cairnobs/docs/compliance/license-inventory.csv at main

Files

T

jcoffey-dev 764b09cb14 Regenerate the license inventory for the current dependency graph

Dependabot merges update lockfiles but never the inventory, so it had
drifted: gridstack was recorded at 11.5.1 and vite at 8.2.1, the agent
still listed tonic 0.12 and toml 0.8, and alerting -- named in the
audit's methodology -- had no rows at all.

Regenerated with the audit's own tools against this tree: cargo deny
list for agent and search, go-licenses csv per Go module, license-checker
for web. 52 versions bumped, 71 rows added, 55 gone, 786 -> 802 rows.
Everything added is permissive (MIT, Apache-2.0, BSD-3-Clause, Zlib or
an OR of those), so nothing is newly flagged; flagged rows go 36 -> 35
because ryu (Apache-2.0 OR BSL-1.0) left search's graph with reqwest
0.13. No bumped crate changed its license.

Built on the rustls update, so agent records rustls 0.23.45 and no
longer lists rustls-pemfile.

As last time, rows whose name and version are unchanged are left
byte-for-byte alone -- 679 of them -- so the diff is only the real
change. That also keeps every hand-written row: the segmentio/asm MIT-0
confirmations, the fonts, the favicon, and the three Docker images.
First-party github.com/cairnobs/cairnobs packages are left out, as
before. New rows follow the conventions the existing ones use, which
the regeneration reproduced exactly for every unchanged Rust and npm
row.

