Legal
Open-source licenses
This service is built with the open-source software listed below. Copyright in each package remains with its original authors, and we use them under their respective licenses.
As of 2026-08-06 · 286 packages
License breakdown
- MIT207
- Apache-2.030
- ISC19
- LGPL-3.0-or-later10
- BSD-3-Clause4
- Apache-2.0 AND LGPL-3.0-or-later3
- BSD-2-Clause2
- MIT/X112
- Apache-2.0 AND LGPL-3.0-or-later AND MIT1
- Unlicense1
- CC-BY-4.01
- CC0-1.01
- BlueOak-1.0.01
- (AFL-2.1 OR BSD-3-Clause)1
- (MIT OR GPL-3.0-or-later)1
- (MIT AND Zlib)1
- 0BSD1
Direct dependencies
Declared in our package.json. The core of the service runs on these.
| @neondatabase/serverless | 1.1.0 | MIT |
| @next/third-parties | 16.2.11 | MIT |
| @radix-ui/react-dialog | 1.1.15 | MIT |
| @radix-ui/react-dropdown-menu | 2.1.16 | MIT |
| @radix-ui/react-label | 2.1.8 | MIT |
| @radix-ui/react-popover | 1.1.15 | MIT |
| @radix-ui/react-select | 2.2.6 | MIT |
| @radix-ui/react-slider | 1.3.6 | MIT |
| @radix-ui/react-slot | 1.2.3 | MIT |
| @radix-ui/react-toast | 1.2.15 | MIT |
| ably | 2.23.0 | Apache-2.0 |
| ai | 6.0.180 | Apache-2.0 |
| class-variance-authority | 0.7.1 | Apache-2.0 |
| clsx | 2.1.1 | MIT |
| cobe | 2.0.1 | MIT |
| dotenv | 17.4.2 | BSD-2-Clause |
| drizzle-orm | 0.45.2 | Apache-2.0 |
| exceljs | 4.4.0 | MIT |
| fflate | 0.8.3 | MIT |
| klinecharts | 10.0.2 | Apache-2.0 |
| lightweight-charts | 5.2.0 | Apache-2.0 |
| lucide-react | 0.460.0 | ISC |
| next | 16.2.6 | MIT |
| next-auth | 5.0.0-beta.31 | ISC |
| next-themes | 0.4.6 | MIT |
| pdf-parse | 2.4.5 | Apache-2.0 |
| react | 19.2.6 | MIT |
| react-dom | 19.2.6 | MIT |
| tailwind-merge | 2.6.1 | MIT |
| three | 0.185.1 | MIT |
| undici | 8.5.0 | MIT |
| yahoo-finance2 | 3.14.1 | MIT |
| zod | 3.25.76 | MIT |
Full list (including transitive dependencies) (253)
Everything above, plus the packages those libraries depend on internally.
- @ably/msgpack-jsApache-2.0
- @ai-sdk/gatewayApache-2.0
- @ai-sdk/providerApache-2.0
- @ai-sdk/provider-utilsApache-2.0
- @auth/coreISC
- @deno/shim-denoMIT
- @deno/shim-deno-testMIT
- @emnapi/runtimeMIT
- @fast-csv/formatMIT
- @fast-csv/parseMIT
- @floating-ui/coreMIT
- @floating-ui/domMIT
- @floating-ui/react-domMIT
- @floating-ui/utilsMIT
- @img/colourMIT
- @img/sharp-darwin-arm64Apache-2.0
- @img/sharp-darwin-x64Apache-2.0
- @img/sharp-libvips-darwin-arm64LGPL-3.0-or-later
- @img/sharp-libvips-darwin-x64LGPL-3.0-or-later
- @img/sharp-libvips-linux-armLGPL-3.0-or-later
- @img/sharp-libvips-linux-arm64LGPL-3.0-or-later
- @img/sharp-libvips-linux-ppc64LGPL-3.0-or-later
- @img/sharp-libvips-linux-riscv64LGPL-3.0-or-later
- @img/sharp-libvips-linux-s390xLGPL-3.0-or-later
- @img/sharp-libvips-linux-x64LGPL-3.0-or-later
- @img/sharp-libvips-linuxmusl-arm64LGPL-3.0-or-later
- @img/sharp-libvips-linuxmusl-x64LGPL-3.0-or-later
- @img/sharp-linux-armApache-2.0
