# Third-party software and optional data

The plugin's original source is licensed under GPL-3.0-or-later. Bundled components preserve their original notices and licenses. No optional geolocation database is bundled.

## AWStats 8.0

- Upstream: https://github.com/eldy/AWStats
- Website: https://www.awstats.org/
- Pinned release: `AWSTATS_8_0`, https://github.com/eldy/AWStats/releases/tag/AWSTATS_8_0
- Source archive: https://codeload.github.com/eldy/AWStats/tar.gz/refs/tags/AWSTATS_8_0
- Archive SHA-256: `9cbd3600883a0e3a27b16fba8978b7e112cf991ef1317c0813aa8e76b306ef63`
- Included license: `awstats/LICENSE.TXT`, copied from upstream `docs/LICENSE.TXT`.

The AWStats main source notice permits GPL version 2 or, at the recipient's option, any later version. The pinned upstream license document contains GPL version 3. Source authorship/copyright and per-file notices remain in the included upstream files. This package combines the components under GPL version 3 or later as allowed by those notices.

The upstream command-line engine is bundled with unchanged source bytes under `awstats/awstats.txt`. The filename change avoids ordinary `.pl` CGI handling; the collector invokes it explicitly with Perl from a trusted host location outside WordPress. Unused `awdownloadcsv.pl` and `awredir.pl` entrypoints and upstream hidden metadata are omitted. Supporting libraries retain their upstream bytes. This plugin is independently developed and does not claim affiliation with the AWStats project.

## maxminddb 3.2.0 pure-Python reader

- Upstream: https://github.com/maxmind/MaxMind-DB-Reader-python
- Source archive: https://files.pythonhosted.org/packages/b9/34/0923a42cce579398890058775ea145214acf80dd3340c26cfb0f16989300/maxminddb-3.2.0.tar.gz
- Source SHA-256: `d28e0073fd1dd637c8b95947bc864b5625eca9f8f2db1538145e33b2a1cd4b92`
- License: Apache-2.0, included at `collector/vendor/LICENSE.maxminddb`.
- Pin and per-file hashes: `collector/geoip-reader.json`.

Only the package bootstrap is replaced to avoid distribution metadata and native-extension loading. The bootstrap is included as `collector/geoip-reader-bootstrap.py` and copied to `collector/vendor/maxminddb/__init__.py`; its pin documents the change. Pure reader, decoder, and support modules retain unchanged upstream source bytes. The module needs a separately supplied local MMDB and performs no external IP lookup.

## Optional DB-IP City Lite data

- Provider/downloads: https://db-ip.com/db/download/ip-to-city-lite
- License: Creative Commons Attribution 4.0 International, https://creativecommons.org/licenses/by/4.0/

The monthly MMDB is not included or automatically downloaded. A host administrator separately obtains it, accepts its terms, verifies checksums, and supplies the exact root-controlled path and SHA-256. Database estimates have reduced coverage/accuracy and do not identify a person's actual location. Pages using location results include the required provider link, [IP Geolocation by DB-IP](https://db-ip.com). This optional dataset is data separate from the plugin software; its license does not replace the software licenses above.
