Third-party JavaScript bundled with cloudg
==========================================

The HTML report (report.html) inlines Chart.js and D3 when
report.inline_js is true (the default), so the report works without
network access. Those two files are the unmodified builds published on
npm; their own licence headers are kept. The isometric map's two drawing
engines below have no CDN build and are always inlined.

chart.umd.js
  Chart.js 4.4.0, file dist/chart.umd.js of the npm package chart.js@4.4.0
  https://www.chartjs.org
  Copyright (c) 2014-2022 Chart.js Contributors
  MIT License, see LICENSE-chartjs.md
  sha256 321e3a3fa98da4aaa957d10be57cbb514de0989eed8f9d726b5d05902cd01904

d3.min.js
  D3 7.9.0, file dist/d3.min.js of the npm package d3@7.9.0
  https://d3js.org
  Copyright 2010-2023 Mike Bostock
  ISC License, see LICENSE-d3.txt
  sha256 f2094bbf6141b359722c4fe454eb6c4b0f0e42cc10cc7af921fc158fceb86539

iso-kit.js
  Anatomy iso-kit, file kit/iso-kit.mjs of https://github.com/wheresryan22/anatomy
  Copyright (c) 2026 Ryan
  MIT License, see LICENSE-anatomy.txt
  The module is wrapped as IsoKit for a classic script element: its
  "export" keywords are removed, and the two script tags inside one
  string are written "\x3cscript" and "<\/script>", which are the same
  characters at run time. Source sha256
  6d3ecc725d30c3b0346da309cf61dfa5a65017c23620bbd4093009d4fb104018

hairline-kernel.js
  Hairline kernel, the src/core build of @lucasmarkes/hairline 0.5.1
  https://hairline.lucasmarkes.com
  Copyright (c) 2026 Lucas Marques
  MIT License, see LICENSE-hairline.txt
  Unmodified. sha256
  47ebec7647174e04e4f59c0305277c2a1dab83a763676946b17fa1694e7952fe

To update a library, replace the file with the build from the new npm
release, update this notice, and update the version, CDN URL and SRI hash
in cloudg/renderers/html_report.py (tests/test_html_report.py checks that
the hashes match the files).