- @img/sharp-linux-arm64Apache-2.0
- @img/sharp-linux-ppc64Apache-2.0
- @img/sharp-linux-riscv64Apache-2.0
- @img/sharp-linux-s390xApache-2.0
- @img/sharp-linux-x64Apache-2.0
- @img/sharp-linuxmusl-arm64Apache-2.0
- @img/sharp-linuxmusl-x64Apache-2.0
- @img/sharp-wasm32Apache-2.0 AND LGPL-3.0-or-later AND MIT
- @img/sharp-win32-arm64Apache-2.0 AND LGPL-3.0-or-later
- @img/sharp-win32-ia32Apache-2.0 AND LGPL-3.0-or-later
- @img/sharp-win32-x64Apache-2.0 AND LGPL-3.0-or-later
- @napi-rs/canvasMIT
- @napi-rs/canvas-android-arm64MIT
- @napi-rs/canvas-darwin-arm64MIT
- @napi-rs/canvas-darwin-x64MIT
- @napi-rs/canvas-linux-arm-gnueabihfMIT
- @napi-rs/canvas-linux-arm64-gnuMIT
- @napi-rs/canvas-linux-arm64-muslMIT
- @napi-rs/canvas-linux-riscv64-gnuMIT
- @napi-rs/canvas-linux-x64-gnuMIT
- @napi-rs/canvas-linux-x64-muslMIT
- @napi-rs/canvas-win32-x64-msvcMIT
- @next/envMIT
- @next/swc-darwin-arm64MIT
- @next/swc-darwin-x64MIT
- @next/swc-linux-arm64-gnuMIT
- @next/swc-linux-arm64-muslMIT
- @next/swc-linux-x64-gnuMIT
- @next/swc-linux-x64-muslMIT
- @next/swc-win32-arm64-msvcMIT
- @next/swc-win32-x64-msvcMIT
- @opentelemetry/apiApache-2.0
- @panva/hkdfMIT
- @radix-ui/numberMIT
- @radix-ui/primitiveMIT
- @radix-ui/react-arrowMIT
- @radix-ui/react-collectionMIT
- @radix-ui/react-compose-refsMIT
- @radix-ui/react-contextMIT
- @radix-ui/react-directionMIT
- @radix-ui/react-dismissable-layerMIT
- @radix-ui/react-focus-guardsMIT
- @radix-ui/react-focus-scopeMIT
- @radix-ui/react-idMIT
- @radix-ui/react-menuMIT
- @radix-ui/react-popperMIT
- @radix-ui/react-portalMIT
- @radix-ui/react-presenceMIT
- @radix-ui/react-primitiveMIT
- @radix-ui/react-roving-focusMIT
- @radix-ui/react-use-callback-refMIT
- @radix-ui/react-use-controllable-stateMIT
- @radix-ui/react-use-effect-eventMIT
- @radix-ui/react-use-escape-keydownMIT
- @radix-ui/react-use-layout-effectMIT
- @radix-ui/react-use-previousMIT
- @radix-ui/react-use-rectMIT
- @radix-ui/react-use-sizeMIT
- @radix-ui/react-visually-hiddenMIT
- @radix-ui/rectMIT
- @sindresorhus/isMIT
- @standard-schema/specMIT
- @swc/helpersApache-2.0
- @szmarczak/http-timerMIT
- @types/cacheable-requestMIT
- @types/http-cache-semanticsMIT
- @types/keyvMIT
- @types/nodeMIT
- @types/reactMIT
- @types/react-domMIT
- @types/responselikeMIT
- @vercel/oidcApache-2.0
- archiverMIT
- archiver-utilsMIT
- aria-hiddenMIT
- asyncMIT
- balanced-matchMIT
- base64-jsMIT
- baseline-browser-mappingApache-2.0
- big-integerUnlicense
- binaryMIT
- blMIT
- bluebirdMIT
- bopsMIT
- brace-expansionMIT
- bufferMIT
- buffer-crc32MIT
- buffer-indexof-polyfillMIT
- cacheable-lookupMIT
- cacheable-requestMIT
- caniuse-liteCC-BY-4.0
- chainsawMIT/X11
- client-onlyMIT
- clone-responseMIT
- compress-commonsMIT
- concat-mapMIT
- core-util-isMIT
- crc-32Apache-2.0
- crc32-streamMIT
- csstypeMIT
- dayjsMIT
- debugMIT
- decompress-responseMIT
- defer-to-connectMIT
- dequalMIT
