The zuxml package bundles a copy of the Expat XML parser. Both zuxml and
Expat are distributed under the MIT license, but they are held by different
copyright holders, listed separately below.


zuxml
=====

Copyright (c) 2026 Pedro Baltazar

Covers everything in the package except src/vendor/. Full text in LICENSE.md;
CRAN's YEAR/COPYRIGHT HOLDER form is in LICENSE.


Expat (libexpat)
================

Bundled verbatim in src/vendor/expat/.

Copyright (c) 1998-2000 Thai Open Source Software Center Ltd and Clark Cooper
Copyright (c) 2001-2025 Expat maintainers

Full text in src/vendor/expat/COPYING, which is installed as
licenses/expat-COPYING; authors in src/vendor/expat/AUTHORS
(<https://raw.githubusercontent.com/libexpat/libexpat/R_2_8_4/expat/AUTHORS>). An
installed zuxml carries Expat compiled into its shared object and into
lib${R_ARCH}/libzuxml.a (lib/libzuxml.a on most platforms), and carries Expat's public headers in include/. Upstream is https://github.com/libexpat/libexpat
and the pinned release, its checksum and the import date are recorded in
src/vendor/PROVENANCE.

The bundled files are the upstream release with one local patch, which
removes a debug-only write to stderr from xmlparse.c; the patch is listed in
src/vendor/PROVENANCE and kept in the source repository as
tools/patches/0001-no-stdio-entropy-debug.patch. zuxml adds no other code to
that directory: the build configuration Expat would normally generate with
autotools or CMake is kept outside it, in the project-owned
src/expat_config.h. The script that proves the tree is exactly upstream plus
that patch, tools/verify-vendor, is not part of the distributed package; it
lives in the source repository at <https://github.com/pedrobtz/zuxml>.

Additional individually named contributors and copyright holders. Besides
the holders above, the bundled source files carry copyright lines, or an
AUTHORS entry, naming the following people, and Sony Corporation (with
Snild Dolkow). Expat's canonical authors are credited in Authors@R; this
more detailed list preserves the source-level copyright record:

  Rolf Eike Beer
  Nick Begg
  Francesco Bertolaccini
  Thomas Beutlich
  Alexander Bluhm
  Atrem Borovik
  Hanno Böck
  Darren Carreras
  James Clark
  Clark Cooper
  Pascal Cuoq
  Owain Davies
  Snild Dolkow
  Fred L. Drake, Jr.
  Martin Ettl
  Matthew Fernandez
  Gaurav
  Alfonso Gregory
  Yury Gribov
  Gustavo Grieco
  José Gutiérrez de la Concha
  Taichi Haradaguchi
  Jann Horn
  Haris Hussain
  Rhodri James
  Kartik Kenchi
  Boris Kolpackov
  Evgeny Kotkov
  Don Lewis
  Zeyou Liu
  David Loffredo
  Marco Maggi
  Anton Maklakov
  Alberto Maschietto
  Sean McBride
  Donghee Na
  Benbuck Nason
  Samanta Navarro
  Christian Ng
  Chanho Park
  Rosen Penev
  Benjamin Peterson
  Sebastian Pipping
  Eric Rahm
  Cristian Rodríguez
  Ed Schouten
  Thijs Schreijer
  Orgad Shaneh
  Václav Slavík
  Steven Solie
  Greg Stein
  Viktor Szakats
  Karl Waclawek
  Ben Wagner
  Jeffrey Walton
  Hans Wennborg
  Matthew Wozniczka
  Mariusz Zaborski
  Vadim Zeitlin
  Berkay Eren Ürün

siphash.h is derived by William Ahern from the SipHash reference
implementation by Jean-Philippe Aumasson and Daniel J. Bernstein, with
changes by Sebastian Pipping and Victor Stinner, under CC0-1.0.

Only the parser library is bundled. Expat's xmlwf utility, examples, test
suite, fuzzers and build systems are not included.