Third-party lists and components¶
Every external list KosherOS imports and every notable component it bundles, with the licence each is used under. Several of these licences require attribution, so this file is a condition of use rather than a courtesy.
Licences were read from each source's own published terms, not from an aggregator's summary. Last audited 2026-09-10.
Filter lists¶
Category database¶
Built by scripts/fetch-categories.py into categories.sqlite.
| source | licence | used for |
|---|---|---|
| Université Toulouse Capitole (UT1) blacklists, maintained by Fabrice Prigent | CC BY-SA 4.0 | every category — the backbone of the database |
Because the database is an adaptation of BY-SA 4.0 material,
categories.sqlite is itself distributed under CC BY-SA 4.0, and the
KosherOS curated supplement in scripts/curated-sites.json is merged
into it and travels under the same terms.
Advertising and tracker lists¶
All land in the ads category, which kosherd/dns.py turns into
NXDOMAIN for every account.
| source | licence |
|---|---|
| Steven Black's ad-hoc list | MIT |
| AdAway | CC BY 3.0 |
| add.2o7Net | MIT |
| add.Dead | MIT |
| add.Risk | MIT |
| add.Spam | MIT |
| UncheckyAds | MIT |
| Mitchell Krog's Badd Boyz Hosts | MIT |
| hostsVN | MIT |
| KADhosts | CC BY-SA 4.0 |
| minecraft-hosts | CC0-1.0 |
| tiuxo hostlist - ads | CC BY 4.0 |
| URLhaus (abuse.ch) | CC0 |
| Peter Lowe's list | no formal licence; the page grants this use explicitly — "Feel free to combine this list with yours or lists from other sites and put it up on the web, though!" |
Deliberately not used¶
These are in StevenBlack's merged unified-hosts file, which is why KosherOS fetches the fourteen above individually instead of taking that file whole.
| source | licence | why not |
|---|---|---|
| MVPS hosts | CC BY-NC-SA 4.0 | NonCommercial cannot be merged into a CC BY-SA 4.0 database: ShareAlike forces the adaptation to permit commercial use, and NC forbids it |
| someonewhocares (Dan Pollock) | "non-commercial with attribution" | same conflict |
Dropping them costs 18,986 domains, 23.7% of the merged file. It is a licence constraint, not a tuning choice.
Bundled components¶
Separate programs in the image, running in their own processes. Aggregation rather than derivation, so none of them reaches kosherd's own licence — but obligations that travel with the binaries still apply.
| component | licence | note |
|---|---|---|
| Fedora bootc | many (GPL, LGPL, MIT, …) | the base image. Fedora publishes the corresponding sources |
| mitmproxy | MIT | confirmed |
| SearXNG | AGPLv3 | run as a separate process behind the KosherOS search front end. Any modification to SearXNG itself must be published |
| PaperWM | GPL-family | GNOME extension, tiling layout |
| ArcMenu | GPL-family | GNOME extension, classic layout |
| NudeNet model | see upstream | the ONNX image detector |
| niri / Noctalia | see upstream | advanced desktop session |
Marked "see upstream" or "GPL-family" where the exact version has not yet been read at the source. Those are the remaining gaps in this audit.
Trademarks¶
"Fedora" is a trademark of Red Hat. KosherOS is a remix, not a Fedora product, and its use of the name is governed by Fedora's trademark guidelines — which bear directly on the "powered by Fedora" branding.
Picture models¶
| component | licence | used for |
|---|---|---|
| NudeNet (model and library, via PyPI) | MIT | labelling body parts in pictures (kosherd/vision.py) |
YOLOX-Nano yolox_nano.onnx, release 0.1.1rc0 |
Apache-2.0 | finding the person in a picture the nudity model saw no face in (kosherd/persons.py); fetched at image build, pinned by SHA-256 |