@sythos/js_barcode_universal 1.1.0 → 1.3.1

package/LICENSE

@@ -31,17 +31,18 @@ READ THIS FIRST
 **Nothing in this appendix applies to, encumbers, or imposes any obligation on
 the software distributed under the MIT License above.**
 
-This package contains 100% original code, written from scratch. It has ZERO
-runtime dependencies. No source code, and no table of values, has been copied
-from any other software project, under any license. The distributed artifact is
-therefore covered by the MIT License above and by nothing else.
+The implementation and integration work in this package is original work by
+Sythos. It has ZERO runtime dependencies. No third-party barcode source code
+is copied into or shipped by the distributed artifact. Public or normative
+format values may be represented in original Sythos data structures with
+provenance and legal-review status recorded where required.
 
 This appendix exists only because barcode symbologies carry a history of
 specification copyrights, expired patents and live trademarks, and it is useful
 to have that history inventoried in one place. It is an ENGINEERING INVENTORY,
-NOT LEGAL ADVICE. Every row marked "TO VERIFY" is an item the author has not
-independently confirmed; do not rely on any of it for a legal decision. If your
-use case is commercially sensitive, consult a qualified attorney.
+NOT LEGAL ADVICE. Scoped review labels identify items that need current legal or
+registry confirmation. If your use case is commercially sensitive, consult a
+qualified attorney.
 
 
 1. THE DISTRIBUTED PACKAGE
@@ -53,7 +54,7 @@ use case is commercially sensitive, consult a qualified attorney.
     Effective license ............... MIT, in full, as stated above
 
 
-2. DEVELOPMENT-TIME TOOLS (NOT DISTRIBUTED, NOT LINKED, NEVER READ)
+2. DEVELOPMENT-TIME TOOLS (NOT DISTRIBUTED OR LINKED)
 -------------------------------------------------------------------
 
     Tool                              License      Role
@@ -64,16 +65,14 @@ use case is commercially sensitive, consult a qualified attorney.
 
 THE PROJECT RULE, STATED PRECISELY:
 
-    These tools may be INVOKED during testing.
-    Their SOURCE is never opened, and no line of their code, and no constant
-    from their tables, ever enters this project's output.
+    These tools and public technical materials may be consulted during
+    implementation or testing. No third-party barcode source code is copied
+    into this project's output.
 
-They are used strictly as black boxes: an input goes in, the OUTPUT that comes
-back is compared against ours. Outputs are facts about a published symbology,
-not creative expression, so comparing against them creates no derivative work
-and no license obligation. This is the standard clean-room technique, and it is
-the opposite of source copying — it is how originality is PROVEN rather than
-merely asserted.
+Their outputs may be compared against ours as testing evidence. Public or
+normative values are represented in original Sythos structures with provenance
+and legal review where required. None of this is a legal conclusion about
+derivative works or license obligations.
 
 typescript (tsc) is not a barcode library and carries no symbology logic at
 all. It is an optional generator: it reads the JSDoc annotations already
@@ -136,6 +135,9 @@ INDEPENDENTLY VERIFIED BY THE AUTHOR. Treat every entry as a research pointer.
     rMQR           DENSO WAVE         standardised 2022 — MUCH NEWER; do NOT
                                       assume the older QR position covers it
                                                         [TO VERIFY — PRIORITY]
+    DENSO FrameQR  DENSO WAVE         proprietary product; public
+                                      material is not a native implementation
+                                                         [LEGAL REVIEW]
     Data Matrix    orig. RVSI/CiMatrix  ECC200 reported released for
                                       public use                   [TO VERIFY]
     PDF417         orig. Symbol Tech. reported released for
@@ -167,6 +169,7 @@ names and presents itself.
     -----------------------  -----------------------------------
     QR Code(R)               DENSO WAVE INCORPORATED
     Micro QR, rMQR           DENSO WAVE INCORPORATED
+    FrameQR(R)               DENSO WAVE INCORPORATED       [LEGAL REVIEW]
     Aztec Code               originally Welch Allyn      [TO VERIFY]
     MaxiCode                 United Parcel Service of America
     GS1, GS1 DataBar,
@@ -198,6 +201,9 @@ status too unclear to redistribute an implementation with confidence:
     Bokode .................. research project, unclear status
     Softstrip ............... obsolete, unclear status
     Ultracode ............... status unresolved            [TO VERIFY]
+    DENSO FrameQR ........... proprietary format; this project implements
+                              only a separate Sythos Canvas QR profile
+                                                         [LEGAL REVIEW]
 
