W-001 Status

status: done task: 建立依赖和许可证清单

Evidence

Matrix: docs/web/dependency-matrix.md
Notices: docs/web/third-party-notices.json
No CAD kernel or Bitbybit/OCCT dependency is included.
Local runtime audit: cd web && npm run check:local-deps -> local-dependencies-ok.
Browser assets are vendored under web/app/src/vendor/ and web/app/public/vendor/; no CDN/remote ESM URL is present in source or dist/.
Offline bootstrap check: npm ci --offline --ignore-scripts passed with the existing local npm cache.