Latin subset | Fontsource 5.3.0 | SIL Open Font License 1.1, `OFL-GeistMono.txt` | `@fontsource-variable/geist-mono@5.3.0`, sha512-vBbuwDEo9AkrqADMXOrlAR3DFcJi4/JxeuU43FoiQERnNwsfXNnvxvReZG02cQKmyk4DZkZdBZX3oTDvy2zBAw== |

The OFL allows bundling and serving the fonts with the site; the fonts are not sold on their own and
keep their names. MIT requires the copyright notice to travel with the code, which it does (the
minified file starts with it, and the licence texts are published at `/licenses/`).