cairnobs/docs/compliance/license-inventory.csv at 75303930a960e11efca2b238e933cea2bb4bfb65

Files

T

jcoffey-dev a53c309bad Upgrade tantivy to 0.26 and clear the lru advisory

Dependabot #10: lru's IterMut violates Stacked Borrows, fixed in 0.16.3.
lru was transitive through tantivy 0.22.1, which pins lru ^0.12.0, so
there was no in-range fix -- cargo update -p lru locks nothing. The
advisory was also not reachable: tantivy calls only get, put, len,
peek_lru and new on its LruCache, never iter_mut. Upgrading rather than
dismissing because it is early enough that carrying four versions of
drift costs more than paying it now, and the alert then closes on its
own evidence rather than on an argument.

lru resolves to 0.16.4, past the patch line.

One API change across the four releases. TopDocs no longer implements
Collector on its own -- an ordering has to be chosen rather than
defaulted into. order_by_score() is exactly what bare TopDocs did in
0.22, so result order is preserved rather than quietly changed, which
matters for a search endpoint whose contract is "most relevant first".

Index compatibility checked rather than assumed, since a format change
would have meant a reindex for every existing deployment. Against a live
index of 1757 documents written by 0.22: the service opened it without
error, a document indexed hours earlier by 0.22 is still findable, new
documents written by 0.26 are findable, and a phrase query spans both.
No migration needed.

The compliance inventory is regenerated for the new graph: 17 crates
added, 5 gone, 20 bumped, and three duplicate-version entries collapsed
where the graph no longer needs two. Nothing newly flagged -- every
addition is permissive -- and cargo-deny check licenses, which is the
gate CI actually runs, passes. Rows for crates whose name and version
are unchanged are left byte-for-byte alone, so the diff shows the real
change rather than 200 rows of SPDX term reordering.

Signed-off-by: John Coffey <[email protected]>

2026-09-04 22:17:28 -07:00

62 KiB

Raw Blame History

1	component	dependency	version	license	direct_or_transitive	ecosystem	flagged	flag_reason	classification
2	api	github.com/ClickHouse/ch-go	(see go.sum)	Apache-2.0	transitive	go	False		a
3	api	github.com/ClickHouse/clickhouse-go/v2	(see go.sum)	Apache-2.0	direct	go	False		a
4	api	github.com/andybalholm/brotli	(see go.sum)	MIT	transitive	go	False		a
5	api	github.com/andybalholm/brotli/flate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
6	api	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
7	api	github.com/go-faster/city	(see go.sum)	MIT	transitive	go	False		a
8	api	github.com/go-faster/errors	(see go.sum)	BSD-3-Clause	transitive	go	False		a
9	api	github.com/google/uuid	(see go.sum)	BSD-3-Clause	direct	go	False		a
10	api	github.com/jackc/pgpassfile	(see go.sum)	MIT	transitive	go	False		a
11	api	github.com/jackc/pgservicefile	(see go.sum)	MIT	transitive	go	False		a
12	api	github.com/jackc/pgx/v5	(see go.sum)	MIT	transitive	go	False		a
13	api	github.com/jackc/puddle/v2	(see go.sum)	MIT	transitive	go	False		a
14	api	github.com/klauspost/compress	(see go.sum)	Apache-2.0	transitive	go	False		a
15	api	github.com/klauspost/compress/internal/snapref	(see go.sum)	BSD-3-Clause	transitive	go	False		a
16	api	github.com/klauspost/compress/zstd/internal/xxhash	(see go.sum)	MIT	transitive	go	False		a
17	api	github.com/paulmach/orb	(see go.sum)	MIT	transitive	go	False		a
18	api	github.com/pierrec/lz4/v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
19	api	github.com/segmentio/asm/bswap	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
20	api	github.com/segmentio/asm/cpu	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
21	api	github.com/segmentio/asm/cpu/arm	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
22	api	github.com/segmentio/asm/cpu/arm64	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
23	api	github.com/segmentio/asm/cpu/cpuid	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
24	api	github.com/segmentio/asm/cpu/x86	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
25	api	github.com/shopspring/decimal	(see go.sum)	MIT	transitive	go	False		a
26	api	go.opentelemetry.io/otel	(see go.sum)	Apache-2.0	transitive	go	False		a
27	api	go.opentelemetry.io/otel/trace	(see go.sum)	Apache-2.0	transitive	go	False		a
28	api	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
29	api	golang.org/x/sync/semaphore	(see go.sum)	BSD-3-Clause	transitive	go	False		a
30	api	golang.org/x/sys	(see go.sum)	BSD-3-Clause	transitive	go	False		a
31	api	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
32	api	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
33	api	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
34	api	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
35	ingest	github.com/ClickHouse/ch-go	(see go.sum)	Apache-2.0	transitive	go	False		a
36	ingest	github.com/ClickHouse/clickhouse-go/v2	(see go.sum)	Apache-2.0	direct	go	False		a
37	ingest	github.com/andybalholm/brotli	(see go.sum)	MIT	transitive	go	False		a
38	ingest	github.com/andybalholm/brotli/flate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
39	ingest	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
40	ingest	github.com/go-faster/city	(see go.sum)	MIT	transitive	go	False		a
41	ingest	github.com/go-faster/errors	(see go.sum)	BSD-3-Clause	transitive	go	False		a
42	ingest	github.com/google/uuid	(see go.sum)	BSD-3-Clause	direct	go	False		a
43	ingest	github.com/klauspost/compress	(see go.sum)	Apache-2.0	transitive	go	False		a
44	ingest	github.com/klauspost/compress/internal/snapref	(see go.sum)	BSD-3-Clause	transitive	go	False		a
45	ingest	github.com/klauspost/compress/s2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
46	ingest	github.com/klauspost/compress/snappy	(see go.sum)	BSD-3-Clause	transitive	go	False		a
47	ingest	github.com/klauspost/compress/zstd/internal/xxhash	(see go.sum)	MIT	transitive	go	False		a
48	ingest	github.com/paulmach/orb	(see go.sum)	MIT	transitive	go	False		a
49	ingest	github.com/pierrec/lz4/v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
50	ingest	github.com/segmentio/asm/bswap	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
51	ingest	github.com/segmentio/asm/cpu	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
52	ingest	github.com/segmentio/asm/cpu/arm	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
53	ingest	github.com/segmentio/asm/cpu/arm64	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
54	ingest	github.com/segmentio/asm/cpu/cpuid	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
55	ingest	github.com/segmentio/asm/cpu/x86	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
56	ingest	github.com/segmentio/kafka-go	(see go.sum)	MIT	direct	go	False		a
57	ingest	github.com/shopspring/decimal	(see go.sum)	MIT	transitive	go	False		a
58	ingest	go.opentelemetry.io/otel	(see go.sum)	Apache-2.0	transitive	go	False		a
59	ingest	go.opentelemetry.io/otel/trace	(see go.sum)	Apache-2.0	transitive	go	False		a
60	ingest	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
