NOTICE

Rama main · réplica de lectura del repositorio original.

Quilzo
Copyright 2026 Rashik Adhikari

Licensed under the Apache License, Version 2.0 (SPDX-License-Identifier:
Apache-2.0). See LICENSE.


Third-party material
--------------------

Quilzo's source and its binaries carry the following material by others,
each under its own licence.

* The Go standard library and runtime, compiled into every Quilzo binary,
  are by the Go Authors (https://go.dev), under the BSD 3-Clause licence:

    Copyright 2009 The Go Authors.

    Redistribution and use in source and binary forms, with or without
    modification, are permitted provided that the following conditions are
    met:

       * Redistributions of source code must retain the above copyright
    notice, this list of conditions and the following disclaimer.
       * Redistributions in binary form must reproduce the above
    copyright notice, this list of conditions and the following disclaimer
    in the documentation and/or other materials provided with the
    distribution.
       * Neither the name of Google LLC nor the names of its
    contributors may be used to endorse or promote products derived from
    this software without specific prior written permission.

    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
    A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
    OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
    DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

* Quilzo UI, the interface typeface (internal/admin/assets/fonts), is a
  Modified Version of Google Sans Flex, Copyright 2015 The Google Sans Flex
  Authors (https://github.com/googlefonts/googlesans-flex), under the SIL Open
  Font License 1.1. The licence and what was changed are beside the file, in
  OFL.txt and README.md, and both are carried in the binary.

* The interface icons (internal/admin/assets/icons and internal/icons) are
  Material Symbols by Google LLC
  (https://github.com/google/material-design-icons), under the Apache License
  2.0, whose text is beside them in LICENSE. Only each icon's SVG path is kept.

* The standard-library vulnerability records (internal/selfvuln/stdlib.json.gz)
  are from the Go vulnerability database (https://vuln.go.dev), by the Go
  Authors, under the Creative Commons Attribution 4.0 International licence
  (https://creativecommons.org/licenses/by/4.0/). They are changed: only the
  standard library's and toolchain's records are kept, and their long
  descriptions are left out.

* The FedRAMP 20x Key Security Indicators (internal/fedramp/ksi.json) are taken
  from FedRAMP's consolidated rules (https://github.com/FedRAMP/rules),
  published by the FedRAMP programme of the U.S. General Services
  Administration. That repository states no licence. They are used on the
  basis that they are a work of the United States Government, which is not
  subject to copyright in the United States (17 U.S.C. 105). The version and date of the rules used are
  recorded in the file.