=== Third-party software bundled with Licenzo ===

Licenzo is distributed under the GNU General Public License; see LICENSE.

The plugin bundles the third-party components listed below. Their copyright
notices and full licence texts are reproduced in the `licenses/` directory that
ships with this plugin, and are summarised here.

Last reviewed: 2026-09-02


-------------------------------------------------------------------------------
Apache ECharts 6.1.0
-------------------------------------------------------------------------------
Homepage : https://echarts.apache.org/
Source   : https://github.com/apache/echarts
Licence  : Apache License, Version 2.0
Full text: licenses/echarts/LICENSE
Notice   : licenses/echarts/NOTICE

Bundled into the compiled admin JavaScript (assets/admin/js/app.js) and used to
render the dashboard and product line charts.

Required NOTICE, reproduced verbatim per Apache-2.0 section 4(d):

    Apache ECharts
    Copyright 2017-2026 The Apache Software Foundation

    This product includes software developed at
    The Apache Software Foundation (https://www.apache.org/).

Apache ECharts additionally incorporates code from d3, under the ISC/BSD terms
reproduced at licenses/echarts/LICENSE-d3.


-------------------------------------------------------------------------------
ZRender 6.1.0
-------------------------------------------------------------------------------
Homepage : https://github.com/ecomfe/zrender
Licence  : BSD 3-Clause "New" or "Revised" License
Copyright: Copyright (c) 2017, Baidu Inc. All rights reserved.
Full text: licenses/zrender/LICENSE

The rendering engine underlying Apache ECharts. Bundled into the compiled admin
JavaScript as a dependency of ECharts. The BSD 3-Clause licence requires that the
above copyright notice, the list of conditions and the disclaimer be retained in
redistributions; they are reproduced in full at the path above.


-------------------------------------------------------------------------------
Laravel (Illuminate components)
-------------------------------------------------------------------------------
Homepage : https://laravel.com/
Source   : https://github.com/laravel/framework
Licence  : MIT License
Licence URL: https://github.com/laravel/framework/blob/master/LICENSE.md
Copyright: Copyright (c) Taylor Otwell

The PHP framework bundled at vendor/Licenzo/framework is derived from the Laravel
Illuminate components. It has been modified: the namespace was changed from
`Illuminate\` to `Licenzo\Framework\`, the database layer was rewritten to run on
WordPress's $wpdb rather than PDO, a WordPress-oriented date layer replaces Carbon,
and unused components were removed.

The MIT licence permits this modification and redistribution. The copyright notice
is reproduced above; the full permission notice is published upstream at the Licence
URL given above.

Portions of Support/Str.php derive from the Symfony project
(https://symfony.com/, MIT, Copyright (c) Fabien Potencier); that attribution is
retained in the file itself.

-------------------------------------------------------------------------------
Remixicon 4.8.0
-------------------------------------------------------------------------------
Homepage : https://remixicon.com/
Source   : https://github.com/Remix-Design/RemixIcon
Licence  : Apache License, Version 2.0
Full text: licenses/remixicon/LICENSE
Copyright: Copyright (c) 2017-2025 Remix Design

The icon set used throughout the admin interface. Bundled as web fonts at
assets/admin/fonts/remixicon-* and as CSS classes in the compiled admin stylesheet.

VERSION PIN — READ BEFORE UPGRADING. This dependency is pinned to exactly 4.8.0
(published 2025-12-30) in package.json, deliberately and without a caret range.

Remixicon 4.9.0 (2026-01-27) and later are published under the "Remix Icon License
v1.0", not Apache-2.0. That licence restricts redistribution of the icons as a
standalone collection, which is incompatible with the GPL under which this plugin is
distributed. Version 4.8.0 is the last release published under Apache-2.0; that grant
is irrevocable for the release it was published with, so this copy remains usable on
Apache-2.0 terms.

All 97 icons this plugin uses are present in 4.8.0 (verified 2026-09-02).

Do NOT change this to a caret range or bump the version without resolving the licence
question first. See project/REMEDIATION-1.2.1.md.

-------------------------------------------------------------------------------
Other bundled components
-------------------------------------------------------------------------------
The compiled admin, customer and WooCommerce bundles also incorporate the
following, all under the MIT licence, which permits redistribution provided the
copyright and permission notices are retained:

    Vue 3, Vue Router, Pinia   https://vuejs.org/           MIT
    Element Plus               https://element-plus.org/    MIT
    @vueuse/core               https://vueuse.org/          MIT
    lodash                     https://lodash.com/          MIT
    dayjs                      https://day.js.org/          MIT
    Tailwind CSS               https://tailwindcss.com/     MIT

Their licence texts are available in each project's repository. Where a bundler
has stripped an inline banner, that removal is not a waiver of the notice
requirement; the attribution above is provided in its place.


-------------------------------------------------------------------------------
Status
-------------------------------------------------------------------------------
This file covers every third-party component currently bundled in the distribution:
Apache-2.0 (ECharts, Remixicon), BSD-3-Clause (ZRender) and MIT (Laravel, Vue and
the front-end libraries listed above).

Open follow-up, tracked in project/REMEDIATION-1.2.1.md:

  * Remixicon is held at 4.8.0 by a deliberate version pin, because every later
    release changed licence. This is a holding position, not a permanent one — it
    freezes the dependency and forgoes upstream fixes. Revisit by either obtaining
    written permission from Remix Design to redistribute under the GPL, or migrating
    to a GPL-compatible icon set.

Note on package metadata: packages/Licenzo/framework/composer.json carries author
metadata inherited from the package it was forked from. The attribution that governs
is the one recorded in this file.

This inventory is complete as of the date at the top of this file. Re-check it
whenever a dependency is added, removed or upgraded.