61	ingest	golang.org/x/sync/errgroup	(see go.sum)	BSD-3-Clause	direct	go	False		a
62	ingest	golang.org/x/sys	(see go.sum)	BSD-3-Clause	transitive	go	False		a
63	ingest	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
64	ingest	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
65	ingest	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
66	ingest	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	direct	go	False		a
67	enterprise	github.com/ClickHouse/ch-go	(see go.sum)	Apache-2.0	transitive	go	False		a
68	enterprise	github.com/ClickHouse/clickhouse-go/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
69	enterprise	github.com/andybalholm/brotli	(see go.sum)	MIT	transitive	go	False		a
70	enterprise	github.com/andybalholm/brotli/flate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
71	enterprise	github.com/beevik/etree	(see go.sum)	BSD-2-Clause	transitive	go	False		a
72	enterprise	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
73	enterprise	github.com/coreos/go-oidc/v3/oidc	(see go.sum)	Apache-2.0	transitive	go	False		a
74	enterprise	github.com/crewjam/saml	(see go.sum)	BSD-2-Clause	transitive	go	False		a
75	enterprise	github.com/davecgh/go-spew/spew	(see go.sum)	ISC	transitive	go	False		a
76	enterprise	github.com/emicklei/go-restful/v3	(see go.sum)	MIT	transitive	go	False		a
77	enterprise	github.com/fxamacker/cbor/v2	(see go.sum)	MIT	transitive	go	False		a
78	enterprise	github.com/go-faster/city	(see go.sum)	MIT	transitive	go	False		a
79	enterprise	github.com/go-faster/errors	(see go.sum)	BSD-3-Clause	transitive	go	False		a
80	enterprise	github.com/go-jose/go-jose/v4	(see go.sum)	Apache-2.0	transitive	go	False		a
81	enterprise	github.com/go-jose/go-jose/v4/json	(see go.sum)	BSD-3-Clause	transitive	go	False		a
82	enterprise	github.com/go-logr/logr	(see go.sum)	Apache-2.0	transitive	go	False		a
83	enterprise	github.com/go-openapi/jsonpointer	(see go.sum)	Apache-2.0	transitive	go	False		a
84	enterprise	github.com/go-openapi/jsonreference	(see go.sum)	Apache-2.0	transitive	go	False		a
85	enterprise	github.com/go-openapi/swag	(see go.sum)	Apache-2.0	transitive	go	False		a
86	enterprise	github.com/gogo/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
87	enterprise	github.com/golang-jwt/jwt/v4	(see go.sum)	MIT	transitive	go	False		a
88	enterprise	github.com/golang/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
89	enterprise	github.com/google/gnostic-models	(see go.sum)	Apache-2.0	transitive	go	False		a
90	enterprise	github.com/google/go-cmp/cmp	(see go.sum)	BSD-3-Clause	transitive	go	False		a
91	enterprise	github.com/google/gofuzz	(see go.sum)	Apache-2.0	transitive	go	False		a
92	enterprise	github.com/google/uuid	(see go.sum)	BSD-3-Clause	transitive	go	False		a
93	enterprise	github.com/imdario/mergo	(see go.sum)	BSD-3-Clause	transitive	go	False		a
94	enterprise	github.com/jackc/pgpassfile	(see go.sum)	MIT	transitive	go	False		a
95	enterprise	github.com/jackc/pgservicefile	(see go.sum)	MIT	transitive	go	False		a
96	enterprise	github.com/jackc/pgx/v5	(see go.sum)	MIT	transitive	go	False		a
97	enterprise	github.com/jackc/puddle/v2	(see go.sum)	MIT	transitive	go	False		a
98	enterprise	github.com/jonboulle/clockwork	(see go.sum)	Apache-2.0	transitive	go	False		a
99	enterprise	github.com/josharian/intern	(see go.sum)	MIT	transitive	go	False		a
100	enterprise	github.com/json-iterator/go	(see go.sum)	MIT	transitive	go	False		a
101	enterprise	github.com/klauspost/compress	(see go.sum)	Apache-2.0	transitive	go	False		a
102	enterprise	github.com/klauspost/compress/internal/snapref	(see go.sum)	BSD-3-Clause	transitive	go	False		a
103	enterprise	github.com/klauspost/compress/s2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
104	enterprise	github.com/klauspost/compress/snappy	(see go.sum)	BSD-3-Clause	transitive	go	False		a
105	enterprise	github.com/klauspost/compress/zstd/internal/xxhash	(see go.sum)	MIT	transitive	go	False		a
106	enterprise	github.com/mailru/easyjson	(see go.sum)	MIT	transitive	go	False		a
107	enterprise	github.com/mattermost/xml-roundtrip-validator	(see go.sum)	Apache-2.0	transitive	go	False		a
108	enterprise	github.com/modern-go/concurrent	(see go.sum)	Apache-2.0	transitive	go	False		a
109	enterprise	github.com/modern-go/reflect2	(see go.sum)	Apache-2.0	transitive	go	False		a
110	enterprise	github.com/munnerz/goautoneg	(see go.sum)	BSD-3-Clause	transitive	go	False		a
111	enterprise	github.com/paulmach/orb	(see go.sum)	MIT	transitive	go	False		a
112	enterprise	github.com/pierrec/lz4/v4	(see go.sum)	BSD-3-Clause	transitive	go	False		a
113	enterprise	github.com/russellhaering/goxmldsig	(see go.sum)	Apache-2.0	transitive	go	False		a
114	enterprise	github.com/segmentio/asm/bswap	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
115	enterprise	github.com/segmentio/asm/cpu	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
116	enterprise	github.com/segmentio/asm/cpu/arm	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
117	enterprise	github.com/segmentio/asm/cpu/arm64	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
118	enterprise	github.com/segmentio/asm/cpu/cpuid	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
119	enterprise	github.com/segmentio/asm/cpu/x86	(see go.sum)	MIT-0 (declared as "MIT No Attribution" in LICENSE; SPDX MIT-0, permissive)	transitive	go	True	go-licenses reported Unknown; manually confirmed from module's LICENSE file	a
120	enterprise	github.com/segmentio/kafka-go	(see go.sum)	MIT	transitive	go	False		a
121	enterprise	github.com/shopspring/decimal	(see go.sum)	MIT	transitive	go	False		a
122	enterprise	github.com/spf13/pflag	(see go.sum)	BSD-3-Clause	transitive	go	False		a
123	enterprise	github.com/x448/float16	(see go.sum)	MIT	transitive	go	False		a
124	enterprise	go.opentelemetry.io/otel	(see go.sum)	Apache-2.0	transitive	go	False		a
125	enterprise	go.opentelemetry.io/otel/trace	(see go.sum)	Apache-2.0	transitive	go	False		a
126	enterprise	golang.org/x/crypto/ripemd160	(see go.sum)	BSD-3-Clause	transitive	go	False		a
127	enterprise	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
128	enterprise	golang.org/x/oauth2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
129	enterprise	golang.org/x/sync	(see go.sum)	BSD-3-Clause	transitive	go	False		a
130	enterprise	golang.org/x/sys	(see go.sum)	BSD-3-Clause	transitive	go	False		a
131	enterprise	golang.org/x/term	(see go.sum)	BSD-3-Clause	transitive	go	False		a
132	enterprise	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
133	enterprise	golang.org/x/time/rate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
134	enterprise	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
135	enterprise	google.golang.org/grpc	(see go.sum)	Apache-2.0	transitive	go	False		a
136	enterprise	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
137	enterprise	gopkg.in/inf.v0	(see go.sum)	BSD-3-Clause	transitive	go	False		a
138	enterprise	gopkg.in/yaml.v2	(see go.sum)	Apache-2.0	transitive	go	False		a
139	enterprise	gopkg.in/yaml.v3	(see go.sum)	MIT	transitive	go	False		a
140	enterprise	k8s.io/api	(see go.sum)	Apache-2.0	transitive	go	False		a
