THIRD-PARTY SOFTWARE AND DATA NOTICES Software inventory reviewed 2026-10-16 against the Windows Python environment; active data attribution corrected 2026-10-18. Separate Linux and build notices accompany the deployed image. Optional AWS SNS operator SDK notices and exact official PyPI wheel hashes were reviewed and added on 2026-10-19. This notice does not license this application's original source code or artwork to the public. Third-party software and data retain their own terms. The app's proprietary status does not override users' rights in third-party components or public-domain facts. Species habitat context (added 2026-10-18): CPW Species Activity Mapping public GIS data. Overall ranges and selected winter-concentration polygons are derived from CPW's public CPWSpeciesData service. CPW retains source ownership; app geometry is combined, clipped, simplified and reprojected. These modifications and interpretations are not endorsed by CPW. This generalized mapping does not replace local field study and carries CPW's source cautions; no named Creative Commons license is claimed. See docs/SPECIES_RANGE_DATA.txt for the exact service, source item terms, transformation and retained provenance. https://cpw.state.co.us/maps-and-gis SOFTWARE The installed runtime packages below permit commercial use under their stated open-source licenses. Full supplied copyright, permission and disclaimer texts are preserved in docs/third_party_licenses/. Exact versions, dependency metadata, file paths and hashes are in docs/DEPENDENCY_LICENSE_INVENTORY.json. A combined, directly linkable copy is docs/THIRD_PARTY_LICENSE_TEXTS.txt. The optional AWS SNS operator transport adds the following pinned packages. They send private operational alerts; they do not enable account/newsletter email or add software to the browser. Their dependency metadata, verified wheel URLs/hashes and notice-file hashes are recorded separately in docs/OPERATOR_WHEEL_LICENSE_INVENTORY.json. Original LICENSE/NOTICE files are preserved under docs/third_party_licenses/. The full notices are collected in docs/OPERATOR_WHEEL_LICENSE_TEXTS.txt and appended to both distributed aggregates, docs/THIRD_PARTY_LICENSE_TEXTS.txt and docs/LINUX_WHEEL_LICENSE_TEXTS.txt. boto3 1.43.114 Apache-2.0 botocore 1.43.114 Apache-2.0 plus bundled notices described below jmespath 1.1.0 MIT python-dateutil 2.9.0.post0 BSD-3-Clause; Apache-2.0 attribution also retained s3transfer 0.19.2 Apache-2.0 six 1.17.0 MIT urllib3 2.8.0 MIT Botocore's original NOTICE also covers vendored Requests (Apache-2.0), urllib3 (MIT), and its CA certificate bundle (MPL-2.0). Preserve that NOTICE and the included full MPL-2.0 text. The unchanged covered certificate source remains in the installed botocore/cacert.pem and is also retained at docs/third_party_licenses/botocore-1.43.114/source/botocore/cacert.pem; its exact upstream wheel URL and hash are in the operator inventory. Recipients retain their MPL-2.0 rights in that component. It is separate from this application's original files. The license permits a larger work under other terms when its covered component requirements are met: https://www.mozilla.org/en-US/MPL/2.0/. Dateutil's supplied notice states its BSD license applies to all code, including contributions also covered by Apache-2.0; both original notices are retained. The earlier Windows runtime inventory follows: asgiref 3.12.1 BSD-3-Clause blinker 1.9.0 MIT cffi 2.1.1 MIT-0 (plus bundled platform components) charset-normalizer 3.5.2 MIT click 8.5.0 BSD-3-Clause cryptography 50.0.2 Apache-2.0 OR BSD-3-Clause Flask 3.1.3 BSD-3-Clause h11 0.16.0 MIT itsdangerous 2.2.0 BSD-3-Clause Jinja2 3.1.6 BSD-3-Clause MarkupSafe 3.0.4 BSD-3-Clause pdfminer.six 20251230 MIT pdfplumber 0.11.9 MIT Pillow 12.3.0 MIT-CMU plus bundled-library licenses pycparser 3.11 BSD-3-Clause pypdfium2 5.14.0 Apache-2.0 / BSD-3-Clause; see package files typing_extensions 4.16.0 PSF-2.0 tzdata 2026.5 Apache-2.0 package; IANA timezone data uvicorn 0.54.0 BSD-3-Clause Werkzeug 3.1.9 BSD-3-Clause PDFium and its bundled third-party components have additional notices; all BUILD_LICENSES files supplied by the installed pypdfium2 Windows wheel are retained. The package's CC-BY-4.0 applies to its documentation and examples, not a blanket license for this application. No upstream example/documentation redistribution is asserted by this inventory. This software is based in part on the work of the Independent JPEG Group. Portions of this software are copyright The FreeType Project (https://freetype.org/). All rights reserved. FreeType is used under its FreeType License option; retain the full applicable notices. Pillow's full bundled notice text includes Brotli, FreeType, HarfBuzz, Little CMS, libavif, libjpeg-turbo, libpng, WebP, OpenJPEG, TIFF, XZ/liblzma and zlib-ng. Do not remove the bundled notice text just because the top-level package is MIT. References to GPL in those bundles can describe optional license alternatives or build scripts rather than a copyleft obligation on this app; inspect the actual component and build rather than treating a text match as a license conclusion. cryptography's installed binary reports OpenSSL 4.0.3. Its package license is not the complete license inventory for statically linked native components. Preserve the original wheel notices and verify the target release's OpenSSL and Rust/native component notices when preparing a binary/container distribution. The exact OpenSSL 4.0.3 LICENSE.txt is included with its source URL and hash in docs/third_party_licenses/OpenSSL-4.0.3/. OpenSSL 3.0 and later use Apache-2.0: https://openssl-library.org/source/license/index.html