# W-001 Status

status: done
task: 建立依赖和许可证清单

## Evidence

- Matrix: `docs/web/dependency-matrix.md`
- Notices: `docs/web/third-party-notices.json`
- No CAD kernel or Bitbybit/OCCT dependency is included.
- Local runtime audit: `cd web && npm run check:local-deps` -> `local-dependencies-ok`.
- Browser assets are vendored under `web/app/src/vendor/` and
  `web/app/public/vendor/`; no CDN/remote ESM URL is present in source or `dist/`.
- Offline bootstrap check: `npm ci --offline --ignore-scripts` passed with the
  existing local npm cache.