141	enterprise	k8s.io/apimachinery/pkg	(see go.sum)	Apache-2.0	transitive	go	False		a
142	enterprise	k8s.io/apimachinery/third_party/forked/golang/reflect	(see go.sum)	BSD-3-Clause	transitive	go	False		a
143	enterprise	k8s.io/client-go	(see go.sum)	Apache-2.0	transitive	go	False		a
144	enterprise	k8s.io/klog/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
145	enterprise	k8s.io/kube-openapi/pkg	(see go.sum)	Apache-2.0	transitive	go	False		a
146	enterprise	k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json	(see go.sum)	BSD-3-Clause	transitive	go	False		a
147	enterprise	k8s.io/kube-openapi/pkg/validation/spec	(see go.sum)	Apache-2.0	transitive	go	False		a
148	enterprise	k8s.io/utils	(see go.sum)	Apache-2.0	transitive	go	False		a
149	enterprise	k8s.io/utils/internal/third_party/forked/golang/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
150	enterprise	sigs.k8s.io/json	(see go.sum)	Apache-2.0	transitive	go	False		a
151	enterprise	sigs.k8s.io/structured-merge-diff/v4	(see go.sum)	Apache-2.0	transitive	go	False		a
152	enterprise	sigs.k8s.io/yaml	(see go.sum)	Apache-2.0	transitive	go	False		a
153	enterprise	sigs.k8s.io/yaml/goyaml.v2	(see go.sum)	Apache-2.0	transitive	go	False		a
154	deploy/operator	github.com/beorn7/perks/quantile	(see go.sum)	MIT	transitive	go	False		a
155	deploy/operator	github.com/cespare/xxhash/v2	(see go.sum)	MIT	transitive	go	False		a
156	deploy/operator	github.com/davecgh/go-spew/spew	(see go.sum)	ISC	transitive	go	False		a
157	deploy/operator	github.com/emicklei/go-restful/v3	(see go.sum)	MIT	transitive	go	False		a
158	deploy/operator	github.com/evanphx/json-patch/v5	(see go.sum)	BSD-3-Clause	transitive	go	False		a
159	deploy/operator	github.com/fxamacker/cbor/v2	(see go.sum)	MIT	transitive	go	False		a
160	deploy/operator	github.com/go-logr/logr	(see go.sum)	Apache-2.0	transitive	go	False		a
161	deploy/operator	github.com/go-logr/zapr	(see go.sum)	Apache-2.0	transitive	go	False		a
162	deploy/operator	github.com/go-openapi/jsonpointer	(see go.sum)	Apache-2.0	transitive	go	False		a
163	deploy/operator	github.com/go-openapi/jsonreference	(see go.sum)	Apache-2.0	transitive	go	False		a
164	deploy/operator	github.com/go-openapi/swag	(see go.sum)	Apache-2.0	transitive	go	False		a
165	deploy/operator	github.com/gogo/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
166	deploy/operator	github.com/golang/groupcache/lru	(see go.sum)	Apache-2.0	transitive	go	False		a
167	deploy/operator	github.com/golang/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
168	deploy/operator	github.com/google/gnostic-models	(see go.sum)	Apache-2.0	transitive	go	False		a
169	deploy/operator	github.com/google/go-cmp/cmp	(see go.sum)	BSD-3-Clause	transitive	go	False		a
170	deploy/operator	github.com/google/gofuzz	(see go.sum)	Apache-2.0	transitive	go	False		a
171	deploy/operator	github.com/google/uuid	(see go.sum)	BSD-3-Clause	transitive	go	False		a
172	deploy/operator	github.com/imdario/mergo	(see go.sum)	BSD-3-Clause	transitive	go	False		a
173	deploy/operator	github.com/josharian/intern	(see go.sum)	MIT	transitive	go	False		a
174	deploy/operator	github.com/json-iterator/go	(see go.sum)	MIT	transitive	go	False		a
175	deploy/operator	github.com/mailru/easyjson	(see go.sum)	MIT	transitive	go	False		a
176	deploy/operator	github.com/modern-go/concurrent	(see go.sum)	Apache-2.0	transitive	go	False		a
177	deploy/operator	github.com/modern-go/reflect2	(see go.sum)	Apache-2.0	transitive	go	False		a
178	deploy/operator	github.com/munnerz/goautoneg	(see go.sum)	BSD-3-Clause	transitive	go	False		a
179	deploy/operator	github.com/pkg/errors	(see go.sum)	BSD-2-Clause	transitive	go	False		a
180	deploy/operator	github.com/prometheus/client_golang/prometheus	(see go.sum)	Apache-2.0	transitive	go	False		a
181	deploy/operator	github.com/prometheus/client_model/go	(see go.sum)	Apache-2.0	transitive	go	False		a
182	deploy/operator	github.com/prometheus/common	(see go.sum)	Apache-2.0	transitive	go	False		a
183	deploy/operator	github.com/prometheus/procfs	(see go.sum)	Apache-2.0	transitive	go	False		a
184	deploy/operator	github.com/spf13/pflag	(see go.sum)	BSD-3-Clause	transitive	go	False		a
185	deploy/operator	github.com/x448/float16	(see go.sum)	MIT	transitive	go	False		a
186	deploy/operator	go.uber.org/multierr	(see go.sum)	MIT	transitive	go	False		a
187	deploy/operator	go.uber.org/zap	(see go.sum)	MIT	transitive	go	False		a
188	deploy/operator	golang.org/x/exp/maps	(see go.sum)	BSD-3-Clause	transitive	go	False		a
189	deploy/operator	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
190	deploy/operator	golang.org/x/oauth2	(see go.sum)	BSD-3-Clause	transitive	go	False		a
191	deploy/operator	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
192	deploy/operator	golang.org/x/term	(see go.sum)	BSD-3-Clause	transitive	go	False		a
193	deploy/operator	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
194	deploy/operator	golang.org/x/time/rate	(see go.sum)	BSD-3-Clause	transitive	go	False		a
195	deploy/operator	gomodules.xyz/jsonpatch/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
196	deploy/operator	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
197	deploy/operator	gopkg.in/inf.v0	(see go.sum)	BSD-3-Clause	transitive	go	False		a
198	deploy/operator	gopkg.in/yaml.v2	(see go.sum)	Apache-2.0	transitive	go	False		a
199	deploy/operator	gopkg.in/yaml.v3	(see go.sum)	MIT	transitive	go	False		a
200	deploy/operator	k8s.io/api	(see go.sum)	Apache-2.0	direct	go	False		a
201	deploy/operator	k8s.io/apiextensions-apiserver/pkg/apis/apiextensions	(see go.sum)	Apache-2.0	transitive	go	False		a
202	deploy/operator	k8s.io/apimachinery/pkg	(see go.sum)	Apache-2.0	direct	go	False		a
203	deploy/operator	k8s.io/apimachinery/third_party/forked/golang	(see go.sum)	BSD-3-Clause	direct	go	False		a
204	deploy/operator	k8s.io/client-go	(see go.sum)	Apache-2.0	direct	go	False		a
205	deploy/operator	k8s.io/klog/v2	(see go.sum)	Apache-2.0	transitive	go	False		a
206	deploy/operator	k8s.io/kube-openapi/pkg	(see go.sum)	Apache-2.0	transitive	go	False		a
207	deploy/operator	k8s.io/kube-openapi/pkg/internal/third_party/go-json-experiment/json	(see go.sum)	BSD-3-Clause	transitive	go	False		a
208	deploy/operator	k8s.io/kube-openapi/pkg/validation/spec	(see go.sum)	Apache-2.0	transitive	go	False		a
209	deploy/operator	k8s.io/utils	(see go.sum)	Apache-2.0	transitive	go	False		a
210	deploy/operator	k8s.io/utils/internal/third_party/forked/golang/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
211	deploy/operator	sigs.k8s.io/controller-runtime	(see go.sum)	Apache-2.0	direct	go	False		a
212	deploy/operator	sigs.k8s.io/json	(see go.sum)	Apache-2.0	transitive	go	False		a
213	deploy/operator	sigs.k8s.io/structured-merge-diff/v4	(see go.sum)	Apache-2.0	transitive	go	False		a
214	deploy/operator	sigs.k8s.io/yaml	(see go.sum)	Apache-2.0	transitive	go	False		a
215	deploy/operator	sigs.k8s.io/yaml/goyaml.v2	(see go.sum)	Apache-2.0	transitive	go	False		a
216	terraform	github.com/fatih/color	(see go.sum)	MIT	transitive	go	False		a