Signed-off-by: John Coffey <[email protected]>

2026-09-15 14:59:44 -07:00

63 KiB

Raw Permalink Blame History

1	component	dependency	version	license	direct_or_transitive	ecosystem	flagged	flag_reason	classification
2	api	github.com/ClickHouse/ch-go	(see go.sum)	Apache-2.0	transitive	go	False		a
3	api	github.com/ClickHouse/clickhouse-go/v2	(see go.sum)	Apache-2.0	direct	go	False		a
4	api	github.com/andybalholm/brotli	(see go.sum)	MIT	transitive	go	False		a
5	api	github.com/andybalholm/brotli/flate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
6	api	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
7	api	github.com/go-faster/city	(see go.sum)	MIT	transitive	go	False		a
8	api	github.com/go-faster/errors	(see go.sum)	BSD-3-Clause	transitive	go	False		a
9	api	github.com/google/uuid	(see go.sum)	BSD-3-Clause	direct	go	False		a
10	api	github.com/jackc/pgpassfile	(see go.sum)	MIT	transitive	go	False		a
11	api	github.com/jackc/pgservicefile	(see go.sum)	MIT	transitive	go	False		a
12	api	github.com/jackc/pgx/v5	(see go.sum)	MIT	transitive	go	False		a
13	api	github.com/jackc/puddle/v2	(see go.sum)	MIT	transitive	go	False		a
14	api	github.com/klauspost/compress	(see go.sum)	Apache-2.0	transitive	go	False		a
15	api	github.com/klauspost/compress/internal/snapref	(see go.sum)	BSD-3-Clause	transitive	go	False		a
16	api	github.com/klauspost/compress/zstd/internal/xxhash	(see go.sum)	MIT	transitive	go	False		a
17	api	github.com/paulmach/orb	(see go.sum)	MIT	transitive	go	False		a
18	api	github.com/pierrec/lz4/v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
19	api	github.com/segmentio/asm/bswap	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
20	api	github.com/segmentio/asm/cpu	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
21	api	github.com/segmentio/asm/cpu/arm	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
22	api	github.com/segmentio/asm/cpu/arm64	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
23	api	github.com/segmentio/asm/cpu/cpuid	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
24	api	github.com/segmentio/asm/cpu/x86	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
25	api	github.com/shopspring/decimal	(see go.sum)	MIT	transitive	go	False		a
26	api	go.opentelemetry.io/otel	(see go.sum)	Apache-2.0	transitive	go	False		a
27	api	go.opentelemetry.io/otel/trace	(see go.sum)	Apache-2.0	transitive	go	False		a
28	api	golang.org/x/crypto	(see go.sum)	BSD-3-Clause	direct	go	False		a
29	api	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
30	api	golang.org/x/sync/semaphore	(see go.sum)	BSD-3-Clause	transitive	go	False		a
31	api	golang.org/x/sys	(see go.sum)	BSD-3-Clause	transitive	go	False		a
32	api	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
33	api	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
34	api	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
35	api	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
36	ingest	github.com/ClickHouse/ch-go	(see go.sum)	Apache-2.0	transitive	go	False		a
37	ingest	github.com/ClickHouse/clickhouse-go/v2	(see go.sum)	Apache-2.0	direct	go	False		a
38	ingest	github.com/andybalholm/brotli	(see go.sum)	MIT	transitive	go	False		a
39	ingest	github.com/andybalholm/brotli/flate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
40	ingest	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
41	ingest	github.com/go-faster/city	(see go.sum)	MIT	transitive	go	False		a
42	ingest	github.com/go-faster/errors	(see go.sum)	BSD-3-Clause	transitive	go	False		a
43	ingest	github.com/google/uuid	(see go.sum)	BSD-3-Clause	direct	go	False		a
44	ingest	github.com/jackc/pgpassfile	(see go.sum)	MIT	transitive	go	False		a
45	ingest	github.com/jackc/pgservicefile	(see go.sum)	MIT	transitive	go	False		a
46	ingest	github.com/jackc/pgx/v5	(see go.sum)	MIT	direct	go	False		a
47	ingest	github.com/jackc/puddle/v2	(see go.sum)	MIT	transitive	go	False		a
48	ingest	github.com/klauspost/compress	(see go.sum)	Apache-2.0	transitive	go	False		a
49	ingest	github.com/klauspost/compress/internal/snapref	(see go.sum)	BSD-3-Clause	transitive	go	False		a
50	ingest	github.com/klauspost/compress/s2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
51	ingest	github.com/klauspost/compress/snappy	(see go.sum)	BSD-3-Clause	transitive	go	False		a
52	ingest	github.com/klauspost/compress/zstd/internal/xxhash	(see go.sum)	MIT	transitive	go	False		a
53	ingest	github.com/paulmach/orb	(see go.sum)	MIT	transitive	go	False		a
54	ingest	github.com/pierrec/lz4/v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
55	ingest	github.com/segmentio/asm/bswap	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
56	ingest	github.com/segmentio/asm/cpu	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
57	ingest	github.com/segmentio/asm/cpu/arm	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
58	ingest	github.com/segmentio/asm/cpu/arm64	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
59	ingest	github.com/segmentio/asm/cpu/cpuid	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
60	ingest	github.com/segmentio/asm/cpu/x86	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
61	ingest	github.com/segmentio/kafka-go	(see go.sum)	MIT	direct	go	False		a
62	ingest	github.com/shopspring/decimal	(see go.sum)	MIT	transitive	go	False		a
63	ingest	go.opentelemetry.io/otel	(see go.sum)	Apache-2.0	transitive	go	False		a
64	ingest	go.opentelemetry.io/otel/trace	(see go.sum)	Apache-2.0	transitive	go	False		a
65	ingest	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
66	ingest	golang.org/x/sync	(see go.sum)	BSD-3-Clause	direct	go	False		a
67	ingest	golang.org/x/sys	(see go.sum)	BSD-3-Clause	transitive	go	False		a
68	ingest	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
69	ingest	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
70	ingest	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
71	ingest	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	direct	go	False		a
72	alerting	github.com/google/uuid	(see go.sum)	BSD-3-Clause	direct	go	False		a
73	alerting	github.com/jackc/pgpassfile	(see go.sum)	MIT	transitive	go	False		a
74	alerting	github.com/jackc/pgservicefile	(see go.sum)	MIT	transitive	go	False		a
75	alerting	github.com/jackc/pgx/v5	(see go.sum)	MIT	direct	go	False		a
76	alerting	github.com/jackc/puddle/v2	(see go.sum)	MIT	transitive	go	False		a
77	alerting	golang.org/x/sync	(see go.sum)	BSD-3-Clause	direct	go	False		a
78	alerting	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
79	enterprise	github.com/ClickHouse/ch-go	(see go.sum)	Apache-2.0	transitive	go	False		a
80	enterprise	github.com/ClickHouse/clickhouse-go/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
81	enterprise	github.com/andybalholm/brotli	(see go.sum)	MIT	transitive	go	False		a
82	enterprise	github.com/andybalholm/brotli/flate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
83	enterprise	github.com/beevik/etree	(see go.sum)	BSD-2-Clause	transitive	go	False		a
84	enterprise	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
85	enterprise	github.com/coreos/go-oidc/v3/oidc	(see go.sum)	Apache-2.0	transitive	go	False		a
86	enterprise	github.com/crewjam/saml	(see go.sum)	BSD-2-Clause	transitive	go	False		a
87	enterprise	github.com/davecgh/go-spew/spew	(see go.sum)	ISC	transitive	go	False		a
88	enterprise	github.com/emicklei/go-restful/v3	(see go.sum)	MIT	transitive	go	False		a
89	enterprise	github.com/fxamacker/cbor/v2	(see go.sum)	MIT	transitive	go	False		a
90	enterprise	github.com/go-faster/city	(see go.sum)	MIT	transitive	go	False		a
91	enterprise	github.com/go-faster/errors	(see go.sum)	BSD-3-Clause	transitive	go	False		a
92	enterprise	github.com/go-jose/go-jose/v4	(see go.sum)	Apache-2.0	transitive	go	False		a
93	enterprise	github.com/go-jose/go-jose/v4/json	(see go.sum)	BSD-3-Clause	transitive	go	False		a
94	enterprise	github.com/go-logr/logr	(see go.sum)	Apache-2.0	transitive	go	False		a
95	enterprise	github.com/go-openapi/jsonpointer	(see go.sum)	Apache-2.0	transitive	go	False		a
96	enterprise	github.com/go-openapi/jsonreference	(see go.sum)	Apache-2.0	transitive	go	False		a
97	enterprise	github.com/go-openapi/swag	(see go.sum)	Apache-2.0	transitive	go	False		a
98	enterprise	github.com/go-openapi/swag/cmdutils	(see go.sum)	Apache-2.0	transitive	go	False		a
99	enterprise	github.com/go-openapi/swag/conv	(see go.sum)	Apache-2.0	transitive	go	False		a
100	enterprise	github.com/go-openapi/swag/fileutils	(see go.sum)	Apache-2.0	transitive	go	False		a
101	enterprise	github.com/go-openapi/swag/jsonutils	(see go.sum)	Apache-2.0	transitive	go	False		a
102	enterprise	github.com/go-openapi/swag/loading	(see go.sum)	Apache-2.0	transitive	go	False		a
103	enterprise	github.com/go-openapi/swag/mangling	(see go.sum)	Apache-2.0	transitive	go	False		a
104	enterprise	github.com/go-openapi/swag/netutils	(see go.sum)	Apache-2.0	transitive	go	False		a
105	enterprise	github.com/go-openapi/swag/pools	(see go.sum)	Apache-2.0	transitive	go	False		a
106	enterprise	github.com/go-openapi/swag/stringutils	(see go.sum)	Apache-2.0	transitive	go	False		a
