Fy2Press third-party components
===============================

Fy2Press is distributed under GPL-3.0-only. This notice lists the third-party components shipped in the FREE and PRO packages. The licence texts and attributions of the bundled JavaScript components are in `THIRD-PARTY-LICENSES.txt`.

## Distributed scope

Both packages ship the Composer autoloader under `vendor/`, the Freemius WordPress SDK under `vendor/freemius/` and the compiled JavaScript and CSS bundles of the administration interface. Composer manages no third-party PHP package: `composer.json` only requires `php >= 8.1`. In the table below, the Distributed column separates components whose code or data reaches the compiled bundles from build-time-only inputs. Development dependencies (Vite, Vitest, ESLint, TypeScript) are not distributed and are not listed.

## Production dependencies of the administration interface

Versions are the ones resolved by `admin-ui/pnpm-lock.yaml`.

| Package | Locked version | Licence | Distributed | GPL-3.0-only compatible |
| --- | --- | --- | --- | --- |
| `@iconify-json/carbon` | 1.2.25 | Apache-2.0 | yes | yes |
| `@iconify-json/fluent` | 1.2.55 | MIT | yes | yes |
| `@iconify-json/tabler` | 1.2.38 | MIT | yes | yes |
| `@types/qs` | 6.15.1 | MIT | no | yes |
| `axios` | 1.19.0 | MIT | yes | yes |
| `dayjs` | 1.11.21 | MIT | yes | yes |
| `element-plus` | 2.14.4 | MIT | yes | yes |
| `pinia` | 3.0.4 | MIT | yes | yes |
| `qs` | 6.16.0 | BSD-3-Clause | yes | yes |
| `vue` | 3.5.41 | MIT | yes | yes |
| `vue-i18n` | 11.4.8 | MIT | yes | yes |
| `vue-router` | 4.6.4 | MIT | yes | yes |

`@types/*` packages are type declarations erased at build time: they ship no bytes.

## Distributed PHP components

| Component | Licence | Role |
| --- | --- | --- |
| Composer autoloader (`vendor/autoload.php`, `vendor/composer/`) | MIT | PSR-4 class loading; its licence is `vendor/composer/LICENSE` |
| Freemius WordPress SDK 2.13.4 (`vendor/freemius/`) | GPL-3.0-only | opt-in, licensing, trials, updates and secure download of PRO code; distributed unmodified, with its licence in `vendor/freemius/LICENSE.txt` |

## Licence texts

`THIRD-PARTY-LICENSES.txt`, shipped in both packages, carries the licence texts and attributions generated from the module inventories of the FREE and PRO administration bundles under `admin-ui/licenses/` (the PRO inventory ships in the PRO package only). Those inventories separate emitted JavaScript, icon data and inputs removed at build time. Icon licences missing from the Iconify packages come from the matching upstream releases, with their source and SHA-256. In the PRO package, `node admin-ui/tools/write-third-party-licenses.mjs --check` verifies the lockfile, the compiled assets and the full content of `THIRD-PARTY-LICENSES.txt`.

## Shared translation catalogues

Both editions share the same gettext catalogues. The FREE package keeps the translations and source references of PRO features so that both editions use one message inventory. These inactive entries add size; they contain no executable PRO code.