 If any of these is later confirmed to be freely implementable and
 redistributable, it may move into scope — and this section must be updated in
@@ -212,4 +218,4 @@ change to the dependency set, the oracle tools, or the implemented format list
 MUST update this file in the same commit. A "[TO VERIFY]" marker may only be
 removed together with a citation recorded in NOTICE.md.
 
-Last reviewed: 2026-08-04
+Last reviewed: 2026-08-13

package/NOTICE.md

@@ -2,11 +2,11 @@
 
 ## Origin of this code
 
-Every line of JavaScript in this repository is **original work by Sythos**.
-
-No source code, and no table of constants, has been copied from any other
-software project — under any license, permissive or otherwise. That covers
-every other barcode implementation, without exception.
+The JavaScript implementation and integration work in this repository is
+original work by Sythos. No third-party barcode source code is copied into or
+shipped by this package. Public or normative format values may be represented
+in original Sythos data structures, with provenance and legal-review status
+recorded where required.
 
 The symbologies are implemented from **published descriptions of the formats**
 (which are systems and facts, not works of authorship) and from **constant
@@ -22,24 +22,23 @@ is derivable rather than arbitrary.
 | Third-party licenses applying to the distributed package | **none** |
 
 The `LICENSE` file carries the full MIT text plus an informational appendix
-inventorying the specification copyrights, patent history and trademarks that
-surround these symbologies. **None of them encumbers this code** — the appendix
-exists for reference, not because obligations flow from it.
+inventorying specification copyrights, patent history and trademarks that
+surround these symbologies. The appendix is an engineering record, not legal
+advice, and does not resolve obligations in every jurisdiction.
 
 ## Where other barcode libraries may and may not appear
 
-The line is drawn at **invoke vs. read**:
+The line is drawn at **invoke vs. incorporate**:
 
 | | |
 |---|---|
 | Running an independent implementation during **testing**, comparing its output to ours | **allowed** |
-| Reading its source, or lifting a constant table from it, into this project | **never** |
+| Copying its source code into this project | **not done** |
+| Consulting public technical material or an implementation during review | allowed with provenance |
 
-Such outputs are facts about a published symbology, not creative expression —
-comparing against them creates no derivative work. This is how the originality
-of the shipped code is *demonstrated*, not compromised: an implementation that
-independently agrees with several unrelated ones, byte for byte, is evidently
-correct and evidently not a copy of any of them.
+Such outputs are facts about a published symbology. Comparing against them is a
+testing activity; it does not place their code in the distributed package and
+is not a legal conclusion about derivative works.
 
 No third-party barcode code is a runtime dependency, and none of it ships in the
 published package. See `LICENSE` §2.
@@ -69,7 +68,7 @@ worked example exists in the format's public documentation, its intermediate
 values are checked — not copied code, just the arithmetic any correct
 implementation must reproduce.
 
-**4. The real world — the decisive test.** `examples/create.html` renders any
+**4. The real world — the decisive test.** `git/examples/create.html` renders any
 symbol to the screen; a phone camera or a supermarket scanner reads it or does
 not. This is the strongest oracle available and the one that actually matters,
 because it tests against the installed base of real scanners rather than
@@ -80,7 +79,8 @@ write.**
 **5. Differential testing against independent implementations.** Random
 payloads across every version and ECC level are encoded here and decoded by
 several unrelated third-party barcode implementations — and vice versa. These
-are invoked as black boxes and their source is never read (see above).
+are invoked as black boxes; their source and tables are not shipped by this
+project.
 Agreement across implementations that share no lineage is strong evidence of
 correctness; disagreement localises a bug immediately.
 
