Skip to content

THIRD_PARTY_LICENSES.md

Latest commit

 

History

History
175 lines (164 loc) · 8.28 KB

THIRD_PARTY_LICENSES.md

File metadata and controls

175 lines (164 loc) · 8.28 KB
Raw

Third-party licences

137 components, derived from sbom.cdx.json, the CycloneDX bill this project's quality gate generates on every commit. This file and that bill are the same data rendered twice, so they cannot disagree.

Trinity itself is Apache-2.0 (LICENSE). Everything below is somebody else's work.

What this list covers. Every component of the bill, which is every dependency the lock file resolves, including the ones that exist only to build and test this project and ship in no artifact. That is deliberate: a list of only the shipped subset would be the more flattering document and the less useful one, because a licence obligation can attach to a build-time dependency too. Which environment each one belongs to is in mix.exs; this file does not repeat it, and a reader should not infer from an entry here that the component is in a release.

Component Version Licence Source of the licence
abnf_parsec 2.1.0 MIT bom
asn1 5.4.3 Apache-2.0 bom
axon 0.8.1 Apache-2.0 bom
bandit 1.13.1 MIT bom
beam_mcp 0.10.1 Apache-2.0 bom
boundary 0.10.4 MIT bom
bumblebee 0.7.1 Apache-2.0 bom
bunt 1.0.0 MIT bom
burrito 1.6.0 MIT bom
castore 1.0.21 Apache-2.0 bom
cc_precompiler 0.1.11 Apache-2.0 bom
compiler 9.0.6.2 Apache-2.0 bom
complex 0.7.0 Apache-2.0 bom
credo 1.7.19 MIT bom
crypto 5.8.3.3 Apache-2.0 bom
daisyui 22ecff57f2c3 MIT declared
db_connection 2.10.2 Apache-2.0 bom
decimal 3.2.0 Apache-2.0 bom
dns_cluster 0.2.0 MIT bom
dotenvy 1.2.1 Apache-2.0 bom
earmark_parser 1.4.46 Apache-2.0 bom
ecto 3.14.2 Apache-2.0 bom
ecto_sql 3.14.0 Apache-2.0 bom
ecto_sqlite3 0.24.1 MIT bom
eex 1.20.4 Apache-2.0 bom
elixir 1.20.4 Apache-2.0 AND LicenseRef-scancode-unicode bom
elixir_make 0.10.0 Apache-2.0 bom
esbuild 0.10.0 MIT bom
ex_ast 0.13.1 MIT bom
ex_doc 0.40.4 Apache-2.0 bom
ex_tauri 0.2.0 MIT bom
ex_unit 1.20.4 Apache-2.0 bom
exla 0.13.1 Apache-2.0 bom
expo 1.1.1 Apache-2.0 bom
exqlite 0.40.0 MIT bom
file_system 1.1.1 Apache-2.0 bom
finch 0.23.0 MIT bom
fine 0.1.6 Apache-2.0 bom
floki 0.38.4 MIT bom
gettext 1.0.2 Apache-2.0 bom
glob_ex 0.1.12 MIT bom
heroicons 0435d4ca364a MIT declared
hex 2.5.1 Apache-2.0 bom
hex_core 0.20.1 Apache-2.0 bom
hpax 1.1.0 Apache-2.0 bom
idna 7.1.0 MIT bom
igniter 0.8.4 MIT bom
inets 9.6.2.3 Apache-2.0 bom
jason 1.4.5 Apache-2.0 bom
jcs 0.2.0 Apache-2.0 bom
jose 1.11.12 MIT bom
jsv 0.23.0 Apache-2.0 bom
kernel 10.6.3.4 Apache-2.0 bom
lazy_html 0.1.13 Apache-2.0 bom
llm_db 2026.9.4 Apache-2.0 bom
logger 1.20.4 Apache-2.0 bom
luerl 1.5.1 Apache-2.0 bom
makeup 1.2.2 BSD-2-Clause bom
makeup_elixir 1.0.1 BSD-2-Clause bom
makeup_erlang 1.1.0 BSD-2-Clause bom
mdex 0.13.5 MIT bom
mdex_native 0.2.8 MIT bom
