Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
Upstream-Name: pepsi
Upstream-Contact: Christian Grothoff <grothoff@gnunet.org>
Source: https://pepsi.taler.net/
Comment: Pepsi is Copyright (C) 2026 GNUnet e.V. and was written by Christian
 Grothoff and Okan Koç (see AUTHORS).  Pepsi as a whole is AGPL-3+.  The
 third-party material in it keeps its own holders and licences; it is listed
 below and in the "Imported material" table of vendor/PEPSI-VENDORING.md, and
 tests/vendoring_manifest.rs checks that every row of that table has a
 matching stanza here with the same licence.  GPL version 3 section 13 permits
 combining a GPL-3 work with an AGPL-3 one into a single combined work; AGPL-3
 section 13 is the mirror image.  Apache-2.0 is one-way compatible with GPL-3
 and AGPL-3.  The full licence texts are in the source's LICENSES/ directory.

Files: *
Copyright: 2026 GNUnet e.V.
License: AGPL-3+

Files: pepsi-list/src/help_postorius.rs
Copyright: 2012-2023 Free Software Foundation, Inc.
 2026 GNUnet e.V.
License: GPL-3+
Comment: The one-line explanations of the mailing-list settings are the
 help_text strings of Postorius (the GNU Mailman 3 web interface), tag v1.3.13,
 extracted by contrib/extract-postorius-help.py.  Modified by the Pepsi project
 in 2026: HTML markup removed, the program named as the actor changed from
 Mailman to Pepsi, horizontal whitespace collapsed and one upstream typo
 repaired.  The file's own header states this, as GPL version 3 section 5(a)
 requires.

Files: templates/list-*
 templates/domain-*
Copyright: Free Software Foundation, Inc.
 2026 GNUnet e.V.
License: GPL-3+
Comment: The mailing-list notice templates, imported from GNU Mailman 3.3.10
 (src/mailman/templates/<lang>/) by contrib/import-mailman-templates.py and
 modified on import; templates/PROVENANCE states how.  Every other file in
 templates/ is Pepsi's own.

Files: pepsi-common/tests/data/mime/upstream/*
Copyright: 2007-2023 Free Software Foundation, Inc.
License: GPL-3+
Comment: Message fixtures taken unmodified from the test suites of GNU Mailman
 3.3.10 and HyperKitty 1.3.12 (HyperKitty's files: Author: Aurelien Bompard
 <abompard@fedoraproject.org>).

Files: pepsi-stage-list-bounce/src/detect.rs
 pepsi-stage-list-bounce/src/detect_patterns.rs
Copyright: 2004-2026 Barry Warsaw
 2026 GNUnet e.V.
License: Apache-2.0
Comment: Bounce detectors ported (translated from Python to Rust) from
 flufl.bounce 5.0.1.  The translation is Pepsi's work, and the combination
 with the rest of Pepsi is AGPL-3+; the ported detectors stay Apache-2.0.

Files: pepsi-stage-list-bounce/tests/data/bounces/*
Copyright: 2004-2026 Barry Warsaw
 2026 GNUnet e.V.
License: Apache-2.0
Comment: The .txt bounce fixtures are flufl.bounce 5.0.1's, byte for byte.  The
 .expect files restate upstream's DETECTORS test table in a format of Pepsi's
 own.

Files: vendor/mail-auth/*
Copyright: 2020 Stalwart Labs LLC <hello@stalw.art>
License: Apache-2.0 or Expat
Comment: A source copy of the mail-auth crate 0.13.3 from crates.io, carrying
 the small patch in vendor/mail-auth/pepsi-changes.patch (by the Pepsi
 project, offered under the crate's own licence); see
 vendor/PEPSI-VENDORING.md.

Files: vendor/hickory-net/*
Copyright: 2015 The Hickory DNS Developers
           2017 Google LLC
License: Apache-2.0 or Expat
Comment: A source copy of the hickory-net crate 0.26.3 from crates.io, carrying
 the small patches in vendor/hickory-net/pepsi-changes.patch,
 pepsi-content-type.patch, pepsi-authority-port.patch and
 pepsi-authority-ipv6.patch (by the Pepsi project, offered under the
 crate's own licence); see
 vendor/PEPSI-VENDORING.md.

Files: pepsi-setup/db/versioning.sql
Copyright: 2010 Hubert depesz Lubaczewski
License: BSD-3-clause
Comment: From https://gitlab.com/depesz/Versioning (install.versioning.sql).

Files: pepsi-crypto/tests/data/pkits/*
Copyright: none (a work of the United States Government)
License: public-domain
Comment: Certificates and CRLs of the NIST Public Key Interoperability Test
 Suite, 2011 edition (https://csrc.nist.gov/projects/pki-testing), unmodified.

Files: pepsi-common/data/common-passwords/*
Copyright: 2018 Daniel Miessler
License: Expat
Comment: The one million most frequent passwords of Mark Burnett's
 public-domain "ten million passwords" set, as extracted by SecLists
 (Passwords/Common-Credentials/xato-net-10-million-passwords-1000000.txt),
 filtered to entries of ten characters or more, lower-cased and sorted.
 PROVENANCE in that directory gives the exact pipeline.

Files: pepsi-common/src/casefold.rs
Copyright: 1991-2026 Unicode, Inc.
License: Unicode-3.0
Comment: Generated by contrib/import-unicode-casefold.py from the Unicode
 Character Database file CaseFolding.txt, version 18.0.0.

