Attribution

Open-source dependencies and external data sources

Passiro is built on open-source software, external open data, and commercial edge infrastructure. Every dependency, data source, and infrastructure provider we build on is listed below with its license or terms.

External data sources

EasyPrivacy

Our tracker blocklist is derived from EasyPrivacy, the open-source tracker filter list maintained by the EasyList project. EasyPrivacy is dual-licensed under GPL v3.0 and CC BY-SA 3.0.

• Source: easylist.to
• License: easylist.to/pages/licence.html
• Attribution: The EasyList authors (easylist.to)

IAB Europe Global Vendor List (GVL)

Passiro syncs the official IAB Europe Global Vendor List daily to power TCF v2.3 consent strings. The GVL is maintained by IAB Europe under the Transparency & Consent Framework Policies.

• Source: vendor-list.consensu.org
• Framework: iabeurope.eu/transparency-consent-framework

Software dependencies

axe-core

WCAG 2.2 rule evaluation engine. Used by our accessibility scanner.
License: Mozilla Public License 2.0
Source: github.com/dequelabs/axe-core

@iabtcf/cmpapi

Official IAB TCF v2.3 CMP API implementation.
License: Apache 2.0
Source: github.com/InteractiveAdvertisingBureau/iabtcf-es

@iabtcf/core

Official IAB TCF v2.3 core encoding/decoding library.
License: Apache 2.0
Source: github.com/InteractiveAdvertisingBureau/iabtcf-es

Go

Programming language and runtime that powers the WCAG scanner pipeline.
License: BSD-3-Clause
Source: go.dev

go-rod

Headless Chrome automation for the WCAG scanner.
License: MIT
Source: github.com/go-rod/rod

PHP

Server-side runtime that powers the Passiro backend.
License: PHP License v3.01
Source: php.net

nginx

Web server fronting the Passiro backend.
License: BSD-2-Clause
Source: nginx.org

OpenSearch

Open-source, distributed search and analytics engine. Powers consent-record and scan-result search across the Passiro platform.
License: Apache 2.0
Source: github.com/opensearch-project/OpenSearch

Infrastructure

Cloudflare

Passiro's consent widget, compliance badge, and tracker blocklist are served from Cloudflare's global edge network and Workers runtime. Scan artefacts, screenshots, and the published trackers.json are stored in Cloudflare R2.

• Edge delivery: Cloudflare CDN and Workers
• Object storage: Cloudflare R2
• Provider: cloudflare.com

Questions

For questions about attribution or licensing on this page, please contact us.