# Third-party scientific dependencies

IDHR.ir Project does not relicense third-party software. The IDHR wrappers,
parameter mappings, preprocessing, parsers and result reconstruction code are
AGPL-3.0-only; the following engines remain under their upstream licenses.

- Passim v2.0.0 — MIT License — Copyright David A. Smith and contributors —
  https://github.com/dasmiq/passim/releases/tag/v2.0.0
- R package stylo 0.7.71 — GPL (>= 3) — Maciej Eder, Jan Rybicki,
  Mike Kestemont, Steffen Pielstroem and contributors —
  https://cran.r-project.org/package=stylo
- R package pamr 1.57 — GPL-2 — Rob Tibshirani, Trevor Hastie,
  Balasubramanian Narasimhan and contributors —
  https://cran.r-project.org/package=pamr
- RapidFuzz 3.14.3 — MIT License — Max Bachmann and contributors —
  https://pypi.org/project/RapidFuzz/3.14.3/
- NumPy 2.3.3 — BSD-3-Clause — NumPy developers —
  https://pypi.org/project/numpy/2.3.3/
- regex 2026.7.19 — Apache-2.0 AND CNRI-Python — Matthew Barnett —
  https://pypi.org/project/regex/2026.7.19/
- qalsadi 0.5.1 — GPL-3.0 — Taha Zerrouki and contributors —
  https://pypi.org/project/qalsadi/0.5.1/

Source archives for the larger third-party engines are not duplicated in every
result. Exact versions, stable retrieval URLs and verified artifact SHA-256
values are recorded in scientific_dependencies.json and copied into every
applicable source bundle.