107	enterprise	github.com/go-openapi/swag/typeutils	(see go.sum)	Apache-2.0	transitive	go	False		a
108	enterprise	github.com/go-openapi/swag/yamlutils	(see go.sum)	Apache-2.0	transitive	go	False		a
109	enterprise	github.com/golang-jwt/jwt/v4	(see go.sum)	MIT	transitive	go	False		a
110	enterprise	github.com/google/gnostic-models	(see go.sum)	Apache-2.0	transitive	go	False		a
111	enterprise	github.com/google/uuid	(see go.sum)	BSD-3-Clause	transitive	go	False		a
112	enterprise	github.com/jackc/pgpassfile	(see go.sum)	MIT	transitive	go	False		a
113	enterprise	github.com/jackc/pgservicefile	(see go.sum)	MIT	transitive	go	False		a
114	enterprise	github.com/jackc/pgx/v5	(see go.sum)	MIT	transitive	go	False		a
115	enterprise	github.com/jackc/puddle/v2	(see go.sum)	MIT	transitive	go	False		a
116	enterprise	github.com/jonboulle/clockwork	(see go.sum)	Apache-2.0	transitive	go	False		a
117	enterprise	github.com/json-iterator/go	(see go.sum)	MIT	transitive	go	False		a
118	enterprise	github.com/klauspost/compress	(see go.sum)	Apache-2.0	transitive	go	False		a
119	enterprise	github.com/klauspost/compress/internal/snapref	(see go.sum)	BSD-3-Clause	transitive	go	False		a
120	enterprise	github.com/klauspost/compress/s2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
121	enterprise	github.com/klauspost/compress/snappy	(see go.sum)	BSD-3-Clause	transitive	go	False		a
122	enterprise	github.com/klauspost/compress/zstd/internal/xxhash	(see go.sum)	MIT	transitive	go	False		a
123	enterprise	github.com/mattermost/xml-roundtrip-validator	(see go.sum)	Apache-2.0	transitive	go	False		a
124	enterprise	github.com/modern-go/concurrent	(see go.sum)	Apache-2.0	transitive	go	False		a
125	enterprise	github.com/modern-go/reflect2	(see go.sum)	Apache-2.0	transitive	go	False		a
126	enterprise	github.com/munnerz/goautoneg	(see go.sum)	BSD-3-Clause	transitive	go	False		a
127	enterprise	github.com/paulmach/orb	(see go.sum)	MIT	transitive	go	False		a
128	enterprise	github.com/pierrec/lz4/v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
129	enterprise	github.com/russellhaering/goxmldsig	(see go.sum)	Apache-2.0	transitive	go	False		a
130	enterprise	github.com/segmentio/asm/bswap	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
131	enterprise	github.com/segmentio/asm/cpu	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
132	enterprise	github.com/segmentio/asm/cpu/arm	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
133	enterprise	github.com/segmentio/asm/cpu/arm64	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
134	enterprise	github.com/segmentio/asm/cpu/cpuid	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
135	enterprise	github.com/segmentio/asm/cpu/x86	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
136	enterprise	github.com/segmentio/kafka-go	(see go.sum)	MIT	transitive	go	False		a
137	enterprise	github.com/shopspring/decimal	(see go.sum)	MIT	transitive	go	False		a
138	enterprise	github.com/spf13/pflag	(see go.sum)	BSD-3-Clause	transitive	go	False		a
139	enterprise	github.com/x448/float16	(see go.sum)	MIT	transitive	go	False		a
140	enterprise	go.opentelemetry.io/otel	(see go.sum)	Apache-2.0	transitive	go	False		a
141	enterprise	go.opentelemetry.io/otel/trace	(see go.sum)	Apache-2.0	transitive	go	False		a
142	enterprise	go.yaml.in/yaml/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
143	enterprise	go.yaml.in/yaml/v3	(see go.sum)	MIT	transitive	go	False		a
144	enterprise	golang.org/x/crypto/ripemd160	(see go.sum)	BSD-3-Clause	transitive	go	False		a
145	enterprise	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
146	enterprise	golang.org/x/oauth2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
147	enterprise	golang.org/x/sync	(see go.sum)	BSD-3-Clause	transitive	go	False		a
148	enterprise	golang.org/x/sys	(see go.sum)	BSD-3-Clause	transitive	go	False		a
149	enterprise	golang.org/x/term	(see go.sum)	BSD-3-Clause	transitive	go	False		a
150	enterprise	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
151	enterprise	golang.org/x/time/rate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
152	enterprise	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
153	enterprise	google.golang.org/grpc	(see go.sum)	Apache-2.0	transitive	go	False		a
154	enterprise	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
155	enterprise	gopkg.in/evanphx/json-patch.v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
156	enterprise	gopkg.in/inf.v0	(see go.sum)	BSD-3-Clause	transitive	go	False		a
157	enterprise	k8s.io/api	(see go.sum)	Apache-2.0	transitive	go	False		a
158	enterprise	k8s.io/apimachinery/pkg	(see go.sum)	Apache-2.0	transitive	go	False		a
159	enterprise	k8s.io/apimachinery/third_party/forked/golang	(see go.sum)	BSD-3-Clause	direct	go	False		a
160	enterprise	k8s.io/client-go	(see go.sum)	Apache-2.0	transitive	go	False		a
161	enterprise	k8s.io/klog/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
162	enterprise	k8s.io/kube-openapi/pkg	(see go.sum)	Apache-2.0	transitive	go	False		a
163	enterprise	k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json	(see go.sum)	BSD-3-Clause	transitive	go	False		a
164	enterprise	k8s.io/kube-openapi/pkg/validation/spec	(see go.sum)	Apache-2.0	transitive	go	False		a
165	enterprise	k8s.io/utils	(see go.sum)	Apache-2.0	transitive	go	False		a
166	enterprise	k8s.io/utils/internal/third_party/forked/golang/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
167	enterprise	sigs.k8s.io/json	(see go.sum)	Apache-2.0	transitive	go	False		a
168	enterprise	sigs.k8s.io/randfill	(see go.sum)	Apache-2.0	transitive	go	False		a
169	enterprise	sigs.k8s.io/structured-merge-diff/v6	(see go.sum)	Apache-2.0	transitive	go	False		a
170	enterprise	sigs.k8s.io/yaml	(see go.sum)	Apache-2.0	transitive	go	False		a
171	deploy/operator	github.com/beorn7/perks/quantile	(see go.sum)	MIT	transitive	go	False		a
172	deploy/operator	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
173	deploy/operator	github.com/davecgh/go-spew/spew	(see go.sum)	ISC	transitive	go	False		a
174	deploy/operator	github.com/emicklei/go-restful/v3	(see go.sum)	MIT	transitive	go	False		a
175	deploy/operator	github.com/evanphx/json-patch/v5	(see go.sum)	BSD-3-Clause	transitive	go	False		a
176	deploy/operator	github.com/fsnotify/fsnotify	(see go.sum)	BSD-3-Clause	transitive	go	False		a
177	deploy/operator	github.com/fxamacker/cbor/v2	(see go.sum)	MIT	transitive	go	False		a
178	deploy/operator	github.com/go-logr/logr	(see go.sum)	Apache-2.0	transitive	go	False		a
179	deploy/operator	github.com/go-logr/zapr	(see go.sum)	Apache-2.0	transitive	go	False		a
180	deploy/operator	github.com/go-openapi/jsonpointer	(see go.sum)	Apache-2.0	transitive	go	False		a
181	deploy/operator	github.com/go-openapi/jsonreference	(see go.sum)	Apache-2.0	transitive	go	False		a
182	deploy/operator	github.com/go-openapi/swag	(see go.sum)	Apache-2.0	transitive	go	False		a
183	deploy/operator	github.com/go-openapi/swag/cmdutils	(see go.sum)	Apache-2.0	transitive	go	False		a
184	deploy/operator	github.com/go-openapi/swag/conv	(see go.sum)	Apache-2.0	transitive	go	False		a
185	deploy/operator	github.com/go-openapi/swag/fileutils	(see go.sum)	Apache-2.0	transitive	go	False		a
186	deploy/operator	github.com/go-openapi/swag/jsonutils	(see go.sum)	Apache-2.0	transitive	go	False		a
187	deploy/operator	github.com/go-openapi/swag/loading	(see go.sum)	Apache-2.0	transitive	go	False		a
188	deploy/operator	github.com/go-openapi/swag/mangling	(see go.sum)	Apache-2.0	transitive	go	False		a
189	deploy/operator	github.com/go-openapi/swag/netutils	(see go.sum)	Apache-2.0	transitive	go	False		a
190	deploy/operator	github.com/go-openapi/swag/pools	(see go.sum)	Apache-2.0	transitive	go	False		a
191	deploy/operator	github.com/go-openapi/swag/stringutils	(see go.sum)	Apache-2.0	transitive	go	False		a
192	deploy/operator	github.com/go-openapi/swag/typeutils	(see go.sum)	Apache-2.0	transitive	go	False		a
193	deploy/operator	github.com/go-openapi/swag/yamlutils	(see go.sum)	Apache-2.0	transitive	go	False		a
194	deploy/operator	github.com/google/gnostic-models	(see go.sum)	Apache-2.0	transitive	go	False		a
195	deploy/operator	github.com/google/uuid	(see go.sum)	BSD-3-Clause	transitive	go	False		a
196	deploy/operator	github.com/json-iterator/go	(see go.sum)	MIT	transitive	go	False		a
197	deploy/operator	github.com/modern-go/concurrent	(see go.sum)	Apache-2.0	transitive	go	False		a
198	deploy/operator	github.com/modern-go/reflect2	(see go.sum)	Apache-2.0	transitive	go	False		a
199	deploy/operator	github.com/munnerz/goautoneg	(see go.sum)	BSD-3-Clause	transitive	go	False		a
200	deploy/operator	github.com/pmezard/go-difflib/difflib	(see go.sum)	BSD-3-Clause	transitive	go	False		a
201	deploy/operator	github.com/prometheus/client_golang/internal/github.com/golang/gddo/httputil	(see go.sum)	BSD-3-Clause	transitive	go	False		a
202	deploy/operator	github.com/prometheus/client_golang/prometheus	(see go.sum)	Apache-2.0	transitive	go	False		a
203	deploy/operator	github.com/prometheus/client_model/go	(see go.sum)	Apache-2.0	transitive	go	False		a