Python and its standard-library components retain their upstream licenses; the current interpreter's LICENSE.txt is also retained in the notice directory. SQLite is public domain: https://www.sqlite.org/copyright.html pip/setuptools are installation tools, not app runtime dependencies. A whole virtual environment/container distribution must also preserve notices for tools and OS packages it actually includes. Linux/macOS wheels may contain different native components and require a fresh inventory. No third-party frontend framework or downloadable font file is bundled. CSS names system-installed fonts; it does not redistribute Apple's or Microsoft's font software. The generated elk mark is an output asset, not an open-source dependency. Its commercial-use and copyright considerations are documented in docs/LEGAL_AND_DATA_AUDIT.txt. DEVELOPMENT / AUTOMATED TEST TOOLS Playwright and @playwright/test use Apache-2.0. @axe-core/playwright and axe-core use MPL-2.0. Both allow commercial use under their terms. These tools run tests; they are not delivered in the application's production browser assets or Python runtime. Using unmodified MPL test tools does not license this application's own code under MPL. If redistributing or modifying those components, retain their notices and meet their component-specific source/distribution obligations. Exact installed versions are pinned in package-lock.json; upstream licenses: https://github.com/microsoft/playwright/blob/main/LICENSE https://github.com/dequelabs/axe-core-npm/blob/develop/LICENSE https://github.com/dequelabs/axe-core/blob/develop/LICENSE DATA AND MAP ATTRIBUTION Hunting statistics and license-list source: Colorado Parks and Wildlife (CPW). Years, report sources and processing notes accompany the datasets. Rates, aggregates, matching logic and comparisons are this application's work, not official CPW determinations. CPW names and source links do not imply endorsement. https://cpw.state.co.us/ Brochure page-location index: official 2026 CPW Big Game, Sheep & Goat, and Turkey brochures. The application supplies year-specific hunt-code page pointers and links to CPW's PDFs; it does not reproduce brochure prose, photos, graphics, or an interpreted list of hunting restrictions. The stored review date and source hashes identify the reviewed editions, not a live verification. See docs/BROCHURE_INDEXING.txt for scope, URLs and maintenance requirements. https://cpw.state.co.us/rules-and-regulations Big-game GMU outlines: Colorado Parks and Wildlife GIS Group, CPWAdminData, layer 6, simplified and reprojected for an approximate display. Source terms and modification details: docs/GMU_MAP_DATA.txt. Federal-land shading: Bureau of Land Management, Colorado, Surface Management Agency dataset, snapshot 2026-10-16. Repaired, combined, clipped, generalized and reprojected for an overview; very small pieces/holes are omitted. These changes are by this application and are not approved or endorsed by BLM. The shading is not a legal document, land survey or hunting-access guarantee. Source and precise changes: docs/GMU_PUBLIC_LANDS.txt. Neighboring-state outlines: U.S. Census Bureau, TIGERweb 2026 state boundaries, generalized and reprojected. Not an official or endorsed Census product. Source and modifications: docs/GMU_NEIGHBOR_STATES.txt. Additional access-analysis inputs: U.S. Geological Survey, National Geospatial Program (National Hydrography Dataset water features and Geographic Names Information System context). USGS-produced data are generally U.S. public domain; source credit is requested. The analysis also consults published land-manager rules from CPW, BLM, the National Park Service, U.S. Fish and Wildlife Service, military installations and local governments. Source links and dated judgments are retained in the private access-evidence file; those references are not licenses to redistribute third-party report prose, photos or graphics. https://www.usgs.gov/faqs/are-usgs-reportspublications-copyrighted Active whole-unit access estimates were independently rebuilt from BLM Colorado Surface Management Agency parcels, CPW GMU/state-property/public-access layers and published property rules, USGS water/context data, and National Park Service and U.S. Fish and Wildlife Service boundary data. Agency source credits and qualifications above apply. Federal agency data and CPW state data have different rights bases; CPW's source ownership, attribution and use limitations remain. The application made the overlays, conservative deductions and access judgments; agencies have not certified these estimates. See docs/DATA_REPLACEMENT_AUDIT.txt. https://cpw.state.co.us/maps-and-gis https://www.nps.gov/subjects/gisandmapping/tools-and-data.htm https://www.fws.gov/program/national-wildlife-refuge-system/lands Earlier COMaP-derived estimates are retained only as private research references, excluded from the active dataset and deployable image. Their historical source credit remains: Colorado Natural Heritage Program and the Geospatial Centroid, 2024, The Colorado Ownership and Protection Map (COMaP), v20240702, Colorado State University, Ft. Collins, CO; retrieved 2026-10-13 through the CSU-hosted CPW Hunting Atlas service. https://comap.cnhp.colostate.edu/ Retaining this credit does not authorize redistribution of those reference files. Their unresolved redistribution question does not apply to the independently rebuilt active estimates. Historic audits are retained rather than rewritten. These notices supplement, rather than replace, the actual license texts and source terms. They do not certify all conceivable deployments or uses as lawful.