# Runtime dependencies and license audit

ABeCe Booking is GPL-2.0-or-later, copyright ABeCe s.r.o. The following production Composer packages are distributed as source in the ZIP. Their individual license files remain included.

| Package | Locked version | License | Compatibility |
| --- | --- | --- | --- |
| bacon/bacon-qr-code | v3.1.1 | BSD-2-Clause | GPL-compatible permissive license |
| freemius/wordpress-sdk | 2.13.5 | GPL-3.0-only | Distributed under GPLv3, permitted by our GPL-2.0-or-later license |
| composer/pcre | 3.4.0 | MIT | GPL-compatible permissive license |
| dasprid/enum | 1.0.7 | BSD-2-Clause | GPL-compatible permissive license |
| maennchen/zipstream-php | 3.1.1 | MIT | GPL-compatible permissive license |
| markbaker/complex | 3.0.2 | MIT | GPL-compatible permissive license |
| markbaker/matrix | 3.0.1 | MIT | GPL-compatible permissive license |
| phpoffice/phpspreadsheet | 3.10.8 | MIT | GPL-compatible permissive license |
| psr/simple-cache | 3.0.0 | MIT | GPL-compatible permissive license |

React and React DOM are MIT licensed; WordPress supplies them via `wp.element` rather than bundled npm modules. `@wordpress/i18n` is GPL-2.0-or-later and supplied by WordPress. Installed TypeScript/Vite and other build-only dependencies are excluded from the install ZIP; pinned package metadata and preferred source/build inputs are bundled under source/. No production Composer dev package is installed.

The GNU license list identifies the Expat/MIT and modified two-clause BSD licenses as compatible with the GPL: https://www.gnu.org/licenses/license-list.html#Expat and https://www.gnu.org/licenses/license-list.html#FreeBSD . No incompatible runtime package was found. This is a dependency inventory and technical distribution audit, not a legal warranty.

Our own source remains GPL-2.0-or-later; a combined distribution with the GPLv3-only SDK uses the GPLv3 option. Keep the SDK license and its bundled third-party notices intact. This does not relicense the SDK under GPLv2. See https://www.gnu.org/licenses/gpl-faq.html#v2v3Compatibility .

The install ZIP includes exact edition-specific preferred TypeScript/CSS and pinned build inputs under source/. A matching corresponding-source archive also contains the release tools and effective Composer inputs; production dependency PHP sources and license notices are included. Supply the matching artifacts to recipients. This license grants software rights, not rights to ABeCe Booking trademarks.

## Edition packaging (0.25.0)

Lite contains the official Freemius SDK and Composer autoload; QR/spreadsheet dependencies remain Premium-only. Premium retains the locked dependencies and their original source/license notices. WordPress-provided React, wp-element and wp-i18n remain external in both JS bundles. The edition manifest records the actual included PHP dependency names, versions and licenses; the corresponding source archive includes the edition's effective Composer inputs and preferred edition-specific TS/CSS/build sources.