217	terraform	github.com/golang/protobuf/ptypes/empty	(see go.sum)	BSD-3-Clause	transitive	go	False		a
218	terraform	github.com/hashicorp/go-hclog	(see go.sum)	MIT	transitive	go	False		a
219	terraform	github.com/hashicorp/go-plugin	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
220	terraform	github.com/hashicorp/go-uuid	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
221	terraform	github.com/hashicorp/terraform-plugin-framework	(see go.sum)	MPL-2.0	direct	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
222	terraform	github.com/hashicorp/terraform-plugin-go	(see go.sum)	MPL-2.0	direct	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
223	terraform	github.com/hashicorp/terraform-plugin-log	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
224	terraform	github.com/hashicorp/terraform-registry-address	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
225	terraform	github.com/hashicorp/terraform-svchost	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
226	terraform	github.com/hashicorp/yamux	(see go.sum)	MPL-2.0	transitive	go	True	MPL-2.0: flagged for explicit per-item citation per policy, not because it's expected to block	a
227	terraform	github.com/mattn/go-colorable	(see go.sum)	MIT	transitive	go	False		a
228	terraform	github.com/mattn/go-isatty	(see go.sum)	MIT	transitive	go	False		a
229	terraform	github.com/mitchellh/go-testing-interface	(see go.sum)	MIT	transitive	go	False		a
230	terraform	github.com/oklog/run	(see go.sum)	Apache-2.0	transitive	go	False		a
231	terraform	github.com/vmihailenco/msgpack/v5	(see go.sum)	BSD-2-Clause	transitive	go	False		a
232	terraform	github.com/vmihailenco/tagparser/v2	(see go.sum)	BSD-2-Clause	transitive	go	False		a
233	terraform	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
234	terraform	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
235	terraform	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
236	terraform	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
237	terraform	google.golang.org/grpc	(see go.sum)	Apache-2.0	transitive	go	False		a
238	terraform	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
239	proto	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
240	proto	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
241	proto	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
242	proto	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
243	proto	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
244	proto	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	direct	go	False		a
245	hack/benchmark-fixture	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
246	hack/benchmark-fixture	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
247	hack/benchmark-fixture	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
248	hack/benchmark-fixture	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
249	hack/benchmark-fixture	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
250	hack/benchmark-fixture	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
251	hack/windows-fixture	golang.org/x/net	(see go.sum)	BSD-3-Clause	transitive	go	False		a
252	hack/windows-fixture	golang.org/x/sys/unix	(see go.sum)	BSD-3-Clause	transitive	go	False		a
253	hack/windows-fixture	golang.org/x/text	(see go.sum)	BSD-3-Clause	transitive	go	False		a
254	hack/windows-fixture	google.golang.org/genproto/googleapis/rpc/status	(see go.sum)	Apache-2.0	transitive	go	False		a
255	hack/windows-fixture	google.golang.org/grpc	(see go.sum)	Apache-2.0	direct	go	False		a
256	hack/windows-fixture	google.golang.org/protobuf	(see go.sum)	BSD-3-Clause	transitive	go	False		a
257	web	@codemirror/autocomplete	6.20.3	MIT	direct	npm	False		a
258	web	@codemirror/commands	6.10.4	MIT	direct	npm	False		a
259	web	@codemirror/language	6.12.4	MIT	direct	npm	False		a
260	web	@codemirror/state	6.7.1	MIT	direct	npm	False		a
261	web	@codemirror/view	6.43.8	MIT	direct	npm	False		a
262	web	@jridgewell/gen-mapping	0.3.13	MIT	transitive	npm	False		a
263	web	@jridgewell/remapping	2.3.5	MIT	transitive	npm	False		a
264	web	@jridgewell/resolve-uri	3.1.2	MIT	transitive	npm	False		a
265	web	@jridgewell/sourcemap-codec	1.5.5	MIT	transitive	npm	False		a
266	web	@jridgewell/trace-mapping	0.3.31	MIT	transitive	npm	False		a
267	web	@lezer/common	1.5.2	MIT	transitive	npm	False		a
268	web	@lezer/highlight	1.2.3	MIT	transitive	npm	False		a
269	web	@lezer/lr	1.4.10	MIT	transitive	npm	False		a
270	web	@marijn/find-cluster-break	1.0.3	MIT	transitive	npm	False		a
271	web	@oxc-project/types	0.144.0	MIT	transitive	npm	False		a
272	web	@polka/url	1.0.0-next.29	MIT	transitive	npm	False		a
273	web	@rolldown/binding-linux-x64-gnu	1.2.4	MIT	transitive	npm	False		a
274	web	@rolldown/pluginutils	1.0.1	MIT	transitive	npm	False		a
275	web	@standard-schema/spec	1.1.0	MIT	transitive	npm	False		a
276	web	@sveltejs/acorn-typescript	1.0.13	MIT	transitive	npm	False		a
277	web	@sveltejs/adapter-static	3.0.10	MIT	direct	npm	False		a
278	web	@sveltejs/kit	2.70.2	MIT	direct	npm	False		a
279	web	@sveltejs/load-config	0.2.3	MIT	transitive	npm	False		a
280	web	@sveltejs/vite-plugin-svelte	7.3.0	MIT	direct	npm	False		a
281	web	@types/cookie	0.6.0	MIT	transitive	npm	False		a
282	web	@types/estree	1.0.9	MIT	transitive	npm	False		a
283	web	@types/trusted-types	2.0.7	MIT	transitive	npm	False		a
284	web	acorn	8.18.0	MIT	transitive	npm	False		a
285	web	aria-query	5.3.1	Apache-2.0	transitive	npm	False		a
286	web	axe-core	4.13.0	MPL-2.0	direct	npm	True	MPL-2.0: file-level copyleft, generally fine as a dependency per policy -- flagged for explicit citation, not because it's expected to block	a
287	web	axobject-query	4.1.0	Apache-2.0	transitive	npm	False		a
288	web	chokidar	4.0.3	MIT	transitive	npm	False		a
289	web	clsx	2.1.1	MIT	transitive	npm	False		a
290	web	cookie	0.6.0	MIT	transitive	npm	False		a
291	web	crelt	1.0.7	MIT	transitive	npm	False		a
292	web	deepmerge	4.3.1	MIT	transitive	npm	False		a
293	web	detect-libc	2.1.2	Apache-2.0	transitive	npm	False		a
294	web	devalue	5.9.0	MIT	transitive	npm	False		a
295	web	echarts	6.1.0	Apache-2.0	direct	npm	False		a
296	web	esm-env	1.2.2	MIT	transitive	npm	False		a
297	web	esrap	2.3.2	MIT	transitive	npm	False		a
298	web	fdir	6.5.0	MIT	transitive	npm	False		a
299	web	gridstack	11.5.1	MIT	direct	npm	False		a
300	web	is-reference	3.0.3	MIT	transitive	npm	False		a
301	web	kleur	4.1.5	MIT	transitive	npm	False		a
302	web	lightningcss-linux-x64-gnu	1.33.0	MPL-2.0	transitive	npm	True	MPL-2.0: file-level copyleft, generally fine as a dependency per policy -- flagged for explicit citation, not because it's expected to block	a
303	web	lightningcss	1.33.0	MPL-2.0	transitive	npm	True	MPL-2.0: file-level copyleft, generally fine as a dependency per policy -- flagged for explicit citation, not because it's expected to block	a
304	web	locate-character	3.0.0	MIT	transitive	npm	False		a
305	web	magic-string	0.30.21	MIT	transitive	npm	False		a
306	web	magic-string	1.2.0	MIT	transitive	npm	False		a
307	web	mri	1.2.0	MIT	transitive	npm	False		a
308	web	mrmime	2.0.1	MIT	transitive	npm	False		a
309	web	nanoid	3.3.18	MIT	transitive	npm	False		a