204	deploy/operator	github.com/prometheus/common	(see go.sum)	Apache-2.0	transitive	go	False		a
205	deploy/operator	github.com/prometheus/procfs	(see go.sum)	Apache-2.0	transitive	go	False		a
206	deploy/operator	github.com/spf13/pflag	(see go.sum)	BSD-3-Clause	transitive	go	False		a
207	deploy/operator	github.com/x448/float16	(see go.sum)	MIT	transitive	go	False		a
208	deploy/operator	go.uber.org/multierr	(see go.sum)	MIT	transitive	go	False		a
209	deploy/operator	go.uber.org/zap	(see go.sum)	MIT	transitive	go	False		a
210	deploy/operator	go.yaml.in/yaml/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
211	deploy/operator	go.yaml.in/yaml/v3	(see go.sum)	MIT	transitive	go	False		a
212	deploy/operator	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
213	deploy/operator	golang.org/x/oauth2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
214	deploy/operator	golang.org/x/sync/errgroup	(see go.sum)	BSD-3-Clause	transitive	go	False		a
215	deploy/operator	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
216	deploy/operator	golang.org/x/term	(see go.sum)	BSD-3-Clause	transitive	go	False		a
217	deploy/operator	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
218	deploy/operator	golang.org/x/time/rate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
219	deploy/operator	gomodules.xyz/jsonpatch/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
220	deploy/operator	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
221	deploy/operator	gopkg.in/evanphx/json-patch.v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
222	deploy/operator	gopkg.in/inf.v0	(see go.sum)	BSD-3-Clause	transitive	go	False		a
223	deploy/operator	k8s.io/api	(see go.sum)	Apache-2.0	direct	go	False		a
224	deploy/operator	k8s.io/apiextensions-apiserver/pkg/apis/apiextensions	(see go.sum)	Apache-2.0	transitive	go	False		a
225	deploy/operator	k8s.io/apimachinery/pkg	(see go.sum)	Apache-2.0	direct	go	False		a
226	deploy/operator	k8s.io/apimachinery/third_party/forked/golang	(see go.sum)	BSD-3-Clause	direct	go	False		a
227	deploy/operator	k8s.io/client-go	(see go.sum)	Apache-2.0	direct	go	False		a
228	deploy/operator	k8s.io/klog/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
229	deploy/operator	k8s.io/kube-openapi/pkg	(see go.sum)	Apache-2.0	transitive	go	False		a
230	deploy/operator	k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json	(see go.sum)	BSD-3-Clause	transitive	go	False		a
231	deploy/operator	k8s.io/kube-openapi/pkg/validation/spec	(see go.sum)	Apache-2.0	transitive	go	False		a
232	deploy/operator	k8s.io/utils	(see go.sum)	Apache-2.0	transitive	go	False		a
233	deploy/operator	k8s.io/utils/internal/third_party/forked/golang	(see go.sum)	BSD-3-Clause	transitive	go	False		a
234	deploy/operator	k8s.io/utils/third_party/forked/golang/btree	(see go.sum)	Apache-2.0	transitive	go	False		a
235	deploy/operator	sigs.k8s.io/controller-runtime	(see go.sum)	Apache-2.0	direct	go	False		a
236	deploy/operator	sigs.k8s.io/json	(see go.sum)	Apache-2.0	transitive	go	False		a
237	deploy/operator	sigs.k8s.io/randfill	(see go.sum)	Apache-2.0	transitive	go	False		a
238	deploy/operator	sigs.k8s.io/structured-merge-diff/v6	(see go.sum)	Apache-2.0	transitive	go	False		a
239	deploy/operator	sigs.k8s.io/yaml	(see go.sum)	Apache-2.0	transitive	go	False		a
240	terraform	github.com/fatih/color	(see go.sum)	MIT	transitive	go	False		a
241	terraform	github.com/golang/protobuf/ptypes/empty	(see go.sum)	BSD-3-Clause	transitive	go	False		a
242	terraform	github.com/hashicorp/go-hclog	(see go.sum)	MIT	transitive	go	False		a
243	terraform	github.com/hashicorp/go-plugin	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
244	terraform	github.com/hashicorp/go-uuid	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
245	terraform	github.com/hashicorp/terraform-plugin-framework	(see go.sum)	MPL-2.0	direct	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
246	terraform	github.com/hashicorp/terraform-plugin-go	(see go.sum)	MPL-2.0	direct	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
247	terraform	github.com/hashicorp/terraform-plugin-log	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
248	terraform	github.com/hashicorp/terraform-registry-address	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
249	terraform	github.com/hashicorp/terraform-svchost	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
250	terraform	github.com/hashicorp/yamux	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
251	terraform	github.com/mattn/go-colorable	(see go.sum)	MIT	transitive	go	False		a
252	terraform	github.com/mattn/go-isatty	(see go.sum)	MIT	transitive	go	False		a
253	terraform	github.com/mitchellh/go-testing-interface	(see go.sum)	MIT	transitive	go	False		a
254	terraform	github.com/oklog/run	(see go.sum)	Apache-2.0	transitive	go	False		a
255	terraform	github.com/vmihailenco/msgpack/v5	(see go.sum)	BSD-2-Clause	transitive	go	False		a
256	terraform	github.com/vmihailenco/tagparser/v2	(see go.sum)	BSD-2-Clause	transitive	go	False		a
257	terraform	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
258	terraform	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
259	terraform	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
260	terraform	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
261	terraform	google.golang.org/grpc	(see go.sum)	Apache-2.0	transitive	go	False		a
262	terraform	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
263	proto	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
264	proto	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
265	proto	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
266	proto	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
267	proto	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
268	proto	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	direct	go	False		a
269	hack/benchmark-fixture	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
270	hack/benchmark-fixture	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
271	hack/benchmark-fixture	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
272	hack/benchmark-fixture	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
273	hack/benchmark-fixture	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
274	hack/benchmark-fixture	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
275	hack/windows-fixture	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
276	hack/windows-fixture	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
277	hack/windows-fixture	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
278	hack/windows-fixture	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
279	hack/windows-fixture	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
280	hack/windows-fixture	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
281	web	@codemirror/autocomplete	6.20.3	MIT	direct	npm	False		a
282	web	@codemirror/commands	6.11.0	MIT	direct	npm	False		a
283	web	@codemirror/language	6.12.4	MIT	direct	npm	False		a
284	web	@codemirror/state	6.7.4	MIT	direct	npm	False		a
285	web	@codemirror/view	6.43.11	MIT	direct	npm	False		a
286	web	@jridgewell/gen-mapping	0.3.13	MIT	transitive	npm	False		a
287	web	@jridgewell/remapping	2.3.5	MIT	transitive	npm	False		a
288	web	@jridgewell/resolve-uri	3.1.2	MIT	transitive	npm	False		a
289	web	@jridgewell/sourcemap-codec	1.5.5	MIT	transitive	npm	False		a
290	web	@jridgewell/trace-mapping	0.3.31	MIT	transitive	npm	False		a
291	web	@lezer/common	1.5.2	MIT	transitive	npm	False		a
292	web	@lezer/highlight	1.2.3	MIT	transitive	npm	False		a
293	web	@lezer/lr	1.4.10	MIT	transitive	npm	False		a
294	web	@marijn/find-cluster-break	1.0.3	MIT	transitive	npm	False		a
295	web	@oxc-project/types	0.149.0	MIT	transitive	npm	False		a
296	web	@polka/url	1.0.0-next.29	MIT	transitive	npm	False		a
297	web	@rolldown/binding-linux-x64-gnu	1.2.8	MIT	transitive	npm	False		a
298	web	@rolldown/pluginutils	1.0.1	MIT	transitive	npm	False		a
299	web	@standard-schema/spec	1.1.0	MIT	transitive	npm	False		a
300	web	@sveltejs/acorn-typescript	1.0.13	MIT	transitive	npm	False		a
301	web	@sveltejs/adapter-static	3.0.10	MIT	direct	npm	False		a
302	web	@sveltejs/kit	2.70.3	MIT	direct	npm	False		a
303	web	@sveltejs/load-config	0.2.3	MIT	transitive	npm	False		a
304	web	@sveltejs/vite-plugin-svelte	7.3.0	MIT	direct	npm	False		a
305	web	@types/cookie	0.6.0	MIT	transitive	npm	False		a
306	web	@types/estree	1.0.9	MIT	transitive	npm	False		a
307	web	acorn	8.18.0	MIT	transitive	npm	False		a
308	web	aria-query	5.3.1	Apache-2.0	transitive	npm	False		a
309	web	axe-core	4.13.0	MPL-2.0	direct	npm	True	MPL-2.0: file-level copyleft, generally fine as a dependency per policy -- flagged for explicit citation, not because it's expected to block	a
310	web	axobject-query	4.1.0	Apache-2.0	transitive	npm	False		a
311	web	chokidar	4.0.3	MIT	transitive	npm	False		a
312	web	clsx	2.1.1	MIT	transitive	npm	False		a
313	web	cookie	0.7.2	MIT	transitive	npm	False		a
314	web	crelt	1.0.7	MIT	transitive	npm	False		a
