# Local sliding CAPTCHA notices

This product uses these pinned Apache-2.0 components:

- `github.com/wenlng/go-captcha/v2` version `v2.0.5`, by Awen. Source: <https://github.com/wenlng/go-captcha/tree/v2.0.5>. The public `slide.NewDrawImage` drawing API renders the puzzle and verifies a position with `slide.Validate`.
- `github.com/wenlng/go-captcha-assets` version `v1.0.7`, Copyright (c) 2024 Awen <wengaolng@gmail.com>. Source: <https://github.com/wenlng/go-captcha-assets/tree/v1.0.7>. The compiled assets include background image sets `image-v2-1`, `image-v2-3`, `image-v2-5` and the package's puzzle masks, overlays and shadows from `resources/tiles`.

The complete Apache-2.0 license is reproduced in `APACHE-2.0.txt`. The original assets package license notice is reproduced unchanged in `go-captcha-assets-LICENSE.txt`. No CAPTCHA image is downloaded at runtime.

The web slider additionally uses these pinned MIT components:

- `go-captcha-react` version `1.0.5`, Copyright (c) 2021 Awen <wengaolng@gmail.com>. Source: <https://github.com/wenlng/go-captcha-react>. Its original license text is reproduced unchanged in `go-captcha-react-LICENSE.txt`.
- `classnames` version `2.5.1`, Copyright (c) 2018 Jed Watson. Source: <https://github.com/JedWatson/classnames/tree/v2.5.1>. Its original license text is reproduced unchanged in `classnames-LICENSE.txt`.

Our application chooses target/decoy coordinates, background and shape with Go `crypto/rand`, resizes the compiled backgrounds once and supplies them to the upstream drawing API. The upstream library source and assets are unmodified. This avoids its `Generate` method's fast pseudorandom coordinate selection.