MediaPipe, self hosted by Drape Test
====================================

This folder holds unmodified copies of Google's MediaPipe files, served from
this site so the app makes no third party requests.

Copyright The MediaPipe Authors.
Licensed under the Apache License, Version 2.0 (the "License"); you may not
use these files except in compliance with the License. A copy of the License
is in LICENSE in this folder, and at http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
License for the specific language governing permissions and limitations under
the License.

Files and where they came from (fetched 7 Oct 2026, not modified):

  vision_bundle.mjs
    npm package @mediapipe/tasks-vision 1.1.0 ("license": "Apache-2.0" in its
    package.json; the package ships no LICENSE file, so LICENSE here is the
    one from https://github.com/google-ai-edge/mediapipe/blob/master/LICENSE)
    sha256 9d5fc9ef74b22329cf9aa88dc543956d192b8c254210b187271614713eb5b10c

  wasm/vision_wasm_internal.js
    sha256 7c652617b5bef832f42878ce8c5f752b0724bca6054e4bc1013a37d4b1949723
  wasm/vision_wasm_internal.wasm
    sha256 782eda3ec1f414fdb4f1d66a8b59093eb4d5ab437e06117796abf05962d68eef
  wasm/vision_wasm_nosimd_internal.js
    sha256 510fc70a170eb8b46767a7abab2af89a7a8341fa5b3ebfb8a5de41a79b7fa9df
  wasm/vision_wasm_nosimd_internal.wasm
    sha256 b802041d105876865d6a0806f2ff7c4419a7f1b80bc01340fe36e759c2030011
    Same npm package. The nosimd pair is only loaded by browsers without
    WebAssembly SIMD. The _module_ variants are not used and not copied.

  models/face_landmarker.task
    https://storage.googleapis.com/mediapipe-models/face_landmarker/face_landmarker/float16/1/face_landmarker.task
    sha256 64184e229b263107bc2b804c6625db1341ff2bb731874b0bcc2fe6544e0bc9ff
    A bundle of three models, each "LICENSED UNDER Apache License, Version
    2.0" in its model card:
      MediaPipe BlazeFace (Short Range)
        https://storage.googleapis.com/mediapipe-assets/MediaPipe%20BlazeFace%20Model%20Card%20(Short%20Range).pdf
      MediaPipe Face Mesh V2
        https://storage.googleapis.com/mediapipe-assets/Model%20Card%20MediaPipe%20Face%20Mesh%20V2.pdf
      Blendshape V2
        https://storage.googleapis.com/mediapipe-assets/Model%20Card%20Blendshape%20V2.pdf

Usage logging: tasks-vision 1.1.0 tries to POST usage logs (task name and
timings, no images) to odml.pa.googleapis.com. Drape Test blocks that request
twice: js/guard.js drops any request that is not a GET to this site, and the
Content-Security-Policy (connect-src 'self') refuses it as well.

To update: npm pack @mediapipe/tasks-vision@<version>, copy the same files,
update MP_VERSION in js/face.js and the hashes above.