315	web	deepmerge	4.3.1	MIT	transitive	npm	False		a
316	web	detect-libc	2.1.2	Apache-2.0	transitive	npm	False		a
317	web	devalue	5.9.0	MIT	transitive	npm	False		a
318	web	echarts	6.1.0	Apache-2.0	direct	npm	False		a
319	web	esm-env	1.2.2	MIT	transitive	npm	False		a
320	web	esrap	2.3.2	MIT	transitive	npm	False		a
321	web	fdir	6.5.0	MIT	transitive	npm	False		a
322	web	gridstack	13.3.0	MIT	direct	npm	False		a
323	web	is-reference	3.0.3	MIT	transitive	npm	False		a
324	web	kleur	4.1.5	MIT	transitive	npm	False		a
325	web	lightningcss-linux-x64-gnu	1.33.0	MPL-2.0	transitive	npm	True	MPL-2.0: file-level copyleft, generally fine as a dependency per policy -- flagged for explicit citation, not because it's expected to block	a
326	web	lightningcss	1.33.0	MPL-2.0	transitive	npm	True	MPL-2.0: file-level copyleft, generally fine as a dependency per policy -- flagged for explicit citation, not because it's expected to block	a
327	web	locate-character	3.0.0	MIT	transitive	npm	False		a
328	web	magic-string	0.30.21	MIT	transitive	npm	False		a
329	web	magic-string	1.2.0	MIT	transitive	npm	False		a
330	web	mri	1.2.0	MIT	transitive	npm	False		a
331	web	mrmime	2.0.1	MIT	transitive	npm	False		a
332	web	nanoid	3.3.19	MIT	transitive	npm	False		a
333	web	obug	2.1.4	MIT	transitive	npm	False		a
334	web	picocolors	1.1.1	ISC	transitive	npm	False		a
335	web	picomatch	4.0.7	MIT	transitive	npm	False		a
336	web	postcss	8.5.28	MIT	transitive	npm	False		a
337	web	readdirp	4.1.2	MIT	transitive	npm	False		a
338	web	rolldown	1.2.8	MIT	transitive	npm	False		a
339	web	sade	1.8.1	MIT	transitive	npm	False		a
340	web	set-cookie-parser	3.1.2	MIT	transitive	npm	False		a
341	web	sirv	3.0.2	MIT	transitive	npm	False		a
342	web	source-map-js	1.2.1	BSD-3-Clause	transitive	npm	False		a
343	web	style-mod	4.1.3	MIT	transitive	npm	False		a
344	web	svelte-check	4.7.6	MIT	direct	npm	False		a
345	web	svelte	5.57.0	MIT	direct	npm	False		a
346	web	tinyglobby	0.2.17	MIT	transitive	npm	False		a
347	web	totalist	3.0.1	MIT	transitive	npm	False		a
348	web	tslib	2.3.0	0BSD	transitive	npm	False		a
349	web	typescript	6.0.3	Apache-2.0	direct	npm	False		a
350	web	vite	8.3.0	MIT	direct	npm	False		a
351	web	vitefu	1.1.3	MIT	transitive	npm	False		a
352	web	w3c-keyname	2.2.8	MIT	transitive	npm	False		a
353	web	zimmerframe	1.1.4	MIT	transitive	npm	False		a
354	web	zrender	6.1.0	BSD-3-Clause	transitive	npm	False		a
355	agent	anstream	1.0.0	Apache-2.0 OR MIT	transitive	rust	False		a
356	agent	anstyle	1.0.14	Apache-2.0 OR MIT	transitive	rust	False		a
357	agent	anstyle-parse	1.0.0	Apache-2.0 OR MIT	transitive	rust	False		a
358	agent	anstyle-query	1.1.5	Apache-2.0 OR MIT	transitive	rust	False		a
359	agent	anstyle-wincon	3.0.11	Apache-2.0 OR MIT	transitive	rust	False		a
360	agent	anyhow	1.0.104	Apache-2.0 OR MIT	direct	rust	False		a
361	agent	async-trait	0.1.92	Apache-2.0 OR MIT	transitive	rust	False		a
362	agent	atomic-waker	1.1.2	Apache-2.0 OR MIT	transitive	rust	False		a
363	agent	axum	0.8.9	MIT	transitive	rust	False		a
364	agent	axum-core	0.5.6	MIT	transitive	rust	False		a
365	agent	base64	0.22.1	Apache-2.0 OR MIT	transitive	rust	False		a
366	agent	bitflags	2.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
367	agent	bytes	1.12.1	MIT	transitive	rust	False		a
368	agent	cc	1.4.2	Apache-2.0 OR MIT	transitive	rust	False		a
369	agent	cfg-if	1.0.4	Apache-2.0 OR MIT	transitive	rust	False		a
370	agent	clap	4.6.6	Apache-2.0 OR MIT	direct	rust	False		a
371	agent	clap_builder	4.6.6	Apache-2.0 OR MIT	transitive	rust	False		a
372	agent	clap_derive	4.6.4	Apache-2.0 OR MIT	transitive	rust	False		a
373	agent	clap_lex	1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
374	agent	colorchoice	1.0.5	Apache-2.0 OR MIT	transitive	rust	False		a
375	agent	either	1.17.0	Apache-2.0 OR MIT	transitive	rust	False		a
376	agent	equivalent	1.0.2	Apache-2.0 OR MIT	transitive	rust	False		a
377	agent	errno	0.3.14	Apache-2.0 OR MIT	transitive	rust	False		a
378	agent	fastrand	2.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
379	agent	find-msvc-tools	0.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
380	agent	fixedbitset	0.5.7	Apache-2.0 OR MIT	transitive	rust	False		a
381	agent	fnv	1.0.7	Apache-2.0 OR MIT	transitive	rust	False		a
382	agent	foldhash	0.1.5	Zlib	transitive	rust	False		a
383	agent	futures-channel	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
384	agent	futures-core	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
385	agent	futures-sink	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
386	agent	futures-task	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
387	agent	futures-util	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
388	agent	getrandom	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
389	agent	getrandom	0.4.3	Apache-2.0 OR MIT	transitive	rust	False		a
390	agent	h2	0.4.16	MIT	transitive	rust	False		a
391	agent	hashbrown	0.15.5	Apache-2.0 OR MIT	transitive	rust	False		a
392	agent	hashbrown	0.17.1	Apache-2.0 OR MIT	transitive	rust	False		a
393	agent	heck	0.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
394	agent	http	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
395	agent	http-body	1.1.0	MIT	transitive	rust	False		a
396	agent	http-body-util	0.1.5	MIT	transitive	rust	False		a
397	agent	httparse	1.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
398	agent	httpdate	1.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
399	agent	hyper	1.11.0	MIT	transitive	rust	False		a
400	agent	hyper-timeout	0.5.2	Apache-2.0 OR MIT	transitive	rust	False		a
401	agent	hyper-util	0.1.20	MIT	transitive	rust	False		a
402	agent	indexmap	2.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
403	agent	is_terminal_polyfill	1.70.2	Apache-2.0 OR MIT	transitive	rust	False		a
404	agent	itertools	0.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
405	agent	itoa	1.0.18	Apache-2.0 OR MIT	transitive	rust	False		a
406	agent	lazy_static	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
407	agent	libc	0.2.189	Apache-2.0 OR MIT	transitive	rust	False		a
408	agent	linux-raw-sys	0.12.1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
409	agent	log	0.4.33	Apache-2.0 OR MIT	transitive	rust	False		a
410	agent	matchers	0.2.0	MIT	transitive	rust	False		a
411	agent	matchit	0.8.4	BSD-3-Clause OR MIT	transitive	rust	False		a
412	agent	memchr	2.8.3	MIT OR Unlicense	transitive	rust	False		a
413	agent	mime	0.3.17	Apache-2.0 OR MIT	transitive	rust	False		a
414	agent	mio	1.2.2	MIT	transitive	rust	False		a
415	agent	multimap	0.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
416	agent	nu-ansi-term	0.50.3	MIT	transitive	rust	False		a
417	agent	once_cell	1.21.4	Apache-2.0 OR MIT	transitive	rust	False		a
418	agent	once_cell_polyfill	1.70.2	Apache-2.0 OR MIT	transitive	rust	False		a
419	agent	percent-encoding	2.3.2	Apache-2.0 OR MIT	transitive	rust	False		a
420	agent	petgraph	0.8.3	Apache-2.0 OR MIT	transitive	rust	False		a
421	agent	pin-project	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
422	agent	pin-project-internal	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
423	agent	pin-project-lite	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
424	agent	prettyplease	0.2.37	Apache-2.0 OR MIT	transitive	rust	False		a
425	agent	proc-macro2	1.0.107	Apache-2.0 OR MIT	transitive	rust	False		a
426	agent	prost	0.14.4	Apache-2.0	direct	rust	False		a
427	agent	prost-build	0.14.4	Apache-2.0	transitive	rust	False		a
428	agent	prost-derive	0.14.4	Apache-2.0	transitive	rust	False		a
429	agent	prost-types	0.14.4	Apache-2.0	transitive	rust	False		a
430	agent	pulldown-cmark	0.13.4	MIT	transitive	rust	False		a
431	agent	pulldown-cmark-to-cmark	22.0.1	Apache-2.0	transitive	rust	False		a
432	agent	quick-xml	0.42.0	MIT	direct	rust	False		a
433	agent	quote	1.0.47	Apache-2.0 OR MIT	transitive	rust	False		a
434	agent	r-efi	6.0.0	Apache-2.0 OR LGPL-2.1-or-later OR MIT	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
435	agent	regex	1.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
436	agent	regex-automata	0.4.18	Apache-2.0 OR MIT	transitive	rust	False		a
437	agent	regex-syntax	0.8.11	Apache-2.0 OR MIT	transitive	rust	False		a
438	agent	ring	0.17.14	Apache-2.0 OR ISC	transitive	rust	False		a
439	agent	rustix	1.1.4	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
440	agent	rustls	0.23.45	Apache-2.0 OR ISC OR MIT	transitive	rust	False		a
441	agent	rustls-pki-types	1.15.1	Apache-2.0 OR MIT	transitive	rust	False		a
442	agent	rustls-webpki	0.103.14	ISC	transitive	rust	False		a
443	agent	serde	1.0.229	Apache-2.0 OR MIT	direct	rust	False		a
444	agent	serde_core	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
445	agent	serde_derive	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
446	agent	serde_json	1.0.151	Apache-2.0 OR MIT	direct	rust	False		a
447	agent	serde_spanned	1.1.1	Apache-2.0 OR MIT	transitive	rust	False		a
448	agent	sharded-slab	0.1.7	MIT	transitive	rust	False		a
449	agent	shlex	2.0.1	Apache-2.0 OR MIT	transitive	rust	False		a
450	agent	signal-hook-registry	1.4.8	Apache-2.0 OR MIT	transitive	rust	False		a
