andrsschultz cuts the CDN cord

A small but telling change: this fork stops phoning home to third-party servers every time a PDF loads.

infrastructuresecurity

Out of the box, the upstream codebase pulls PDF rendering fonts from a public CDN and web fonts from Google every time a user opens a document. That's a quiet dependency most teams never think about - until the CDN has a bad day, or a compliance reviewer asks why client documents are triggering calls to servers nobody vetted.

andrsschultz has pulled the PDF font set in-house so it ships with the app, and stripped the Google Fonts call entirely in favour of a system font fallback. The product now renders documents without needing the open internet at all. It's the kind of housekeeping that doesn't show up in a demo but matters the first time someone in legal asks where the data goes.

So what Worth a look for anyone deploying legal-AI tools into environments where outbound traffic to third-party CDNs is a procurement or compliance headache.

View this fork on GitHub →

Spotted something wrong? Or know the PR text has fresher detail than the writeup above?

Commits in this thread

1 commit from andrsschultz/mike, oldest first. Source extracted verbatim from the harvested git log.

SHA Subject Author Date
bef0c6f9 Localize frontend external assets asschultz 2026-04-30 ↗ GitHub

Capture this thread into my fork

Download a single Markdown prompt that tells Claude how to port every commit above into your working tree — adapting paths and structure to match your repo. Run it via claude -p < capture-thread-84.md from inside the repo you want the changes in.

⬇ Download capture-thread-84.md