# Included third-party resources

## Plugin license

KG rEstate is distributed under GPL-2.0-or-later, as stated in its header and readme.
The complete GNU GPL version 2 text is provided in `LICENSE.txt`.
Third-party component licenses are retained separately. This notice does not
change their terms or notices, or grant trademark rights.

## Leaflet 1.9.4

- Project and distribution: https://leafletjs.com/download.html
- Source for this version: https://github.com/Leaflet/Leaflet/tree/v1.9.4
- License: BSD 2-Clause. The complete text, including the authors' notices, is retained in `public/licenses/leaflet-LICENSE.txt`.
- JavaScript used: `public/js/leaflet.min.js`.
- CSS used: `public/css/leaflet.min.css` (the file is readable despite retaining `.min` in its name).
- Supporting images: `public/css/images/`, alongside the CSS as required by the official distribution. Includes standard/retina icons, a shadow and layer controls.
- Additional readable source: `public/js/leaflet-src.js`; it is not enqueued or executed alongside the minified file.
- Official source map: `public/js/leaflet.js.map`. References to individual modules correspond to the linked repository's `src` tree; that complete tree is not bundled. The combined readable source is included in the file listed above.

The pre-existing JS/CSS files differ from the official distribution only in their BOM encoding and line endings. After normalization for comparison, they match the hashes published by Leaflet. The library was not replaced with a newer version.

The images and license come from the official `v1.9.4` tag. The combined source and its map come from the `leaflet@1.9.4` package on unpkg, a CDN linked by Leaflet. The combined source was checked against the integrity hash published by the project. Provenance and SHA-256 hashes for the eight added files are recorded in `_development/leaflet-assets.json` for package review; this development file is not needed in production.

## KG rEstate sample illustrations

`public/images/sample-property.svg` and `public/images/sample-map.svg` are original local illustrations. Their notice is provided in `public/images/LICENSE.txt`.

## Embedded SVG icons

Interface drawings correspond to the following catalogs with pinned versions.
Colors, sizes and presentation attributes may have been adapted. Complete
license texts, including copyright notices and disclaimers, are retained:

- Feather Icons 4.29.2, MIT, Cole Bemis. License:
  `public/licenses/feather-LICENSE.txt`. Source:
  https://github.com/feathericons/feather/tree/v4.29.2
  Compared catalog: official feather-icons@4.29.2 package, dist/icons/*.svg.
- Lucide Static 0.468.0, ISC, Lucide Contributors, acknowledging the portions
  inherited from Feather (MIT). License:
  `public/licenses/lucide-LICENSE.txt`; Feather's MIT text is also retained.
  Source: https://github.com/lucide-icons/lucide/tree/0.468.0
  Compared catalog: official lucide-static@0.468.0 package, icons/*.svg.
- Bootstrap Icons 1.11.3, MIT, The Bootstrap Authors. License:
  `public/licenses/bootstrap-icons-LICENSE.txt`. Source:
  https://github.com/twbs/icons/tree/v1.11.3/icons
  SVGs for Instagram, TikTok, Facebook, YouTube, LinkedIn, X, Telegram and WhatsApp.
  Only their drawings are embedded; Bootstrap CSS, fonts and JS are not bundled.

## Local SVG flags

The 27 flags in `public/images/flags/` are copies of the 4:3 SVGs from
flag-icons 7.2.3, MIT, Panayiotis Lipiridis. Complete license:
`public/licenses/flag-icons-LICENSE.txt`. Source:
https://github.com/lipis/flag-icons/tree/v7.2.3/flags/4x3

Forms reference these local files. The selector retains its 26 existing
options, with the United States/Canada sharing one option; the helper also
supports the CA flag. No JS package, CSS, font or external service is loaded
to draw the flags.

## Plugin compositions and traceability

Map pins and image placeholders combine Feather components with plugin
colors, gradients, geometric shapes and text. The neutral fallback text and
rectangle do not contain an imported illustration or emblem. The two sample
illustrations have their own notice as described above.

Complete catalogs are used only as reference data; their JavaScript packages
are not distributed or executed. Variants with unknown provenance were
replaced with drawings from these sources or documented compositions.
The development inventory `_development/graphics-provenance.json` records
pinned sources, SHA-256 hashes, licenses and every SVG occurrence. It includes
geometry matches that do not establish who initially incorporated a drawing;
third-party drawings are not attributed to the site owner. Development files
and private catalogs are excluded from the installation package.

Platform brands identify destinations of links configured by the site owner.
Their respective owners retain their rights; the software license does not
imply sponsorship or general permission to use a trademark. This inventory
covers resources bundled by the plugin; owner-selected photos, avatars and
watermarks require their own rights. This technical inventory is not presented
as legal certification or approval by WordPress.org.