451	agent	slab	0.4.12	MIT	transitive	rust	False		a
452	agent	smallvec	1.15.2	Apache-2.0 OR MIT	transitive	rust	False		a
453	agent	socket2	0.6.5	Apache-2.0 OR MIT	transitive	rust	False		a
454	agent	strsim	0.11.1	MIT	transitive	rust	False		a
455	agent	subtle	2.6.1	BSD-3-Clause	transitive	rust	False		a
456	agent	syn	2.0.119	Apache-2.0 OR MIT	transitive	rust	False		a
457	agent	syn	3.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
458	agent	sync_wrapper	1.0.2	Apache-2.0	transitive	rust	False		a
459	agent	tempfile	3.27.0	Apache-2.0 OR MIT	transitive	rust	False		a
460	agent	thread_local	1.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
461	agent	tokio	1.53.1	MIT	direct	rust	False		a
462	agent	tokio-macros	2.7.2	MIT	transitive	rust	False		a
463	agent	tokio-rustls	0.26.4	Apache-2.0 OR MIT	transitive	rust	False		a
464	agent	tokio-stream	0.1.19	MIT	transitive	rust	False		a
465	agent	tokio-util	0.7.19	MIT	transitive	rust	False		a
466	agent	toml	1.1.6+spec-1.1.0	Apache-2.0 OR MIT	direct	rust	False		a
467	agent	toml_datetime	1.1.1+spec-1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
468	agent	toml_parser	1.1.3+spec-1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
469	agent	toml_writer	1.1.2+spec-1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
470	agent	tonic	0.14.6	MIT	direct	rust	False		a
471	agent	tonic-build	0.14.6	MIT	direct	rust	False		a
472	agent	tonic-prost	0.14.6	MIT	direct	rust	False		a
473	agent	tonic-prost-build	0.14.6	MIT	direct	rust	False		a
474	agent	tower	0.5.3	MIT	transitive	rust	False		a
475	agent	tower-layer	0.3.3	MIT	transitive	rust	False		a
476	agent	tower-service	0.3.3	MIT	transitive	rust	False		a
477	agent	tracing	0.1.44	MIT	direct	rust	False		a
478	agent	tracing-attributes	0.1.31	MIT	transitive	rust	False		a
479	agent	tracing-core	0.1.36	MIT	transitive	rust	False		a
480	agent	tracing-log	0.2.0	MIT	transitive	rust	False		a
481	agent	tracing-subscriber	0.3.23	MIT	direct	rust	False		a
482	agent	try-lock	0.2.5	MIT	transitive	rust	False		a
483	agent	unicase	2.9.0	Apache-2.0 OR MIT	transitive	rust	False		a
484	agent	unicode-ident	1.0.24	Apache-2.0 OR MIT OR Unicode-3.0	transitive	rust	False		a
485	agent	untrusted	0.9.0	ISC	transitive	rust	False		a
486	agent	utf8parse	0.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
487	agent	want	0.3.1	MIT	transitive	rust	False		a
488	agent	wasi	0.11.1+wasi-snapshot-preview1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
489	agent	widestring	1.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
490	agent	windows	0.62.2	Apache-2.0 OR MIT	direct	rust	False		a
491	agent	windows-collections	0.3.2	Apache-2.0 OR MIT	transitive	rust	False		a
492	agent	windows-core	0.62.2	Apache-2.0 OR MIT	transitive	rust	False		a
493	agent	windows-future	0.3.2	Apache-2.0 OR MIT	transitive	rust	False		a
494	agent	windows-implement	0.60.2	Apache-2.0 OR MIT	transitive	rust	False		a
495	agent	windows-interface	0.59.3	Apache-2.0 OR MIT	transitive	rust	False		a
496	agent	windows-link	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
497	agent	windows-numerics	0.3.1	Apache-2.0 OR MIT	transitive	rust	False		a
498	agent	windows-result	0.4.1	Apache-2.0 OR MIT	transitive	rust	False		a
499	agent	windows-service	0.8.1	Apache-2.0 OR MIT	direct	rust	False		a
500	agent	windows-strings	0.5.1	Apache-2.0 OR MIT	transitive	rust	False		a
501	agent	windows-sys	0.52.0	Apache-2.0 OR MIT	transitive	rust	False		a
502	agent	windows-sys	0.61.2	Apache-2.0 OR MIT	transitive	rust	False		a
503	agent	windows-targets	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
504	agent	windows-threading	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
505	agent	windows_aarch64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
506	agent	windows_aarch64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
507	agent	windows_i686_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
508	agent	windows_i686_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
509	agent	windows_i686_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
510	agent	windows_x86_64_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
511	agent	windows_x86_64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
512	agent	windows_x86_64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
513	agent	winnow	1.0.4	MIT	transitive	rust	False		a
514	agent	zeroize	1.9.0	Apache-2.0 OR MIT	transitive	rust	False		a
515	agent	zmij	1.0.23	MIT	transitive	rust	False		a
516	search	adler2	2.0.1	0BSD OR Apache-2.0 OR MIT	transitive	rust	False		a
517	search	aho-corasick	1.1.5	MIT OR Unlicense	transitive	rust	False		a
518	search	allocator-api2	0.2.21	Apache-2.0 OR MIT	transitive	rust	False		a
519	search	anyhow	1.0.104	Apache-2.0 OR MIT	direct	rust	False		a
520	search	arc-swap	1.9.2	Apache-2.0 OR MIT	transitive	rust	False		a
521	search	async-trait	0.1.92	Apache-2.0 OR MIT	transitive	rust	False		a
522	search	atomic-waker	1.1.2	Apache-2.0 OR MIT	transitive	rust	False		a
523	search	autocfg	1.5.1	Apache-2.0 OR MIT	transitive	rust	False		a
524	search	axum	0.8.9	MIT	transitive	rust	False		a
525	search	axum-core	0.5.6	MIT	transitive	rust	False		a
526	search	base64	0.22.1	Apache-2.0 OR MIT	transitive	rust	False		a
527	search	base64	0.23.1	Apache-2.0 OR MIT	transitive	rust	False		a
528	search	bitflags	2.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
529	search	bitpacking	0.9.3	MIT	transitive	rust	False		a
530	search	block-buffer	0.10.4	Apache-2.0 OR MIT	transitive	rust	False		a
531	search	bon	3.10.0	Apache-2.0 OR MIT	transitive	rust	False		a
532	search	bon-macros	3.10.0	Apache-2.0 OR MIT	transitive	rust	False		a
533	search	bumpalo	3.20.3	Apache-2.0 OR MIT	transitive	rust	False		a
534	search	byteorder	1.5.0	MIT OR Unlicense	transitive	rust	False		a
535	search	bytes	1.12.1	MIT	transitive	rust	False		a
536	search	cc	1.4.2	Apache-2.0 OR MIT	transitive	rust	False		a
537	search	census	0.4.2	MIT	transitive	rust	False		a
538	search	cfg-if	1.0.4	Apache-2.0 OR MIT	transitive	rust	False		a
539	search	chrono	0.4.45	Apache-2.0 OR MIT	transitive	rust	False		a
540	search	cpufeatures	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
541	search	crc32c	0.6.8	Apache-2.0 OR MIT	transitive	rust	False		a
542	search	crc32fast	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
543	search	crossbeam-channel	0.5.16	Apache-2.0 OR MIT	transitive	rust	False		a
544	search	crossbeam-deque	0.8.7	Apache-2.0 OR MIT	transitive	rust	False		a
545	search	crossbeam-epoch	0.9.20	Apache-2.0 OR MIT	transitive	rust	False		a
546	search	crossbeam-utils	0.8.22	Apache-2.0 OR MIT	transitive	rust	False		a
547	search	crunchy	0.2.4	MIT	transitive	rust	False		a
548	search	crypto-common	0.1.7	Apache-2.0 OR MIT	transitive	rust	False		a
549	search	darling	0.24.1	MIT	transitive	rust	False		a
550	search	darling_core	0.24.1	MIT	transitive	rust	False		a
551	search	darling_macro	0.24.1	MIT	transitive	rust	False		a
552	search	datasketches	0.2.0	Apache-2.0	transitive	rust	False		a
553	search	deranged	0.5.8	Apache-2.0 OR MIT	transitive	rust	False		a
554	search	digest	0.10.7	Apache-2.0 OR MIT	transitive	rust	False		a
555	search	displaydoc	0.2.7	Apache-2.0 OR MIT	transitive	rust	False		a
556	search	downcast-rs	2.0.2	Apache-2.0 OR MIT	transitive	rust	False		a
557	search	either	1.17.0	Apache-2.0 OR MIT	transitive	rust	False		a
558	search	equivalent	1.0.2	Apache-2.0 OR MIT	transitive	rust	False		a
559	search	erased-serde	0.4.10	Apache-2.0 OR MIT	transitive	rust	False		a
560	search	errno	0.3.14	Apache-2.0 OR MIT	transitive	rust	False		a
561	search	fastdivide	0.4.2	MIT OR zlib-acknowledgement	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
562	search	fastrand	2.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
563	search	find-msvc-tools	0.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
564	search	fixedbitset	0.5.7	Apache-2.0 OR MIT	transitive	rust	False		a
565	search	flate2	1.1.9	Apache-2.0 OR MIT	transitive	rust	False		a
566	search	fnv	1.0.7	Apache-2.0 OR MIT	transitive	rust	False		a
567	search	foldhash	0.2.0	Zlib	transitive	rust	False		a
568	search	foldhash	0.1.5	Zlib	transitive	rust	False		a
569	search	form_urlencoded	1.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
570	search	fs4	0.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
571	search	futures	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
572	search	futures-channel	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
573	search	futures-core	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
574	search	futures-executor	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
575	search	futures-io	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
576	search	futures-macro	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
577	search	futures-sink	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
578	search	futures-task	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
579	search	futures-util	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
580	search	generic-array	0.14.7	MIT	transitive	rust	False		a
