Mando Gallegos Photography — third-party notices
Prepared October 20, 2026

Runtime dependency inventory (existing packages, no new installation):
react 19.2.7 — MIT — react-LICENSE.txt
react-dom 19.2.7 — MIT — react-dom-LICENSE.txt
scheduler 0.27.0 — MIT — scheduler-LICENSE.txt
@supabase/ssr 0.12.7 — MIT — supabase-ssr-LICENSE.txt
@supabase/supabase-js 2.117.3 — MIT — supabase-supabase-js-LICENSE.txt
@supabase/auth-js 2.117.3 — MIT — supabase-auth-js-LICENSE.txt
@supabase/functions-js 2.117.3 — MIT — supabase-functions-js-LICENSE.txt
@supabase/postgrest-js 2.117.3 — MIT — supabase-postgrest-js-LICENSE.txt
@supabase/realtime-js 2.117.3 — MIT — supabase-realtime-js-LICENSE.txt
@supabase/storage-js 2.117.3 — MIT — supabase-storage-js-LICENSE.txt
iceberg-js 0.8.1 — MIT — iceberg-js-LICENSE.txt
cookie 1.1.1 — MIT — cookie-LICENSE.txt
heic-to 1.5.2 — LGPL-3.0 — heic-to-LGPL-3.0.txt

Bootstrap: /BOOTSTRAP-LICENSE.txt
Fonts: /assets/fonts/cormorant-garamond-OFL.txt, /assets/fonts/Jost-OFL.txt, /assets/fonts/inter-OFL.txt

HEIC: existing detailed notice /assets/licenses/HEIC-NOTICE.txt is preserved.
HEIC decoder: the existing heic-to 1.5.2 distribution includes libheif 1.22.2 and code compiled to WebAssembly. LGPL-3.0 and GPL-3.0 texts are provided here.
heic-to repository: https://github.com/hoppergee/heic-to
Use the exact versioned package source below for this installation.
Exact installed package source: https://registry.npmjs.org/heic-to/-/heic-to-1.5.2.tgz
libheif source: https://github.com/strukturag/libheif/tree/v1.22.2
heic-to build instructions: https://github.com/hoppergee/heic-to/blob/master/README.md
The application imports heic-to/src/lib/libheif-without-unsafe-eval.js in its browser worker. Vite bundles that existing decoder; no upstream decoder modification was made in this milestone.
These notices and source references document the current distribution; they do not certify full source, build, relinking or patent-license compliance. Review those obligations before approving redistribution changes or a SaaS release. Photograph and testimonial permissions must be verified by the studio separately.