# Third-party notices

This repository includes or derives from the following components. Their original copyright
headers and license files remain in the source tree where available.

- **Psiphon Android tunnel/VPN code** — GPL-3.0-or-later. Relevant source files retain the original notices.
- **Trilead SSH-2 for Java** — BSD-style license; copyright Trilead AG, ETH Zurich, and contributors.
- **JZlib** — BSD-style license; copyright JCraft, Inc. and contributors.
- **Bouncy Castle / Spongy Castle-derived cryptographic classes** — permissive Bouncy Castle license; original headers retained.
- **BadVPN tun2socks** — BSD 3-Clause-style license. Full text: `service/src/main/jni/badvpn/COPYING`.
- **lwIP** — BSD-style license. Full text: `service/src/main/jni/badvpn/lwip/COPYING`.
- **libancillary** — BSD-style license. Full text: `service/src/main/jni/libancillary/COPYING`.
- **Material icons and AndroidX/Material libraries** — respective Apache-2.0 and upstream licenses.

The top-level GPL license governs the combined sample without replacing the independent notices
and attribution requirements of these components.