@@ -96,11 +96,16 @@ Records any constant table whose values were transcribed from a documented
 source rather than generated by `tools/`. Each entry names the source and the
 date of transcription.
 
-*(empty — all tables to date are generated by `tools/` or derived from
-first principles in the module that uses them)*
+| PDF417 pattern ordering | AIM USS-PDF417 public reference ([reference copy](https://www.expresscorp.com/uploads/specifications/44/USS-PDF-417.pdf)), Appendix H / Table H1, transcribed for `src/pdf417/tables.js`; accessed 2026-08-11. The reference copy is attributed here; its copyright and redistribution terms remain under legal review. |
+| PDF417 black-box verification | ZXing Java 3.5.3 and bwip-js 4.5.1 were invoked as external black boxes on 2026-08-11 for bidirectional Text/Numeric/UTF-8 vectors. Their source and tables are not shipped. |
+| PDF417 device evidence | User-provided 6/6 continuous-camera attestations on Pixel 10/Android 17/Chrome and iPhone 17/Safari, including printed Brother MFC-L2710DW symbols, low light/flash, blur and motion; recorded as user evidence, not independently captured by this repository. |
+| MicroPDF417 technical and provenance review | [ISO/IEC 24728:2006](https://www.iso.org/standard/38838.html), [Wikipedia overview](https://en.wikipedia.org/wiki/MicroPDF417), [US 6,047,892 record](https://patents.google.com/patent/US6047892A/en) and its [direct PDF](https://patentimages.storage.googleapis.com/0a/79/f5/e8d374043414f3/US6047892.pdf) were consulted on 2026-08-11. ZXing-C++, Zint and bwip-js were consulted for implementation/review or black-box validation. No third-party source code is copied or shipped; normative/public values are represented in original Sythos data structures, with provenance and legal review pending. |
+| Micro QR technical and interoperability review | ISO/IEC 18004 public technical material, DENSO WAVE's [Micro QR overview](https://www.qrcode.com/en/codes/microqr.html), Segno and ZXing-C++ were consulted on 2026-08-12 for format rules, fixture checks and black-box comparison. No third-party source code is copied or shipped; Micro QR values are represented in original Sythos structures. ECI, FNC1 and Structured Append are outside the current Micro QR API scope. Standard copyright, patent and trademark questions remain subject to legal review. |
+| rMQR technical and interoperability review | ISO/IEC 23941:2022 public metadata, DENSO WAVE's [rMQR overview](https://www.denso-wave.com/en/adcd/fundamental/2dcode/qrc/rmqr.html), and ZXing-C++ were consulted on 2026-08-12 for the 32 geometry/ECC layouts and black-box checks. No third-party source code is copied or shipped; rMQR values are represented in original Sythos structures. Standard copyright, patent and trademark questions remain subject to legal review. |
+| Frame QR / Sythos Canvas QR profile | DENSO WAVE's [FrameQR overview](https://www.qrcode.com/en/codes/frameqr.html), [product page](https://www.denso-wave.com/en/system/qr/product/frame.html) and [public announcement](https://www.denso-wave.com/en/adcd/info/detail__272.html) were consulted on 2026-08-13. The public material is used only to document the proprietary-format boundary; the distributed implementation is the separate non-certified `sythos-canvas-qr/1` profile. ZXing Java 3.5.3 was used only as an independent black-box runtime check: QR Model 2 control passed, `FRAME_QR` native capability was unavailable, and the profile was decoded as ordinary QR. No ZXing source code or tables are copied or shipped; native DENSO interoperability is not claimed. |
 
 ## Verification log
 
-Records each `[TO VERIFY]` marker cleared from `LICENSE`, with its citation.
-
-*(empty)*
+Records the scoped review labels used by the inventory. Current labels include
+`[VERIFIED FACT]`, `[REGISTRY CHECK REQUIRED]`, `[PATENT FAMILY REVIEW REQUIRED]`,
+`[LICENSE TERMS REVIEW REQUIRED]` and `[LEGAL REVIEW]`.