581	search	getrandom	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
582	search	getrandom	0.4.3	Apache-2.0 OR MIT	transitive	rust	False		a
583	search	h2	0.4.16	MIT	transitive	rust	False		a
584	search	hashbrown	0.15.5	Apache-2.0 OR MIT	transitive	rust	False		a
585	search	hashbrown	0.16.1	Apache-2.0 OR MIT	transitive	rust	False		a
586	search	hashbrown	0.17.1	Apache-2.0 OR MIT	transitive	rust	False		a
587	search	heck	0.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
588	search	hmac	0.12.1	Apache-2.0 OR MIT	transitive	rust	False		a
589	search	htmlescape	0.3.1	Apache-2.0 OR MIT OR MPL-2.0	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
590	search	http	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
591	search	http-body	1.1.0	MIT	transitive	rust	False		a
592	search	http-body-util	0.1.5	MIT	transitive	rust	False		a
593	search	httparse	1.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
594	search	httpdate	1.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
595	search	hyper	1.11.0	MIT	transitive	rust	False		a
596	search	hyper-timeout	0.5.2	Apache-2.0 OR MIT	transitive	rust	False		a
597	search	hyper-util	0.1.20	MIT	transitive	rust	False		a
598	search	icu_collections	2.3.0	Unicode-3.0	transitive	rust	False		a
599	search	icu_locale_core	2.3.0	Unicode-3.0	transitive	rust	False		a
600	search	icu_normalizer	2.3.0	Unicode-3.0	transitive	rust	False		a
601	search	icu_normalizer_data	2.3.0	Unicode-3.0	transitive	rust	False		a
602	search	icu_properties	2.3.0	Unicode-3.0	transitive	rust	False		a
603	search	icu_properties_data	2.3.0	Unicode-3.0	transitive	rust	False		a
604	search	icu_provider	2.3.0	Unicode-3.0	transitive	rust	False		a
605	search	ident_case	1.0.1	Apache-2.0 OR MIT	transitive	rust	False		a
606	search	idna	1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
607	search	idna_adapter	1.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
608	search	indexmap	2.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
609	search	integer-encoding	4.1.0	MIT	transitive	rust	False		a
610	search	inventory	0.3.24	Apache-2.0 OR MIT	transitive	rust	False		a
611	search	ipnet	2.12.1	Apache-2.0 OR MIT	transitive	rust	False		a
612	search	itertools	0.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
613	search	itoa	1.0.18	Apache-2.0 OR MIT	transitive	rust	False		a
614	search	jobserver	0.1.35	Apache-2.0 OR MIT	transitive	rust	False		a
615	search	js-sys	0.3.104	Apache-2.0 OR MIT	transitive	rust	False		a
616	search	lazy_static	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
617	search	levenshtein_automata	0.2.1	MIT	transitive	rust	False		a
618	search	libc	0.2.189	Apache-2.0 OR MIT	transitive	rust	False		a
619	search	linux-raw-sys	0.12.1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
620	search	litemap	0.8.3	Unicode-3.0	transitive	rust	False		a
621	search	lock_api	0.4.14	Apache-2.0 OR MIT	transitive	rust	False		a
622	search	log	0.4.33	Apache-2.0 OR MIT	transitive	rust	False		a
623	search	lru	0.16.4	MIT	transitive	rust	False		a
624	search	lz4	1.28.1	MIT	transitive	rust	False		a
625	search	lz4-sys	1.11.1+lz4-1.10.0	MIT	transitive	rust	False		a
626	search	lz4_flex	0.13.1	MIT	transitive	rust	False		a
627	search	matchers	0.2.0	MIT	transitive	rust	False		a
628	search	matchit	0.8.4	BSD-3-Clause OR MIT	transitive	rust	False		a
629	search	measure_time	0.9.0	MIT	transitive	rust	False		a
630	search	memchr	2.8.3	MIT OR Unlicense	transitive	rust	False		a
631	search	memmap2	0.9.11	Apache-2.0 OR MIT	transitive	rust	False		a
632	search	mime	0.3.17	Apache-2.0 OR MIT	transitive	rust	False		a
633	search	minimal-lexical	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
634	search	miniz_oxide	0.8.9	Apache-2.0 OR MIT OR Zlib	transitive	rust	False		a
635	search	mio	1.2.2	MIT	transitive	rust	False		a
636	search	multimap	0.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
637	search	murmurhash32	0.3.1	MIT	transitive	rust	False		a
638	search	nom	7.1.3	MIT	transitive	rust	False		a
639	search	nu-ansi-term	0.50.3	MIT	transitive	rust	False		a
640	search	num-conv	0.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
641	search	num-traits	0.2.19	Apache-2.0 OR MIT	transitive	rust	False		a
642	search	once_cell	1.21.4	Apache-2.0 OR MIT	transitive	rust	False		a
643	search	oneshot	0.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
644	search	ordered-float	5.5.0	MIT	transitive	rust	False		a
645	search	ownedbytes	0.9.0	MIT	transitive	rust	False		a
646	search	parking_lot	0.12.5	Apache-2.0 OR MIT	transitive	rust	False		a
647	search	parking_lot_core	0.9.12	Apache-2.0 OR MIT	transitive	rust	False		a
648	search	pbkdf2	0.12.2	Apache-2.0 OR MIT	transitive	rust	False		a
649	search	percent-encoding	2.3.2	Apache-2.0 OR MIT	transitive	rust	False		a
650	search	petgraph	0.8.3	Apache-2.0 OR MIT	transitive	rust	False		a
651	search	pin-project	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
652	search	pin-project-internal	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
653	search	pin-project-lite	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
654	search	pkg-config	0.3.33	Apache-2.0 OR MIT	transitive	rust	False		a
655	search	potential_utf	0.1.6	Unicode-3.0	transitive	rust	False		a
656	search	powerfmt	0.2.0	Apache-2.0 OR MIT	transitive	rust	False		a
657	search	ppv-lite86	0.2.21	Apache-2.0 OR MIT	transitive	rust	False		a
658	search	prettyplease	0.2.37	Apache-2.0 OR MIT	transitive	rust	False		a
659	search	prettyplease	0.3.0	Apache-2.0 OR MIT	transitive	rust	False		a
660	search	proc-macro2	1.0.107	Apache-2.0 OR MIT	transitive	rust	False		a
661	search	prost	0.14.4	Apache-2.0	direct	rust	False		a
662	search	prost-build	0.14.4	Apache-2.0	transitive	rust	False		a
663	search	prost-derive	0.14.4	Apache-2.0	transitive	rust	False		a
664	search	prost-types	0.14.4	Apache-2.0	transitive	rust	False		a
665	search	pulldown-cmark	0.13.4	MIT	transitive	rust	False		a
666	search	pulldown-cmark-to-cmark	22.0.1	Apache-2.0	transitive	rust	False		a
667	search	quote	1.0.47	Apache-2.0 OR MIT	transitive	rust	False		a
668	search	r-efi	6.0.0	Apache-2.0 OR LGPL-2.1-or-later OR MIT	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
669	search	rand	0.8.7	Apache-2.0 OR MIT	transitive	rust	False		a
670	search	rand_chacha	0.3.1	Apache-2.0 OR MIT	transitive	rust	False		a
671	search	rand_core	0.6.4	Apache-2.0 OR MIT	transitive	rust	False		a
672	search	rayon	1.12.0	Apache-2.0 OR MIT	transitive	rust	False		a
673	search	rayon-core	1.13.0	Apache-2.0 OR MIT	transitive	rust	False		a
674	search	redox_syscall	0.5.18	MIT	transitive	rust	False		a
675	search	regex	1.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
676	search	regex-automata	0.4.18	Apache-2.0 OR MIT	transitive	rust	False		a
677	search	regex-syntax	0.8.11	Apache-2.0 OR MIT	transitive	rust	False		a
678	search	reqwest	0.13.5	Apache-2.0 OR MIT	direct	rust	False		a
679	search	rsasl	2.3.1	Apache-2.0 OR MIT	transitive	rust	False		a
680	search	rskafka	0.6.0	Apache-2.0 OR MIT	direct	rust	False		a
681	search	rust-stemmers	1.2.0	BSD-3-Clause OR MIT	transitive	rust	False		a
682	search	rustc-hash	2.1.3	Apache-2.0 OR MIT	transitive	rust	False		a
683	search	rustc_version	0.4.1	Apache-2.0 OR MIT	transitive	rust	False		a
684	search	rustix	1.1.4	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
685	search	rustversion	1.0.23	Apache-2.0 OR MIT	transitive	rust	False		a
686	search	scopeguard	1.2.0	Apache-2.0 OR MIT	transitive	rust	False		a
687	search	semver	1.0.28	Apache-2.0 OR MIT	transitive	rust	False		a
688	search	serde	1.0.229	Apache-2.0 OR MIT	direct	rust	False		a
689	search	serde_core	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
690	search	serde_derive	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
691	search	serde_json	1.0.151	Apache-2.0 OR MIT	direct	rust	False		a
692	search	sha2	0.10.9	Apache-2.0 OR MIT	transitive	rust	False		a
693	search	sharded-slab	0.1.7	MIT	transitive	rust	False		a
694	search	shlex	2.0.1	Apache-2.0 OR MIT	transitive	rust	False		a
695	search	signal-hook-registry	1.4.8	Apache-2.0 OR MIT	transitive	rust	False		a
696	search	simd-adler32	0.3.10	MIT	transitive	rust	False		a
697	search	sketches-ddsketch	0.4.1	Apache-2.0	transitive	rust	False		a
698	search	slab	0.4.12	MIT	transitive	rust	False		a
699	search	smallvec	1.15.2	Apache-2.0 OR MIT	transitive	rust	False		a
700	search	snap	1.1.2	BSD-3-Clause	transitive	rust	False		a
701	search	socket2	0.6.5	Apache-2.0 OR MIT	transitive	rust	False		a
702	search	stable_deref_trait	1.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
703	search	stringprep	0.1.5	Apache-2.0 OR MIT	transitive	rust	False		a
704	search	strsim	0.11.1	MIT	transitive	rust	False		a
705	search	subtle	2.6.1	BSD-3-Clause	transitive	rust	False		a
706	search	syn	2.0.119	Apache-2.0 OR MIT	transitive	rust	False		a
707	search	syn	3.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
708	search	sync_wrapper	1.0.2	Apache-2.0	transitive	rust	False		a
709	search	synstructure	0.13.2	MIT	transitive	rust	False		a
710	search	tantivy	0.26.2	MIT	direct	rust	False		a
711	search	tantivy-bitpacker	0.10.0	MIT	transitive	rust	False		a
