# Third party materials

OPRP's original materials are licensed under [Apache 2.0](LICENSE). That license does not replace third-party licenses or grant general trademark rights. Attribution for OPRP is recorded in [NOTICE](NOTICE).

| Material | Source and notice |
| --- | --- |
| HL7 FHIR R4 definitions and copied status/value-set resources | Original resource metadata/notices remain in `profiles/terminology/definitions`. The [FHIR R4 license page](https://hl7.org/fhir/R4/license.html) describes the specification's CC0 terms and separate third-party terminology/trademark obligations. |
| HL7 terminology ActCode resource | Copied from the pinned `hl7.terminology.r4#7.1.0` package with its resource metadata/copyright retained. Consult the originating package/resource terms for reuse. |
| Cairo font | Bundled font and original SIL Open Font License in [website/assets/OFL.txt](website/assets/OFL.txt). |
| Convey logo/favicon assets | Existing Convey website assets used for this official project. Convey names/logos identify the publisher; software licensing does not grant trademark rights. |
| Website framework and components | Next.js, React, Tailwind CSS and their dependencies retain their upstream licenses. shadcn/ui component source is MIT-licensed; its original notice is included in [website/THIRD_PARTY_LICENSES/shadcn-ui-LICENSE](website/THIRD_PARTY_LICENSES/shadcn-ui-LICENSE). Dependencies are pinned in the website package lock. |
| Markdown renderer | `markdown-it` and its transitive dependencies are pinned in `package-lock.json`; see the [upstream license](https://github.com/markdown-it/markdown-it/blob/master/LICENSE). It runs at documentation build time and is not a hosted patient-data service. |
| Native cryptographic/runtime dependencies | Node/OpenSSL, Python `pqcrypto`/`cryptography`, .NET and build tooling retain their own licenses. See [runtime evaluation](docs/cryptography-evaluation.md) and their upstream distributions. |
| HL7 validator and US Core package | Setup downloads separately hash-verified official artifacts. The source release does not embed the validator JAR or the full dependency cache. |

HL7 and FHIR are registered trademarks of Health Level Seven International. OPRP's references to the HL7 FHIR standard do not imply HL7 endorsement or redefine FHIR conformance. Broad SNOMED CT, LOINC, RxNorm and UCUM catalogues are not supplied by this release; implementers must obtain appropriate vocabulary materials and rights for their deployment.