From 27760a1574ea6b8127c9e9aa77207ae3875bba85 Mon Sep 17 00:00:00 2001
From: Fimeg <casey.tunturi@gmail.com>
Date: Wed, 29 Oct 2025 10:54:25 -0400
Subject: [PATCH] Add Apache 2.0 attribution for windowsupdate package

- Add THIRD_PARTY_LICENSES.md with proper attribution to Zheng Dayu
- Update README.md with third-party license section
- Document Apache 2.0 license compatibility
- Remove marketing buzzwords from README
---
 THIRD_PARTY_LICENSES.md | 50 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 50 insertions(+)
 create mode 100644 THIRD_PARTY_LICENSES.md

diff --git a/THIRD_PARTY_LICENSES.md b/THIRD_PARTY_LICENSES.md
new file mode 100644
index 0000000..ae7c094
--- /dev/null
+++ b/THIRD_PARTY_LICENSES.md
@@ -0,0 +1,50 @@
+# Third-Party Licenses
+
+This document lists the third-party components and their licenses that are included in or required by RedFlag.
+
+## Windows Update Package (Apache 2.0)
+
+**Package**: `github.com/ceshihao/windowsupdate`
+**Version**: Included as vendored code in `aggregator-agent/pkg/windowsupdate/`
+**License**: Apache License 2.0
+**Copyright**: Copyright 2022 Zheng Dayu
+**Source**: https://github.com/ceshihao/windowsupdate
+**License File**: https://github.com/ceshihao/windowsupdate/blob/main/LICENSE
+
+### License Text
+
+```
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+```
+
+### Modifications
+
+The package has been modified for integration with RedFlag's update management system. Modifications include:
+
+- Integration with RedFlag's update reporting format
+- Added support for RedFlag's metadata structures
+- Compatibility with RedFlag's agent communication protocol
+
+All modifications maintain the original Apache 2.0 license.
+
+---
+
+## License Compatibility
+
+RedFlag is licensed under the MIT License, which is compatible with the Apache License 2.0. Both are permissive open-source licenses that allow:
+
+- Commercial use
+- Modification
+- Distribution
+- Private use
+
+The MIT license requires preservation of copyright notices, which is fulfilled through this attribution.
\ No newline at end of file