Files: pepsi-common/src/confusables.rs
Copyright: 1991-2026 Unicode, Inc.
License: Unicode-3.0
Comment: Generated by contrib/import-unicode-confusables.py from the Unicode
 Security Mechanisms data file confusables.txt (UTS #39), version 18.0.0.

Files: vendor/taler-rust/*
Copyright: 2024-2026 Taler Systems SA
License: AGPL-3+
Comment: GNU Taler's Rust libraries, a git submodule of the source tree.

Files: templates/COPYING
 templates/PROVENANCE
 pepsi-common/tests/data/mime/upstream/COPYING
 pepsi-common/tests/data/mime/upstream/PROVENANCE
 pepsi-stage-list-bounce/tests/data/bounces/PROVENANCE
 pepsi-crypto/tests/data/pkits/README.txt
 pepsi-crypto/tests/data/pkits/make-manifest.py
 pepsi-crypto/tests/data/pkits/manifest.txt
 pepsi-common/data/common-passwords/COPYING
 pepsi-common/data/common-passwords/PROVENANCE
Copyright: 2026 GNUnet e.V.
License: AGPL-3+
Comment: Pepsi's own notice, provenance and tooling files inside directories
 of imported material.

License: AGPL-3+
 PEPSI is free software; you can redistribute it and/or modify it under the
 terms of the GNU Affero General Public License as published by the Free
 Software Foundation; either version 3, or (at your option) any later version.
 .
 PEPSI is distributed in the hope that it will be useful, but WITHOUT ANY
 WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
 A PARTICULAR PURPOSE.  See the GNU Affero General Public License for more
 details.
 .
 You should have received a copy of the GNU Affero General Public License along
 with PEPSI; see the file COPYING.  If not, see <http://www.gnu.org/licenses/>.
 .
 On Debian systems, the full text of the GNU Affero General Public License
 version 3 can be found in the file /usr/share/common-licenses/AGPL-3.0.

License: GPL-3+
 This program is free software: you can redistribute it and/or modify it under
 the terms of the GNU General Public License as published by the Free Software
 Foundation, either version 3 of the License, or (at your option) any later
 version.
 .
 This program is distributed in the hope that it will be useful, but WITHOUT
 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
 details.
 .
 You should have received a copy of the GNU General Public License along with
 this program.  If not, see <http://www.gnu.org/licenses/>.
 .
 On Debian systems, the full text of the GNU General Public License version 3
 can be found in the file /usr/share/common-licenses/GPL-3.

License: Apache-2.0
 Licensed under the Apache License, Version 2.0 (the "License");
 you may not use this file except in compliance with the License.
 You may obtain a copy of the License at
 .
 http://www.apache.org/licenses/LICENSE-2.0
 .
 Unless required by applicable law or agreed to in writing, software
 distributed under the License is distributed on an "AS IS" BASIS,
 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 See the License for the specific language governing permissions and
 limitations under the License.
 .
 On Debian systems, the full text of the Apache License, Version 2.0 can be
 found in the file /usr/share/common-licenses/Apache-2.0.

License: Expat
 Permission is hereby granted, free of charge, to any
 person obtaining a copy of this software and associated
 documentation files (the "Software"), to deal in the
 Software without restriction, including without
 limitation the rights to use, copy, modify, merge,
 publish, distribute, sublicense, and/or sell copies of
 the Software, and to permit persons to whom the Software
 is furnished to do so, subject to the following
 conditions:
 .
 The above copyright notice and this permission notice
 shall be included in all copies or substantial portions
 of the Software.
 .
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
 ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
 TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
 PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
 SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
 CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
 OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
 IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
 DEALINGS IN THE SOFTWARE.

License: BSD-3-clause
 Copyright (C) 2010 Hubert depesz Lubaczewski
 .
 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions
 are met:
 .
 * Redistributions of source code must retain the above copyright
 notice, this list of conditions and the following disclaimer.
 .
 * Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the distribution.
 .
 * Neither the name of Hubert depesz Lubaczewski's Organization
   nor the names of its contributors may be used to endorse or
   promote products derived from this software without specific
   prior written permission.
 .
 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE
 FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

License: public-domain
 The NIST PKITS test data is a work of the United States Government and is
 not subject to copyright protection in the United States (17 U.S.C. 105).

License: Unicode-3.0
 UNICODE LICENSE V3
 .
 COPYRIGHT AND PERMISSION NOTICE
 .
 Copyright © 1991-2026 Unicode, Inc.
 .
 NOTICE TO USER: Carefully read the following legal agreement. BY
 DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
 SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE
 TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT
 DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE.
 .
 Permission is hereby granted, free of charge, to any person obtaining a
 copy of data files and any associated documentation (the "Data Files") or
 software and any associated documentation (the "Software") to deal in the
 Data Files or Software without restriction, including without limitation
 the rights to use, copy, modify, merge, publish, distribute, and/or sell
 copies of the Data Files or Software, and to permit persons to whom the
 Data Files or Software are furnished to do so, provided that either (a)
 this copyright and permission notice appear with all copies of the Data
 Files or Software, or (b) this copyright and permission notice appear in
 associated Documentation.
 .
 THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
 KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
 THIRD PARTY RIGHTS.
 .
 IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE
 BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
 OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
 WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
 ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA
 FILES OR SOFTWARE.
 .
 Except as contained in this notice, the name of a copyright holder shall
 not be used in advertising or otherwise to promote the sale, use or other
 dealings in these Data Files or Software without prior written
 authorization of the copyright holder.