310	web	obug	2.1.4	MIT	transitive	npm	False		a
311	web	picocolors	1.1.1	ISC	transitive	npm	False		a
312	web	picomatch	4.0.5	MIT	transitive	npm	False		a
313	web	postcss	8.5.26	MIT	transitive	npm	False		a
314	web	readdirp	4.1.2	MIT	transitive	npm	False		a
315	web	rolldown	1.2.4	MIT	transitive	npm	False		a
316	web	sade	1.8.1	MIT	transitive	npm	False		a
317	web	set-cookie-parser	3.1.2	MIT	transitive	npm	False		a
318	web	sirv	3.0.2	MIT	transitive	npm	False		a
319	web	source-map-js	1.2.1	BSD-3-Clause	transitive	npm	False		a
320	web	style-mod	4.1.3	MIT	transitive	npm	False		a
321	web	svelte-check	4.7.6	MIT	direct	npm	False		a
322	web	svelte	5.56.9	MIT	direct	npm	False		a
323	web	tinyglobby	0.2.17	MIT	transitive	npm	False		a
324	web	totalist	3.0.1	MIT	transitive	npm	False		a
325	web	tslib	2.3.0	0BSD	transitive	npm	False		a
326	web	typescript	6.0.3	Apache-2.0	direct	npm	False		a
327	web	vite	8.2.1	MIT	direct	npm	False		a
328	web	vitefu	1.1.3	MIT	transitive	npm	False		a
329	web	w3c-keyname	2.2.8	MIT	transitive	npm	False		a
330	web	zimmerframe	1.1.4	MIT	transitive	npm	False		a
331	web	zrender	6.1.0	BSD-3-Clause	transitive	npm	False		a
332	agent	anstream	1.0.0	Apache-2.0 OR MIT	transitive	rust	False		a
333	agent	anstyle	1.0.14	Apache-2.0 OR MIT	transitive	rust	False		a
334	agent	anstyle-parse	1.0.0	Apache-2.0 OR MIT	transitive	rust	False		a
335	agent	anstyle-query	1.1.5	Apache-2.0 OR MIT	transitive	rust	False		a
336	agent	anstyle-wincon	3.0.11	Apache-2.0 OR MIT	transitive	rust	False		a
337	agent	anyhow	1.0.104	Apache-2.0 OR MIT	direct	rust	False		a
338	agent	async-stream	0.3.6	MIT	transitive	rust	False		a
339	agent	async-stream-impl	0.3.6	MIT	transitive	rust	False		a
340	agent	async-trait	0.1.92	Apache-2.0 OR MIT	transitive	rust	False		a
341	agent	atomic-waker	1.1.2	Apache-2.0 OR MIT	transitive	rust	False		a
342	agent	autocfg	1.5.1	Apache-2.0 OR MIT	transitive	rust	False		a
343	agent	axum	0.7.9	MIT	transitive	rust	False		a
344	agent	axum-core	0.4.5	MIT	transitive	rust	False		a
345	agent	base64	0.22.1	Apache-2.0 OR MIT	transitive	rust	False		a
346	agent	bitflags	2.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
347	agent	bytes	1.12.1	MIT	transitive	rust	False		a
348	agent	cc	1.4.2	Apache-2.0 OR MIT	transitive	rust	False		a
349	agent	cfg-if	1.0.4	Apache-2.0 OR MIT	transitive	rust	False		a
350	agent	clap	4.6.6	Apache-2.0 OR MIT	direct	rust	False		a
351	agent	clap_builder	4.6.6	Apache-2.0 OR MIT	transitive	rust	False		a
352	agent	clap_derive	4.6.4	Apache-2.0 OR MIT	transitive	rust	False		a
353	agent	clap_lex	1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
354	agent	colorchoice	1.0.5	Apache-2.0 OR MIT	transitive	rust	False		a
355	agent	either	1.17.0	Apache-2.0 OR MIT	transitive	rust	False		a
356	agent	equivalent	1.0.2	Apache-2.0 OR MIT	transitive	rust	False		a
357	agent	errno	0.3.14	Apache-2.0 OR MIT	transitive	rust	False		a
358	agent	fastrand	2.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
359	agent	find-msvc-tools	0.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
360	agent	fixedbitset	0.5.7	Apache-2.0 OR MIT	transitive	rust	False		a
361	agent	fnv	1.0.7	Apache-2.0 OR MIT	transitive	rust	False		a
362	agent	futures-channel	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
363	agent	futures-core	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
364	agent	futures-sink	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
365	agent	futures-task	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
366	agent	futures-util	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
367	agent	getrandom	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
368	agent	getrandom	0.4.3	Apache-2.0 OR MIT	transitive	rust	False		a
369	agent	h2	0.4.15	MIT	transitive	rust	False		a
370	agent	hashbrown	0.12.3	Apache-2.0 OR MIT	transitive	rust	False		a
371	agent	hashbrown	0.17.1	Apache-2.0 OR MIT	transitive	rust	False		a
372	agent	heck	0.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
373	agent	http	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
374	agent	http-body	1.1.0	MIT	transitive	rust	False		a
375	agent	http-body-util	0.1.5	MIT	transitive	rust	False		a
376	agent	httparse	1.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
377	agent	httpdate	1.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
378	agent	hyper	1.11.0	MIT	transitive	rust	False		a
379	agent	hyper-timeout	0.5.2	Apache-2.0 OR MIT	transitive	rust	False		a
380	agent	hyper-util	0.1.20	MIT	transitive	rust	False		a
381	agent	indexmap	1.9.3	Apache-2.0 OR MIT	transitive	rust	False		a
382	agent	indexmap	2.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
383	agent	is_terminal_polyfill	1.70.2	Apache-2.0 OR MIT	transitive	rust	False		a
384	agent	itertools	0.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
385	agent	itoa	1.0.18	Apache-2.0 OR MIT	transitive	rust	False		a
386	agent	lazy_static	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
387	agent	libc	0.2.189	Apache-2.0 OR MIT	transitive	rust	False		a
388	agent	linux-raw-sys	0.12.1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
389	agent	log	0.4.33	Apache-2.0 OR MIT	transitive	rust	False		a
390	agent	matchers	0.2.0	MIT	transitive	rust	False		a
391	agent	matchit	0.7.3	BSD-3-Clause OR MIT	transitive	rust	False		a
392	agent	memchr	2.8.3	MIT OR Unlicense	transitive	rust	False		a
393	agent	mime	0.3.17	Apache-2.0 OR MIT	transitive	rust	False		a
394	agent	mio	1.2.2	MIT	transitive	rust	False		a
395	agent	multimap	0.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
396	agent	nu-ansi-term	0.50.3	MIT	transitive	rust	False		a
397	agent	once_cell	1.21.4	Apache-2.0 OR MIT	transitive	rust	False		a
398	agent	once_cell_polyfill	1.70.2	Apache-2.0 OR MIT	transitive	rust	False		a
399	agent	percent-encoding	2.3.2	Apache-2.0 OR MIT	transitive	rust	False		a
400	agent	petgraph	0.7.1	Apache-2.0 OR MIT	transitive	rust	False		a
401	agent	pin-project	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
402	agent	pin-project-internal	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
403	agent	pin-project-lite	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
404	agent	ppv-lite86	0.2.21	Apache-2.0 OR MIT	transitive	rust	False		a
405	agent	prettyplease	0.2.37	Apache-2.0 OR MIT	transitive	rust	False		a
406	agent	proc-macro2	1.0.107	Apache-2.0 OR MIT	transitive	rust	False		a
407	agent	prost	0.13.5	Apache-2.0	direct	rust	False		a
408	agent	prost-build	0.13.5	Apache-2.0	transitive	rust	False		a
409	agent	prost-derive	0.13.5	Apache-2.0	transitive	rust	False		a
410	agent	prost-types	0.13.5	Apache-2.0	transitive	rust	False		a
411	agent	quick-xml	0.36.2	MIT	direct	rust	False		a
412	agent	quote	1.0.47	Apache-2.0 OR MIT	transitive	rust	False		a
413	agent	r-efi	6.0.0	Apache-2.0 OR LGPL-2.1-or-later OR MIT	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
414	agent	rand	0.8.7	Apache-2.0 OR MIT	transitive	rust	False		a
415	agent	rand_chacha	0.3.1	Apache-2.0 OR MIT	transitive	rust	False		a
416	agent	rand_core	0.6.4	Apache-2.0 OR MIT	transitive	rust	False		a
417	agent	regex	1.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