712	search	tantivy-columnar	0.7.0	MIT	transitive	rust	False		a
713	search	tantivy-common	0.11.0	MIT	transitive	rust	False		a
714	search	tantivy-fst	0.5.0	MIT OR Unlicense	transitive	rust	False		a
715	search	tantivy-query-grammar	0.26.0	MIT	transitive	rust	False		a
716	search	tantivy-sstable	0.7.0	MIT	transitive	rust	False		a
717	search	tantivy-stacker	0.7.0	MIT	transitive	rust	False		a
718	search	tantivy-tokenizer-api	0.7.0	MIT	transitive	rust	False		a
719	search	tempfile	3.27.0	Apache-2.0 OR MIT	direct	rust	False		a
720	search	thiserror	1.0.69	Apache-2.0 OR MIT	transitive	rust	False		a
721	search	thiserror	2.0.20	Apache-2.0 OR MIT	transitive	rust	False		a
722	search	thiserror-impl	1.0.69	Apache-2.0 OR MIT	transitive	rust	False		a
723	search	thiserror-impl	2.0.20	Apache-2.0 OR MIT	transitive	rust	False		a
724	search	thread_local	1.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
725	search	time	0.3.55	Apache-2.0 OR MIT	transitive	rust	False		a
726	search	time-core	0.1.9	Apache-2.0 OR MIT	transitive	rust	False		a
727	search	tinystr	0.8.4	Unicode-3.0	transitive	rust	False		a
728	search	tinyvec	1.12.0	Apache-2.0 OR MIT OR Zlib	transitive	rust	False		a
729	search	tinyvec_macros	0.1.1	Apache-2.0 OR MIT OR Zlib	transitive	rust	False		a
730	search	tokio	1.53.1	MIT	direct	rust	False		a
731	search	tokio-macros	2.7.2	MIT	transitive	rust	False		a
732	search	tokio-stream	0.1.19	MIT	transitive	rust	False		a
733	search	tokio-util	0.7.19	MIT	transitive	rust	False		a
734	search	tonic	0.14.6	MIT	direct	rust	False		a
735	search	tonic-build	0.14.6	MIT	direct	rust	False		a
736	search	tonic-prost	0.14.6	MIT	direct	rust	False		a
737	search	tonic-prost-build	0.14.6	MIT	direct	rust	False		a
738	search	tower	0.5.3	MIT	transitive	rust	False		a
739	search	tower-http	0.6.11	MIT	transitive	rust	False		a
740	search	tower-layer	0.3.3	MIT	transitive	rust	False		a
741	search	tower-service	0.3.3	MIT	transitive	rust	False		a
742	search	tracing	0.1.44	MIT	direct	rust	False		a
743	search	tracing-attributes	0.1.31	MIT	transitive	rust	False		a
744	search	tracing-core	0.1.36	MIT	transitive	rust	False		a
745	search	tracing-log	0.2.0	MIT	transitive	rust	False		a
746	search	tracing-subscriber	0.3.23	MIT	direct	rust	False		a
747	search	try-lock	0.2.5	MIT	transitive	rust	False		a
748	search	typeid	1.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
749	search	typenum	1.20.1	Apache-2.0 OR MIT	transitive	rust	False		a
750	search	typetag	0.2.23	Apache-2.0 OR MIT	transitive	rust	False		a
751	search	typetag-impl	0.2.23	Apache-2.0 OR MIT	transitive	rust	False		a
752	search	unicase	2.9.0	Apache-2.0 OR MIT	transitive	rust	False		a
753	search	unicode-bidi	0.3.18	Apache-2.0 OR MIT	transitive	rust	False		a
754	search	unicode-ident	1.0.24	Apache-2.0 OR MIT OR Unicode-3.0	transitive	rust	False		a
755	search	unicode-normalization	0.1.25	Apache-2.0 OR MIT	transitive	rust	False		a
756	search	unicode-properties	0.1.4	Apache-2.0 OR MIT	transitive	rust	False		a
757	search	url	2.5.8	Apache-2.0 OR MIT	transitive	rust	False		a
758	search	utf8-ranges	1.0.5	MIT OR Unlicense	transitive	rust	False		a
759	search	utf8_iter	1.0.4	Apache-2.0 OR MIT	transitive	rust	False		a
760	search	uuid	1.24.0	Apache-2.0 OR MIT	transitive	rust	False		a
761	search	version_check	0.9.5	Apache-2.0 OR MIT	transitive	rust	False		a
762	search	want	0.3.1	MIT	transitive	rust	False		a
763	search	wasi	0.11.1+wasi-snapshot-preview1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
764	search	wasm-bindgen	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
765	search	wasm-bindgen-futures	0.4.77	Apache-2.0 OR MIT	transitive	rust	False		a
766	search	wasm-bindgen-macro	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
767	search	wasm-bindgen-macro-support	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
768	search	wasm-bindgen-shared	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
769	search	web-sys	0.3.104	Apache-2.0 OR MIT	transitive	rust	False		a
770	search	winapi	0.3.9	Apache-2.0 OR MIT	transitive	rust	False		a
771	search	winapi-i686-pc-windows-gnu	0.4.0	Apache-2.0 OR MIT	transitive	rust	False		a
772	search	winapi-x86_64-pc-windows-gnu	0.4.0	Apache-2.0 OR MIT	transitive	rust	False		a
773	search	windows-link	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
774	search	windows-sys	0.59.0	Apache-2.0 OR MIT	transitive	rust	False		a
775	search	windows-sys	0.61.2	Apache-2.0 OR MIT	transitive	rust	False		a
776	search	windows-targets	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
777	search	windows_aarch64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
778	search	windows_aarch64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
779	search	windows_i686_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
780	search	windows_i686_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
781	search	windows_i686_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
782	search	windows_x86_64_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
783	search	windows_x86_64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
784	search	windows_x86_64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
785	search	writeable	0.6.4	Unicode-3.0	transitive	rust	False		a
786	search	yoke	0.8.3	Unicode-3.0	transitive	rust	False		a
787	search	yoke-derive	0.8.2	Unicode-3.0	transitive	rust	False		a
788	search	zerocopy	0.8.56	Apache-2.0 OR BSD-2-Clause OR MIT	transitive	rust	False		a
789	search	zerofrom	0.1.8	Unicode-3.0	transitive	rust	False		a
790	search	zerofrom-derive	0.1.7	Unicode-3.0	transitive	rust	False		a
791	search	zerotrie	0.2.5	Unicode-3.0	transitive	rust	False		a
792	search	zerovec	0.11.7	Unicode-3.0	transitive	rust	False		a
793	search	zerovec-derive	0.11.4	Unicode-3.0	transitive	rust	False		a
794	search	zmij	1.0.23	MIT	transitive	rust	False		a
795	search	zstd	0.13.3	MIT	transitive	rust	False		a
796	search	zstd-safe	7.2.4	Apache-2.0 OR MIT	transitive	rust	False		a
797	search	zstd-sys	2.0.16+zstd.1.5.7	Apache-2.0 OR MIT	transitive	rust	False		a
798	web	Overpass (font)	variable	OFL-1.1	direct	font-asset	False		a
799	web	Overpass Mono (font)	variable	OFL-1.1	direct	font-asset	False		a
800	web	favicon.svg	n/a	MIT (Svelte project asset)	direct	vendored-asset	True	Copied from SvelteKit's default project scaffold (<title>svelte-logo</title>), never replaced with an original mark -- not a license-compatibility blocker (Svelte's own assets are MIT) but is unauthored, unattributed, third-party branded content shipping as this product's own favicon. Flagged for replacement, not a legal blocker.	n/a-branding
801	transport	redpanda (docker image)	v24.2.7	BSL 1.1 (Business Source License) for Redpanda Core, as pinned (v24.2.7, released 2024-10-11) -- NOT yet converted to Apache-2.0 (4-year Change Date is ~2028-10-11). Source-available, not OSI-approved open source. Additional Use Grant permits any use except offering it as a hosted 'Streaming or Queuing Service' to third parties.	direct	docker-image	True	Category (c): BSL is explicitly source-available, not OSI-approved open source, per the audit's own classification framework. Verified against the actual licenses/bsl.md at the v24.2.7 tag, not assumed. No AGPL linking-compatibility issue (Redpanda is consumed only over the Kafka wire protocol, never linked into Cairn OBS's own code -- same relationship as ClickHouse/Postgres). Real open question: whether a third party self-hosting Cairn OBS (now fully AGPLv3 per task 6) 'as a service' would trip BSL's Streaming-or-Queuing-Service restriction on the bundled Redpanda image -- Cairn OBS's ingest pipeline creates fixed internal topics, not per-end-user topics, so this is very likely NOT a Streaming-or-Queuing-Service under BSL's own definition, but this is a business/redistribution judgment call, not a pure technical one -- flagged for your decision, not resolved unilaterally. See license-audit-report.md's Redpanda section for the three remediation options (accept as-is / swap to Apache Kafka / flag only). RESOLVED 2026-08-16 (business decision): accept as-is. Cairn OBS's own use (internal Kafka-protocol transport, no resale of broker access) is within BSL's Additional Use Grant; the third-party self-hosting-as-a-service question was judged unlikely to trip BSL's Streaming-or-Queuing-Service restriction, and was accepted as a known, disclosed risk rather than swapping to a heavier broker or dropping the bundled image. See license-audit-report.md's Redpanda section.	c
802	storage	clickhouse-server (docker image)	24.8	Apache-2.0, confirmed directly against ClickHouse's LICENSE file. No evidence of any historical license change (unlike Redpanda/Elastic/MongoDB) -- confirmed via web search plus direct file fetch, not assumed from general reputation.	direct	docker-image	False		a
803	metadata	postgres (docker image)	16-alpine	PostgreSQL License (OSI-approved, MIT/BSD-equivalent permissive terms), confirmed directly against the official postgres/postgres COPYRIGHT file.	direct	docker-image	False		a

63 KiB Raw Permalink Blame History

63 KiB

Raw Permalink Blame History