AllStoic Third-Party Software & Data Notices
Reviewed: 26 September 2026

This notice records third-party components and data services used by the current AllStoic website. Upstream projects and providers retain their own copyrights, trademarks, licences and terms. CDN delivery does not alter an upstream software licence.

BUNDLED / BROWSER SOFTWARE

1. pdf-lib 1.17.1
   Purpose: local PDF processing.
   Licence: MIT.
   Project: https://github.com/Hopding/pdf-lib
   Existing bundled MIT licence notice and pinned-version controls are retained.

2. sql.js 1.13.0
   Purpose: local SQL Playground engine loaded in the browser.
   Licence: MIT for sql.js. SQLite itself is public domain.
   Project: https://github.com/sql-js/sql.js
   SQLite: https://www.sqlite.org/copyright.html

3. QRCode.js 1.0.0
   Purpose: browser QR-code generation.
   Licence: MIT.
   Project: https://github.com/davidshimjs/qrcodejs

4. JsBarcode 3.12.x
   Purpose: browser barcode generation.
   Licence: MIT.
   Project: https://github.com/lindell/JsBarcode

5. lamejs-fixed 1.2.2 / LAME-derived MP3 encoding code
   Purpose: browser MP3 encoding.
   Licence: LGPL-3.0-family terms apply to this separately loaded component / LAME-derived code.
   Package/project references:
   https://www.npmjs.com/package/lamejs-fixed
   https://github.com/zhuker/lamejs
   https://lame.sourceforge.io/
   AllStoic does not claim ownership of this component. Users should refer to the upstream project for corresponding source and licence information.

EXTERNAL DATA / API PROVIDERS CURRENTLY ENABLED

- Google Public DNS — DNS/Reverse DNS. Public service/API; provider terms and privacy policy apply.
  https://developers.google.com/speed/public-dns/terms
  https://developers.google.com/speed/public-dns/privacy
- Cloudflare 1.1.1.1 DNS-over-HTTPS — DNS propagation comparison. Public DoH endpoint; provider terms apply.
  https://developers.cloudflare.com/1.1.1.1/encryption/dns-over-https/make-api-requests/
- ipify — Public IP. Provider documents public API use without stated request limit and states that visitor information is not logged.
  https://www.ipify.org/
- RDAP.org — domain RDAP bootstrap service.
  https://about.rdap.org/
- MDN HTTP Observatory — public security-header scan API. Scan results/history may be public according to provider documentation.
  https://developer.mozilla.org/en-US/observatory/docs/faq
- Frankfurter — currency reference-rate API. Provider states the API is free for commercial use; underlying rates remain subject to each source provider's terms.
  https://frankfurter.dev/
- GDELT Project — Market News source. GDELT states its datasets are available for unlimited and unrestricted academic, commercial and governmental use, with citation/link requirements for use or redistribution.
  https://www.gdeltproject.org/about.html

NO LICENCE TRANSFER
Nothing in this notice grants rights beyond the rights provided by the relevant upstream licence, provider terms or applicable law.