418	agent	regex-automata	0.4.18	Apache-2.0 OR MIT	transitive	rust	False		a
419	agent	regex-syntax	0.8.11	Apache-2.0 OR MIT	transitive	rust	False		a
420	agent	ring	0.17.14	Apache-2.0 OR ISC	transitive	rust	False		a
421	agent	rustix	1.1.4	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
422	agent	rustls	0.23.43	Apache-2.0 OR ISC OR MIT	transitive	rust	False		a
423	agent	rustls-pemfile	2.2.0	Apache-2.0 OR ISC OR MIT	transitive	rust	False		a
424	agent	rustls-pki-types	1.15.1	Apache-2.0 OR MIT	transitive	rust	False		a
425	agent	rustls-webpki	0.103.14	ISC	transitive	rust	False		a
426	agent	rustversion	1.0.23	Apache-2.0 OR MIT	transitive	rust	False		a
427	agent	serde	1.0.229	Apache-2.0 OR MIT	direct	rust	False		a
428	agent	serde_core	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
429	agent	serde_derive	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
430	agent	serde_json	1.0.151	Apache-2.0 OR MIT	direct	rust	False		a
431	agent	serde_spanned	0.6.9	Apache-2.0 OR MIT	transitive	rust	False		a
432	agent	sharded-slab	0.1.7	MIT	transitive	rust	False		a
433	agent	shlex	2.0.1	Apache-2.0 OR MIT	transitive	rust	False		a
434	agent	signal-hook-registry	1.4.8	Apache-2.0 OR MIT	transitive	rust	False		a
435	agent	slab	0.4.12	MIT	transitive	rust	False		a
436	agent	smallvec	1.15.2	Apache-2.0 OR MIT	transitive	rust	False		a
437	agent	socket2	0.5.10	Apache-2.0 OR MIT	transitive	rust	False		a
438	agent	socket2	0.6.5	Apache-2.0 OR MIT	transitive	rust	False		a
439	agent	strsim	0.11.1	MIT	transitive	rust	False		a
440	agent	subtle	2.6.1	BSD-3-Clause	transitive	rust	False		a
441	agent	syn	2.0.119	Apache-2.0 OR MIT	transitive	rust	False		a
442	agent	syn	3.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
443	agent	sync_wrapper	1.0.2	Apache-2.0	transitive	rust	False		a
444	agent	tempfile	3.27.0	Apache-2.0 OR MIT	transitive	rust	False		a
445	agent	thread_local	1.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
446	agent	tokio	1.53.1	MIT	direct	rust	False		a
447	agent	tokio-macros	2.7.2	MIT	transitive	rust	False		a
448	agent	tokio-rustls	0.26.4	Apache-2.0 OR MIT	transitive	rust	False		a
449	agent	tokio-stream	0.1.19	MIT	transitive	rust	False		a
450	agent	tokio-util	0.7.19	MIT	transitive	rust	False		a
451	agent	toml	0.8.23	Apache-2.0 OR MIT	direct	rust	False		a
452	agent	toml_datetime	0.6.11	Apache-2.0 OR MIT	transitive	rust	False		a
453	agent	toml_edit	0.22.27	Apache-2.0 OR MIT	transitive	rust	False		a
454	agent	toml_write	0.1.2	Apache-2.0 OR MIT	transitive	rust	False		a
455	agent	tonic	0.12.3	MIT	direct	rust	False		a
456	agent	tonic-build	0.12.3	MIT	direct	rust	False		a
457	agent	tower	0.4.13	MIT	transitive	rust	False		a
458	agent	tower	0.5.3	MIT	transitive	rust	False		a
459	agent	tower-layer	0.3.3	MIT	transitive	rust	False		a
460	agent	tower-service	0.3.3	MIT	transitive	rust	False		a
461	agent	tracing	0.1.44	MIT	direct	rust	False		a
462	agent	tracing-attributes	0.1.31	MIT	transitive	rust	False		a
463	agent	tracing-core	0.1.36	MIT	transitive	rust	False		a
464	agent	tracing-log	0.2.0	MIT	transitive	rust	False		a
465	agent	tracing-subscriber	0.3.23	MIT	direct	rust	False		a
466	agent	try-lock	0.2.5	MIT	transitive	rust	False		a
467	agent	unicode-ident	1.0.24	Apache-2.0 OR MIT OR Unicode-3.0	transitive	rust	False		a
468	agent	untrusted	0.9.0	ISC	transitive	rust	False		a
469	agent	utf8parse	0.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
470	agent	want	0.3.1	MIT	transitive	rust	False		a
471	agent	wasi	0.11.1+wasi-snapshot-preview1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
472	agent	widestring	1.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
473	agent	windows	0.58.0	Apache-2.0 OR MIT	direct	rust	False		a
474	agent	windows-core	0.58.0	Apache-2.0 OR MIT	transitive	rust	False		a
475	agent	windows-implement	0.58.0	Apache-2.0 OR MIT	transitive	rust	False		a
476	agent	windows-interface	0.58.0	Apache-2.0 OR MIT	transitive	rust	False		a
477	agent	windows-link	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
478	agent	windows-result	0.2.0	Apache-2.0 OR MIT	transitive	rust	False		a
479	agent	windows-service	0.7.0	Apache-2.0 OR MIT	direct	rust	False		a
480	agent	windows-strings	0.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
481	agent	windows-sys	0.52.0	Apache-2.0 OR MIT	transitive	rust	False		a
482	agent	windows-sys	0.61.2	Apache-2.0 OR MIT	transitive	rust	False		a
483	agent	windows-targets	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
484	agent	windows_aarch64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
485	agent	windows_aarch64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
486	agent	windows_i686_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
487	agent	windows_i686_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
488	agent	windows_i686_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
489	agent	windows_x86_64_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
490	agent	windows_x86_64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
491	agent	windows_x86_64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
492	agent	winnow	0.7.15	MIT	transitive	rust	False		a
493	agent	zerocopy	0.8.56	Apache-2.0 OR BSD-2-Clause OR MIT	transitive	rust	False		a
494	agent	zeroize	1.9.0	Apache-2.0 OR MIT	transitive	rust	False		a
495	agent	zmij	1.0.23	MIT	transitive	rust	False		a
496	search	adler2	2.0.1	0BSD OR Apache-2.0 OR MIT	transitive	rust	False		a
497	search	aho-corasick	1.1.5	MIT OR Unlicense	transitive	rust	False		a
498	search	allocator-api2	0.2.21	Apache-2.0 OR MIT	transitive	rust	False		a
499	search	anyhow	1.0.104	Apache-2.0 OR MIT	direct	rust	False		a
500	search	arc-swap	1.9.2	Apache-2.0 OR MIT	transitive	rust	False		a
501	search	async-stream	0.3.6	MIT	transitive	rust	False		a
502	search	async-stream-impl	0.3.6	MIT	transitive	rust	False		a
503	search	async-trait	0.1.92	Apache-2.0 OR MIT	transitive	rust	False		a
504	search	atomic-waker	1.1.2	Apache-2.0 OR MIT	transitive	rust	False		a
505	search	autocfg	1.5.1	Apache-2.0 OR MIT	transitive	rust	False		a
506	search	axum	0.7.9	MIT	transitive	rust	False		a
507	search	axum-core	0.4.5	MIT	transitive	rust	False		a
508	search	base64	0.22.1	Apache-2.0 OR MIT	transitive	rust	False		a
509	search	bitflags	2.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
510	search	bitpacking	0.9.3	MIT	transitive	rust	False		a
511	search	block-buffer	0.10.4	Apache-2.0 OR MIT	transitive	rust	False		a
512	search	bon	3.10.0	Apache-2.0 OR MIT	transitive	rust	False		a
513	search	bon-macros	3.10.0	Apache-2.0 OR MIT	transitive	rust	False		a
514	search	bumpalo	3.20.3	Apache-2.0 OR MIT	transitive	rust	False		a
515	search	byteorder	1.5.0	MIT OR Unlicense	transitive	rust	False		a
516	search	bytes	1.12.1	MIT	transitive	rust	False		a
517	search	cc	1.4.2	Apache-2.0 OR MIT	transitive	rust	False		a
518	search	census	0.4.2	MIT	transitive	rust	False		a
519	search	cfg-if	1.0.4	Apache-2.0 OR MIT	transitive	rust	False		a
520	search	chrono	0.4.45	Apache-2.0 OR MIT	transitive	rust	False		a
521	search	cpufeatures	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
522	search	crc32c	0.6.8	Apache-2.0 OR MIT	transitive	rust	False		a
523	search	crc32fast	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
524	search	crossbeam-channel	0.5.16	Apache-2.0 OR MIT	transitive	rust	False		a
525	search	crossbeam-deque	0.8.7	Apache-2.0 OR MIT	transitive	rust	False		a
526	search	crossbeam-epoch	0.9.20	Apache-2.0 OR MIT	transitive	rust	False		a
527	search	crossbeam-utils	0.8.22	Apache-2.0 OR MIT	transitive	rust	False		a
528	search	crunchy	0.2.4	MIT	transitive	rust	False		a
529	search	crypto-common	0.1.7	Apache-2.0 OR MIT	transitive	rust	False		a
530	search	darling	0.24.1	MIT	transitive	rust	False		a
531	search	darling_core	0.24.1	MIT	transitive	rust	False		a
532	search	darling_macro	0.24.1	MIT	transitive	rust	False		a
533	search	datasketches	0.2.0	Apache-2.0	transitive	rust	False		a
534	search	deranged	0.5.8	Apache-2.0 OR MIT	transitive	rust	False		a
535	search	digest	0.10.7	Apache-2.0 OR MIT	transitive	rust	False		a
536	search	displaydoc	0.2.7	Apache-2.0 OR MIT	transitive	rust	False		a
537	search	downcast-rs	2.0.2	Apache-2.0 OR MIT	transitive	rust	False		a
538	search	either	1.17.0	Apache-2.0 OR MIT	transitive	rust	False		a
539	search	equivalent	1.0.2	Apache-2.0 OR MIT	transitive	rust	False		a
540	search	erased-serde	0.4.10	Apache-2.0 OR MIT	transitive	rust	False		a
541	search	errno	0.3.14	Apache-2.0 OR MIT	transitive	rust	False		a
542	search	fastdivide	0.4.2	MIT OR zlib-acknowledgement	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
543	search	fastrand	2.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
544	search	find-msvc-tools	0.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
545	search	fixedbitset	0.5.7	Apache-2.0 OR MIT	transitive	rust	False		a
546	search	flate2	1.1.9	Apache-2.0 OR MIT	transitive	rust	False		a
547	search	fnv	1.0.7	Apache-2.0 OR MIT	transitive	rust	False		a
548	search	foldhash	0.2.0	Zlib	transitive	rust	False		a
549	search	form_urlencoded	1.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
550	search	fs4	0.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
551	search	futures	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
552	search	futures-channel	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
553	search	futures-core	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
554	search	futures-executor	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
555	search	futures-io	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
556	search	futures-macro	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
557	search	futures-sink	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
558	search	futures-task	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
559	search	futures-util	0.3.34	Apache-2.0 OR MIT	transitive	rust	False		a
560	search	generic-array	0.14.7	MIT	transitive	rust	False		a
561	search	getrandom	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
562	search	getrandom	0.4.3	Apache-2.0 OR MIT	transitive	rust	False		a
563	search	h2	0.4.16	MIT	transitive	rust	False		a
564	search	hashbrown	0.12.3	Apache-2.0 OR MIT	transitive	rust	False		a
565	search	hashbrown	0.16.1	Apache-2.0 OR MIT	transitive	rust	False		a
566	search	hashbrown	0.17.1	Apache-2.0 OR MIT	transitive	rust	False		a
567	search	heck	0.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
568	search	hmac	0.12.1	Apache-2.0 OR MIT	transitive	rust	False		a
569	search	htmlescape	0.3.1	Apache-2.0 OR MIT OR MPL-2.0	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
570	search	http	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
571	search	http-body	1.1.0	MIT	transitive	rust	False		a
572	search	http-body-util	0.1.5	MIT	transitive	rust	False		a
573	search	httparse	1.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
574	search	httpdate	1.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
575	search	hyper	1.11.0	MIT	transitive	rust	False		a
576	search	hyper-timeout	0.5.2	Apache-2.0 OR MIT	transitive	rust	False		a
577	search	hyper-util	0.1.20	MIT	transitive	rust	False		a
578	search	icu_collections	2.3.0	Unicode-3.0	transitive	rust	False		a
579	search	icu_locale_core	2.3.0	Unicode-3.0	transitive	rust	False		a
580	search	icu_normalizer	2.3.0	Unicode-3.0	transitive	rust	False		a
581	search	icu_normalizer_data	2.3.0	Unicode-3.0	transitive	rust	False		a
582	search	icu_properties	2.3.0	Unicode-3.0	transitive	rust	False		a
583	search	icu_properties_data	2.3.0	Unicode-3.0	transitive	rust	False		a
584	search	icu_provider	2.3.0	Unicode-3.0	transitive	rust	False		a
585	search	ident_case	1.0.1	Apache-2.0 OR MIT	transitive	rust	False		a
586	search	idna	1.1.0	Apache-2.0 OR MIT	transitive	rust	False		a
587	search	idna_adapter	1.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
588	search	indexmap	1.9.3	Apache-2.0 OR MIT	transitive	rust	False		a
589	search	indexmap	2.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
590	search	integer-encoding	4.1.0	MIT	transitive	rust	False		a
591	search	inventory	0.3.24	Apache-2.0 OR MIT	transitive	rust	False		a
592	search	ipnet	2.12.1	Apache-2.0 OR MIT	transitive	rust	False		a
593	search	itertools	0.14.0	Apache-2.0 OR MIT	transitive	rust	False		a
594	search	itoa	1.0.18	Apache-2.0 OR MIT	transitive	rust	False		a
595	search	jobserver	0.1.35	Apache-2.0 OR MIT	transitive	rust	False		a
596	search	js-sys	0.3.104	Apache-2.0 OR MIT	transitive	rust	False		a
597	search	lazy_static	1.5.0	Apache-2.0 OR MIT	transitive	rust	False		a
598	search	levenshtein_automata	0.2.1	MIT	transitive	rust	False		a
599	search	libc	0.2.189	Apache-2.0 OR MIT	transitive	rust	False		a
600	search	linux-raw-sys	0.12.1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
601	search	litemap	0.8.3	Unicode-3.0	transitive	rust	False		a
602	search	lock_api	0.4.14	Apache-2.0 OR MIT	transitive	rust	False		a
603	search	log	0.4.33	Apache-2.0 OR MIT	transitive	rust	False		a
604	search	lru	0.16.4	MIT	transitive	rust	False		a
605	search	lz4	1.28.1	MIT	transitive	rust	False		a
606	search	lz4-sys	1.11.1+lz4-1.10.0	MIT	transitive	rust	False		a
607	search	lz4_flex	0.13.1	MIT	transitive	rust	False		a
608	search	matchers	0.2.0	MIT	transitive	rust	False		a
609	search	matchit	0.7.3	BSD-3-Clause OR MIT	transitive	rust	False		a
610	search	measure_time	0.9.0	MIT	transitive	rust	False		a
611	search	memchr	2.8.3	MIT OR Unlicense	transitive	rust	False		a
612	search	memmap2	0.9.11	Apache-2.0 OR MIT	transitive	rust	False		a
613	search	mime	0.3.17	Apache-2.0 OR MIT	transitive	rust	False		a
614	search	minimal-lexical	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
615	search	miniz_oxide	0.8.9	Apache-2.0 OR MIT OR Zlib	transitive	rust	False		a
616	search	mio	1.2.2	MIT	transitive	rust	False		a
617	search	multimap	0.10.1	Apache-2.0 OR MIT	transitive	rust	False		a
618	search	murmurhash32	0.3.1	MIT	transitive	rust	False		a
619	search	nom	7.1.3	MIT	transitive	rust	False		a
620	search	nu-ansi-term	0.50.3	MIT	transitive	rust	False		a
621	search	num-conv	0.2.2	Apache-2.0 OR MIT	transitive	rust	False		a
622	search	num-traits	0.2.19	Apache-2.0 OR MIT	transitive	rust	False		a
623	search	once_cell	1.21.4	Apache-2.0 OR MIT	transitive	rust	False		a
624	search	oneshot	0.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
