Spaces:
Running on Zero
Running on Zero
File size: 6,339 Bytes
ea53eb9 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 | LEGX toolkit — Document Integrity Verifier
Copyright (c) 2026 Gregor Koch.
Licensed under PolyForm Noncommercial 1.0.0 — see LICENSE.
Supplementary terms: ACCEPTABLE_USE.md and DISCLAIMER.md.
Commercial licensing: COMMERCIAL.md.
================================================================================
Third-party software incorporated, vendored, or required at runtime
================================================================================
The following third-party libraries are required to run the Software.
They retain their own copyright and licence. The Software's licence
does not override theirs; you must comply with each.
------------------------------------------------------------------------
gradio https://github.com/gradio-app/gradio
Apache License 2.0
spaces https://huggingface.co/docs/hub/en/spaces-zerogpu
Apache License 2.0
transformers https://github.com/huggingface/transformers
Apache License 2.0
accelerate https://github.com/huggingface/accelerate
Apache License 2.0
huggingface_hub https://github.com/huggingface/huggingface_hub
Apache License 2.0
kernels https://github.com/huggingface/kernels
Apache License 2.0
compressed-tensors https://github.com/neuralmagic/compressed-tensors
Apache License 2.0
torch https://pytorch.org
BSD 3-Clause
onnxruntime https://onnxruntime.ai
MIT
rapidocr-onnxruntime https://github.com/RapidAI/RapidOCR
Apache License 2.0
easyocr https://github.com/JaidedAI/EasyOCR
Apache License 2.0
pytesseract https://github.com/madmaze/pytesseract
Apache License 2.0
(wraps the Tesseract OCR binary, also Apache 2.0)
Pillow https://python-pillow.org
Historical Permission Notice and Disclaimer (HPND)
pypdf https://github.com/py-pdf/pypdf
BSD 3-Clause
reportlab https://www.reportlab.com
BSD-style
beautifulsoup4 https://www.crummy.com/software/BeautifulSoup
MIT
Jinja2 https://palletsprojects.com/p/jinja
BSD 3-Clause
------------------------------------------------------------------------
pypdfium2 https://github.com/pypdfium2-team/pypdfium2
Apache License 2.0 OR BSD-3-Clause (your choice)
Wraps PDFium (Google, BSD-3-Clause) — used for PDF rendering and
page-level text extraction in the detector path.
PDFium (vendored by pypdfium2)
BSD 3-Clause
------------------------------------------------------------------------
PyMuPDF (fitz) https://pymupdf.readthedocs.io
DUAL: GNU AGPL v3.0 OR Artifex Commercial Licence
PyMuPDF is referenced ONLY by the authoring-side modules
(`legal_doc_redteam/fixtures.py`) used to generate synthetic
red-team challenge documents. It is NOT shipped with the Document
Integrity Verifier Space; the export script
(`scripts/export_zerogpu_space.ps1`) deliberately excludes
`fixtures.py` and the entire authoring side. The detector path
uses pypdfium2 (Apache 2.0 / BSD-3) and pypdf (BSD-3) instead.
If you install the full LEGX package locally and use the
authoring side, you do so under PyMuPDF's AGPL v3 licence (or a
commercial PyMuPDF licence from Artifex Software, Inc., if your
use is commercial). Authoring is already restricted to
noncommercial use by the LEGX project's own PolyForm Noncommercial
licence, so the AGPL inheritance is moot for permitted use.
------------------------------------------------------------------------
System packages (declared in `hf_zerogpu_space/packages.txt`):
libreoffice Mozilla Public License 2.0 (LibreOffice core)
poppler-utils GPL v2 / GPL v3 (Poppler)
tesseract-ocr Apache License 2.0
When the Software is run on a host that uses these binaries via
subprocess (LibreOffice headless conversion, Poppler rendering,
Tesseract CLI), only their published interfaces are invoked; their
sources are not statically linked.
================================================================================
Model weights at runtime
================================================================================
The Software loads open model weights from Hugging Face at runtime.
Each carries its own licence; please read each model card before
production use.
nvidia/Gemma-4-26B-A4B-NVFP4 Gemma Terms of Use (Google) +
Gemma 4 Acceptable Use Policy
google/gemma-4-E4B-it Gemma Terms of Use (Google) +
Gemma 4 Acceptable Use Policy
nanonets/Nanonets-OCR-s See model card
allenai/olmOCR-2-7B-1025-FP8 Apache License 2.0
PaddlePaddle/PaddleOCR-VL See model card
openai/gpt-oss-20b Apache License 2.0
+ OpenAI usage policies
The Software does not redistribute these weights. It only references
their Hugging Face identifiers; weights are downloaded from
Hugging Face on first use.
================================================================================
Research sources for the static lexicon
================================================================================
The static prompt-injection lexicon (`legal_doc_redteam/injection_lexicon.py`
and `injection_lexicon_multilingual.py`) was assembled from public
research and freely-available databases. Each pattern carries an
inline `source` field; see those files for per-pattern attribution.
Notable sources include:
OWASP LLM Top 10 (LLM01:2025)
MITRE ATLAS — Adversarial Threat Landscape for AI Systems
Meta PurpleLlama / Llama-Prompt-Guard
USENIX Security 2024-2025 prompt-injection papers
NIST AI safety guidance
JailbreakHub / TrustAIRLab in-the-wild prompts
ChatGPT_DAN repository (0xk1h0)
HackAPrompt 2024-2025
Tensor Trust dataset
NVIDIA garak probes
deepset/prompt-injections dataset
Lakera, Snyk Labs, Unit 42, CrowdStrike, Microsoft published research
The patterns themselves are facts about how attacks are phrased and
are not subject to copyright. Attribution is preserved out of
academic courtesy and to make it easy for users to audit provenance.
|