Project License
PostSnail source code and project materials are licensed under Apache-2.0. Redistributed copies, forks, and derivative works must preserve the license and the NOTICE attribution to Boaz Alhadeff and the original PostSnail project.
This is legal attribution, not a requirement to display a PostSnail badge inside every derivative product UI.
Third-Party Code
No proprietary third-party code was found in the shipped vendored dependency set during the Alpha 2 review. The browser libraries are open-source: noble packages, fflate, marked, CodeMirror, and Lezer are MIT; DOMPurify is available under Apache-2.0 or MPL-2.0.
See THIRD_PARTY_NOTICES.md in the repository for versions, licenses, copyright notices, and bundled license file paths.
Logo Provenance
The PostSnail logo and icon are treated as PostSnail project assets. Alpha 2 assumes Boaz Alhadeff owns or has sufficient rights to use and license the supplied/generated logo assets in this repository.
Use the transparent PNG/SVG assets from the media kit and preserve the project attribution when redistributing.
Forest Cost Surface
Forest JSON API calls can consume Cloudflare resources. Search and site endpoints use Worker requests and D1 reads. Submissions use Worker requests, D1 reads/writes, Queue operations, and crawler fetches.
On Free plans, Cloudflare caps generally fail closed once daily limits are exhausted, which can cause errors or downtime. On Paid plans, abuse can create overage billing for Worker requests/CPU, D1 rows read/written, and Queue operations.
Recommended production controls: keep submission rate limits, add Cloudflare dashboard/WAF rate rules for /api/search and /api/submit, monitor D1 row metrics, and cache public GET JSON where safe.