mime 2.0.7 Apache-2.0 bom
mint 1.11.0 Apache-2.0 bom
mix 1.20.4 Apache-2.0 bom
mix_audit 2.1.5 BSD-3-Clause bom
mox 1.3.1 Apache-2.0 bom
muontrap 2.0.0 Apache-2.0 bom
nimble_options 1.1.1 Apache-2.0 bom
nimble_ownership 1.0.2 Apache-2.0 bom
nimble_parsec 1.4.2 Apache-2.0 bom
nimble_pool 1.1.0 Apache-2.0 bom
nx 0.13.1 Apache-2.0 bom
nx_image 0.1.2 Apache-2.0 bom
nx_signal 0.2.0 Apache-2.0 bom
oban 2.24.1 Apache-2.0 bom
oban_met 1.3.1 Apache-2.0 bom
oban_web 2.13.0 Apache-2.0 bom
oidcc 3.9.0 Apache-2.0 bom
oidcc_plug 0.5.1 Apache-2.0 bom
optimus 0.6.1 MIT bom
owl 0.13.1 Apache-2.0 bom
pgvector 0.4.1 MIT bom
phoenix 1.8.14 MIT bom
phoenix_ecto 4.7.0 MIT bom
phoenix_html 4.3.0 MIT bom
phoenix_live_dashboard 0.8.7 MIT bom
phoenix_live_reload 1.7.0 MIT bom
phoenix_live_view 1.2.12 MIT bom
phoenix_pubsub 2.3.0 MIT bom
phoenix_template 1.0.4 MIT bom
plug 1.20.3 Apache-2.0 bom
plug_crypto 2.2.0 Apache-2.0 bom
polaris 0.1.0 Apache-2.0 bom
postgrex 0.22.4 Apache-2.0 bom
protobuf 0.17.1 MIT bom
public_key 1.20.3.4 Apache-2.0 bom
purl 0.5.0 Apache-2.0 bom
req 0.7.4 Apache-2.0 bom
req_llm 1.24.0 Apache-2.0 bom
rewrite 1.3.0 MIT bom
runtime_tools 2.3.1 Apache-2.0 bom
rustler 0.38.0 MIT AND Apache-2.0 bom
rustler_precompiled 0.9.0 Apache-2.0 bom
safetensors 0.1.3 Apache-2.0 bom
sasl 4.3.2 Apache-2.0 bom
sbom 0.12.0 BSD-3-Clause AND CC0-1.0 AND MIT AND Apache-2.0 bom
server_sent_events 1.1.0 MIT bom
sobelow 0.15.0 Apache-2.0 bom
sourceror 1.12.3 Apache-2.0 bom
spitfire 0.4.2 MIT bom
splode 0.3.2 MIT bom
ssh 5.5.2.5 Apache-2.0 bom
ssl 11.6.0.5 Apache-2.0 bom
stdlib 7.3.0.2 Apache-2.0 bom
stream_data 1.4.0 Apache-2.0 bom
tailwind 0.5.1 MIT bom
telemetry 1.4.2 Apache-2.0 bom
telemetry_metrics 1.2.0 Apache-2.0 bom
telemetry_poller 1.3.0 Apache-2.0 bom
telemetry_registry 0.3.2 Apache-2.0 bom
text_diff 0.1.0 MIT bom
texture 1.2.1 Apache-2.0 bom
thousand_island 1.6.0 MIT bom
tokenizers 0.5.1 Apache-2.0 bom
toml 0.7.0 Apache-2.0 bom
typed_struct 0.3.0 MIT bom
unpickler 0.1.0 Apache-2.0 bom
unzip 0.13.0 MIT bom
websock 0.5.3 MIT bom
websock_adapter 0.6.0 MIT bom
websockex 0.5.1 MIT bom
xla 0.10.0 Apache-2.0 bom
xmerl 2.1.9 Apache-2.0 bom
yamerl 0.10.0 BSD 2-Clause bom
yaml_elixir 2.12.2 MIT bom
zoi 0.18.7 Apache-2.0 bom

Where a licence came from

bill means the licence is in the dependency's own package metadata and the bill carries it.

declared means the bill could not supply one and it was looked up by hand. A Hex package carries its licences in its metadata; a git dependency carries nothing, and the bill emits such a component with no licence at all rather than with an error. That gap is silent, so this project fills it explicitly rather than letting the absence pass: mix trinity.third_party_licenses fails on a component with neither, and the gate runs it.

The 2 declared entries, with the evidence: