Replies to message #17,097

🔎 If you see an alert for analytics.usips.org, this is a self-hosted system I am running as a test. It is GDPR compliant and collects no invasive information.

This is the correct tone to take, IMO. Gently inform them that refusing to provide the source code is a legal compliance issue.