# Third-party material
Every line in this repo that came from someone else is listed here, with the upstream
file and the commit it was read at. **An empty section is a claim**: it says we looked
and took nothing, and it is as much a statement as a filled one.
The rule that makes this file worth keeping: a port is added here **in the same commit
that adds the ported code**, never afterwards. A retroactive attribution sweep cannot
be verified by anyone, including us.
## tunnr-mullvad
Nothing. Mullvad's client is GPL-3.0 and we deliberately take none of it — their
interface to us is a REST API and an ordinary WireGuard peer, so there is nothing to
port. If this section ever stops being empty, the crate's licence question reopens and
the answer is probably "separate process", not "copy it in".
Its facts were established from a live, unauthenticated
`GET https://api.mullvad.net/app/v1/relays` on 2026-09-05 (HTTP 200, 550 378 bytes,
556 WireGuard relays), and three relay objects from that response are checked in
**verbatim** as `crates/tunnr-mullvad/tests/fixtures/relays-2026-09-05.json`. A
public API response is data, not a copyrightable work of authorship, and it was read
from the wire rather than from their source — which is the whole reason this section
can stay empty.