- detect-libcApache-2.0
- detect-node-esMIT
- duplexer2BSD-3-Clause
- end-of-streamMIT
- escape-string-regexpMIT
- eventsource-parserMIT
- fancy-canvasMIT
- fast-csvMIT
- fastestsmallesttextencoderdecoderCC0-1.0
- fetch-mock-cacheMIT
- filename-reserved-regexMIT
- filenamifyMIT
- filenamify-urlMIT
- fs-constantsMIT
- fs.realpathISC
- fstreamISC
- get-nonceMIT
- get-streamMIT
- globISC
- gotMIT
- graceful-fsISC
- http-cache-semanticsBSD-2-Clause
- http2-wrapperMIT
- humanize-urlMIT
- ieee754BSD-3-Clause
- immediateMIT
- inflightISC
- inheritsISC
- isarrayMIT
- isexeBlueOak-1.0.0
- joseMIT
- json-bufferMIT
- json-schema(AFL-2.1 OR BSD-3-Clause)
- jszip(MIT OR GPL-3.0-or-later)
- keyvMIT
- lazystreamMIT
- lieMIT
- listenercountISC
- lodash.defaultsMIT
- lodash.differenceMIT
- lodash.escaperegexpMIT
- lodash.flattenMIT
- lodash.groupbyMIT
- lodash.isbooleanMIT
- lodash.isequalMIT
- lodash.isfunctionMIT
- lodash.isnilMIT
- lodash.isplainobjectMIT
- lodash.isundefinedMIT
- lodash.unionMIT
- lodash.uniqMIT
- lowercase-keysMIT
- mimic-responseMIT
- minimatchISC
- minimistMIT
- mkdirpMIT
- msMIT
- nanoidMIT
- normalize-pathMIT
- normalize-urlMIT
- oauth4webapiMIT
- onceISC
- p-cancelableMIT
- pako(MIT AND Zlib)
- path-is-absoluteMIT
- pdfjs-distApache-2.0
- picocolorsISC
- postcssMIT
- preactMIT
- preact-render-to-stringMIT
- process-nextick-argsMIT
- pslMIT
- pumpMIT
- punycodeMIT
- querystringifyMIT
- quick-lruMIT
- react-remove-scrollMIT
- react-remove-scroll-barMIT
- react-style-singletonMIT
- readable-streamMIT
- readdir-globApache-2.0
- requires-portMIT
- resolve-alpnMIT
- responselikeMIT
- rimrafISC
- safe-bufferMIT
- saxesISC
- schedulerMIT
- semverISC
- setimmediateMIT
- sharpApache-2.0
- source-map-jsBSD-3-Clause
- string_decoderMIT
- strip-outerMIT
- styled-jsxMIT
- tar-streamMIT
- third-party-capitalISC
- tldtsMIT
- tldts-coreMIT
- tmpMIT
- to-utf8MIT
- tough-cookieBSD-3-Clause
- tough-cookie-file-storeMIT
- traverseMIT/X11
- trim-repeatedMIT
- tslib0BSD
- ulidMIT
- undici-typesMIT
- universalifyMIT
- unzipperMIT
- url-parseMIT
- use-callback-refMIT
- use-sidecarMIT
- util-deprecateMIT
- uuidMIT
- whichISC
- wrappyISC
- wsMIT
- xmlcharsMIT
- zip-streamMIT
Notes
- Packages under Apache-2.0Require that a copy of the license and attribution notices be included with distributions, and that modifications be marked as such. This page serves as that notice.
- Packages under LGPLThese are the native binaries (libvips) used by the sharp image-processing library. They run only during server-side build and are never sent to the browser.
- On trademarksA license grants use of the code, not of trademarks. The names above are listed to attribute the source; they do not imply that those projects endorse or are affiliated with this service.
Items needing manual license review
buffers
If anything here is missing or wrong, please let us know and we will correct it.