Excalidraw License Review

• Upstream repository: https://github.com/excalidraw/excalidraw
• License file: LICENSE at repository root
• License: MIT
• Copyright: © 2020 Excalidraw contributors
• Package on npm: @excalidraw/excalidraw — MIT

Obligations satisfied

1. MIT license text preserved in THIRD_PARTY_NOTICES.md.
2. Copyright notice preserved in THIRD_PARTY_NOTICES.md and on /legal/licenses.
3. Attribution shown in-product on the Whiteboard toolbar with a link to the upstream repository.
4. No claim of endorsement or affiliation is made.
5. Excalidraw name, logo, and hosted-service branding are NOT used as Falcon Flowmira branding.

Transitive dependencies

Transitive npm dependencies retain their own licenses (MIT, ISC, BSD-2, BSD-3, Apache-2.0). None are copyleft. CI must run bunx license-checker --production --summary and fail on any GPL/AGPL/LGPL/SSPL license appearing in production dependencies.

Assets

The Excalidraw hand-drawn font (Virgil, Cascadia) is bundled inside the @excalidraw/excalidraw package and served via the reusable component. Falcon Flowmira does NOT extract or redistribute those font files outside the component.

No Excalidraw sample libraries from libraries.excalidraw.com are bundled by default. Library imports are user-initiated and validated per EXCALIDRAW_SECURITY_REVIEW.md.