# Third-Party Notices

NeverLast Security Lite does not bundle third-party PHP, JavaScript, CSS,
fonts, images, malware signatures, rules or executable code. Every file in the
plugin package is original work distributed under the GPL (see `LICENSE`).

The plugin uses public WordPress APIs provided by the host WordPress
installation. It can download data, never code, from external services, and
only after an administrator enables each one; all are off by default:

- the official crawler IP lists of DuckDuckGo, Ahrefs and UptimeRobot, and
- WordPress.org core and plugin checksums.

The "External services" section of `readme.txt` lists every endpoint, when it
is contacted, what is sent, and the terms and privacy links.

WordPress and its bundled libraries retain their respective copyrights and
licences. They are not redistributed inside this plugin package.
