CustosXI - Third-Party Notices (summary)
=====================================
Full attribution: https://custosxi.com/third-party/
In-app viewer: Settings → About → View Third-Party Licenses
Authoritative build list: THIRD_PARTY_LICENSES.txt shipped with your installer

NOT INCLUDED IN THE CUSTOSXI INSTALLER (user installs separately)
-----------------------------------------------------------------
- Npcap - packet capture driver; required for live capture via SharpPcap
  Install from https://npcap.com/ (WinPcap API-compatible mode recommended)
- Suricata IDS/IPS - optional external integration; independent GPL v2 project
  CustosXI reads eve.json when you configure paths; Suricata is not distributed with CustosXI
- PostgreSQL server - optional database backend; only the Npgsql client library is bundled
- MaxMind GeoLite2 database - optional; download via app add-ons or place .mmdb at build time

BUNDLED WITH THE INSTALLER (application + runtimes + libraries)
----------------------------------------------------------------
Runtimes (when applicable to your setup package):
- .NET 10 runtime - self-contained with CustosXI publish
- Windows App SDK Runtime 1.8 (x64) - installed by CustosXI-Setup.exe when missing

Open-source libraries (non-exhaustive; transitive NuGet deps may also apply):
- SharpPcap - LGPL 3.0 - packet capture
- PacketDotNet - MIT - packet parsing (transitive via SharpPcap)
- System.Data.SQLite.Core - SQLite / System.Data.SQLite terms
- Microsoft.Data.Sqlite - MIT
- System.Data.SqlClient - MIT
- Npgsql - PostgreSQL License - PostgreSQL client only
- Microsoft.Extensions.Hosting / Hosting.WindowsServices - MIT
- System.ServiceProcess.ServiceController - MIT
- Windows App SDK / WinUI 3 - MIT
- CommunityToolkit.WinUI.Collections - MIT
- MaxMind.GeoIP2 - Apache 2.0 - GeoIP reader APIs (database separate)

Bundled assets:
- Leaflet (leaflet.js / leaflet.css) - BSD 2-Clause
- World map GeoJSON (world.geo.json) - upstream terms apply
- Default port/service reference data - IANA-style reference, not live nmap

OPTIONAL - USER-CONFIGURED DOWNLOADS OR ONLINE SERVICES
-------------------------------------------------------
Only used when you enable add-ons or enter API keys in Settings:
- AbuseIPDB, ThreatFox, MISP exports, public blocklists (Spamhaus, URLhaus, StevenBlack, etc.)
- ip-api.com, ipinfo.io, WHOIS/RDAP hosts
- OpenStreetMap map tiles (traceroute map)
- ASN database (iptoasn.com), JA3/JA4 fingerprint lists, Suricata rules feeds
Each provider's terms and quotas apply; you are responsible for compliance.

BUILD-TIME ONLY (not shipped inside the application)
----------------------------------------------------
- WiX Toolset - MS-RL - MSI/installer build

WEBSITE INFRASTRUCTURE (custosxi.com)
-------------------------------------
- Cloudflare - hosting, CDN, security
- PayPal - voluntary donations (external checkout)

See the application “View Third-Party Licenses” for the build-specific attribution list.