625	search	ordered-float	5.5.0	MIT	transitive	rust	False		a
626	search	ownedbytes	0.9.0	MIT	transitive	rust	False		a
627	search	parking_lot	0.12.5	Apache-2.0 OR MIT	transitive	rust	False		a
628	search	parking_lot_core	0.9.12	Apache-2.0 OR MIT	transitive	rust	False		a
629	search	pbkdf2	0.12.2	Apache-2.0 OR MIT	transitive	rust	False		a
630	search	percent-encoding	2.3.2	Apache-2.0 OR MIT	transitive	rust	False		a
631	search	petgraph	0.7.1	Apache-2.0 OR MIT	transitive	rust	False		a
632	search	pin-project	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
633	search	pin-project-internal	1.1.13	Apache-2.0 OR MIT	transitive	rust	False		a
634	search	pin-project-lite	0.2.17	Apache-2.0 OR MIT	transitive	rust	False		a
635	search	pkg-config	0.3.33	Apache-2.0 OR MIT	transitive	rust	False		a
636	search	potential_utf	0.1.6	Unicode-3.0	transitive	rust	False		a
637	search	powerfmt	0.2.0	Apache-2.0 OR MIT	transitive	rust	False		a
638	search	ppv-lite86	0.2.21	Apache-2.0 OR MIT	transitive	rust	False		a
639	search	prettyplease	0.2.37	Apache-2.0 OR MIT	transitive	rust	False		a
640	search	prettyplease	0.3.0	Apache-2.0 OR MIT	transitive	rust	False		a
641	search	proc-macro2	1.0.107	Apache-2.0 OR MIT	transitive	rust	False		a
642	search	prost	0.13.5	Apache-2.0	direct	rust	False		a
643	search	prost-build	0.13.5	Apache-2.0	transitive	rust	False		a
644	search	prost-derive	0.13.5	Apache-2.0	transitive	rust	False		a
645	search	prost-types	0.13.5	Apache-2.0	transitive	rust	False		a
646	search	quote	1.0.47	Apache-2.0 OR MIT	transitive	rust	False		a
647	search	r-efi	6.0.0	Apache-2.0 OR LGPL-2.1-or-later OR MIT	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
648	search	rand	0.8.7	Apache-2.0 OR MIT	transitive	rust	False		a
649	search	rand_chacha	0.3.1	Apache-2.0 OR MIT	transitive	rust	False		a
650	search	rand_core	0.6.4	Apache-2.0 OR MIT	transitive	rust	False		a
651	search	rayon	1.12.0	Apache-2.0 OR MIT	transitive	rust	False		a
652	search	rayon-core	1.13.0	Apache-2.0 OR MIT	transitive	rust	False		a
653	search	redox_syscall	0.5.18	MIT	transitive	rust	False		a
654	search	regex	1.13.1	Apache-2.0 OR MIT	transitive	rust	False		a
655	search	regex-automata	0.4.18	Apache-2.0 OR MIT	transitive	rust	False		a
656	search	regex-syntax	0.8.11	Apache-2.0 OR MIT	transitive	rust	False		a
657	search	reqwest	0.12.28	Apache-2.0 OR MIT	direct	rust	False		a
658	search	rsasl	2.3.1	Apache-2.0 OR MIT	transitive	rust	False		a
659	search	rskafka	0.6.0	Apache-2.0 OR MIT	direct	rust	False		a
660	search	rust-stemmers	1.2.0	BSD-3-Clause OR MIT	transitive	rust	False		a
661	search	rustc-hash	2.1.3	Apache-2.0 OR MIT	transitive	rust	False		a
662	search	rustc_version	0.4.1	Apache-2.0 OR MIT	transitive	rust	False		a
663	search	rustix	1.1.4	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
664	search	rustversion	1.0.23	Apache-2.0 OR MIT	transitive	rust	False		a
665	search	ryu	1.0.23	Apache-2.0 OR BSL-1.0	transitive	rust	True	carries a copyleft/less-common license alongside permissive alternatives (SPDX OR) -- see classification	a
666	search	scopeguard	1.2.0	Apache-2.0 OR MIT	transitive	rust	False		a
667	search	semver	1.0.28	Apache-2.0 OR MIT	transitive	rust	False		a
668	search	serde	1.0.229	Apache-2.0 OR MIT	direct	rust	False		a
669	search	serde_core	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
670	search	serde_derive	1.0.229	Apache-2.0 OR MIT	transitive	rust	False		a
671	search	serde_json	1.0.151	Apache-2.0 OR MIT	direct	rust	False		a
672	search	serde_urlencoded	0.7.1	Apache-2.0 OR MIT	transitive	rust	False		a
673	search	sha2	0.10.9	Apache-2.0 OR MIT	transitive	rust	False		a
674	search	sharded-slab	0.1.7	MIT	transitive	rust	False		a
675	search	shlex	2.0.1	Apache-2.0 OR MIT	transitive	rust	False		a
676	search	signal-hook-registry	1.4.8	Apache-2.0 OR MIT	transitive	rust	False		a
677	search	simd-adler32	0.3.10	MIT	transitive	rust	False		a
678	search	sketches-ddsketch	0.4.1	Apache-2.0	transitive	rust	False		a
679	search	slab	0.4.12	MIT	transitive	rust	False		a
680	search	smallvec	1.15.2	Apache-2.0 OR MIT	transitive	rust	False		a
681	search	snap	1.1.2	BSD-3-Clause	transitive	rust	False		a
682	search	socket2	0.5.10	Apache-2.0 OR MIT	transitive	rust	False		a
683	search	socket2	0.6.5	Apache-2.0 OR MIT	transitive	rust	False		a
684	search	stable_deref_trait	1.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
685	search	stringprep	0.1.5	Apache-2.0 OR MIT	transitive	rust	False		a
686	search	strsim	0.11.1	MIT	transitive	rust	False		a
687	search	subtle	2.6.1	BSD-3-Clause	transitive	rust	False		a
688	search	syn	2.0.119	Apache-2.0 OR MIT	transitive	rust	False		a
689	search	syn	3.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
690	search	sync_wrapper	1.0.2	Apache-2.0	transitive	rust	False		a
691	search	synstructure	0.13.2	MIT	transitive	rust	False		a
692	search	tantivy	0.26.1	MIT	direct	rust	False		a
693	search	tantivy-bitpacker	0.10.0	MIT	transitive	rust	False		a
694	search	tantivy-columnar	0.7.0	MIT	transitive	rust	False		a
695	search	tantivy-common	0.11.0	MIT	transitive	rust	False		a
696	search	tantivy-fst	0.5.0	MIT OR Unlicense	transitive	rust	False		a
697	search	tantivy-query-grammar	0.26.0	MIT	transitive	rust	False		a
698	search	tantivy-sstable	0.7.0	MIT	transitive	rust	False		a
699	search	tantivy-stacker	0.7.0	MIT	transitive	rust	False		a
700	search	tantivy-tokenizer-api	0.7.0	MIT	transitive	rust	False		a
701	search	tempfile	3.27.0	Apache-2.0 OR MIT	direct	rust	False		a
702	search	thiserror	1.0.69	Apache-2.0 OR MIT	transitive	rust	False		a
703	search	thiserror	2.0.20	Apache-2.0 OR MIT	transitive	rust	False		a
704	search	thiserror-impl	1.0.69	Apache-2.0 OR MIT	transitive	rust	False		a
705	search	thiserror-impl	2.0.20	Apache-2.0 OR MIT	transitive	rust	False		a
706	search	thread_local	1.1.10	Apache-2.0 OR MIT	transitive	rust	False		a
707	search	time	0.3.55	Apache-2.0 OR MIT	transitive	rust	False		a
708	search	time-core	0.1.9	Apache-2.0 OR MIT	transitive	rust	False		a
709	search	time-macros	0.2.32	Apache-2.0 OR MIT	transitive	rust	False		a
710	search	tinystr	0.8.4	Unicode-3.0	transitive	rust	False		a
711	search	tinyvec	1.12.0	Apache-2.0 OR MIT OR Zlib	transitive	rust	False		a
712	search	tinyvec_macros	0.1.1	Apache-2.0 OR MIT OR Zlib	transitive	rust	False		a
713	search	tokio	1.53.1	MIT	direct	rust	False		a
714	search	tokio-macros	2.7.2	MIT	transitive	rust	False		a
715	search	tokio-stream	0.1.19	MIT	transitive	rust	False		a
716	search	tokio-util	0.7.19	MIT	transitive	rust	False		a
717	search	tonic	0.12.3	MIT	direct	rust	False		a
718	search	tonic-build	0.12.3	MIT	direct	rust	False		a
719	search	tower	0.4.13	MIT	transitive	rust	False		a
720	search	tower	0.5.3	MIT	transitive	rust	False		a
721	search	tower-http	0.6.11	MIT	transitive	rust	False		a
722	search	tower-layer	0.3.3	MIT	transitive	rust	False		a
723	search	tower-service	0.3.3	MIT	transitive	rust	False		a
724	search	tracing	0.1.44	MIT	direct	rust	False		a
725	search	tracing-attributes	0.1.31	MIT	transitive	rust	False		a
726	search	tracing-core	0.1.36	MIT	transitive	rust	False		a
727	search	tracing-log	0.2.0	MIT	transitive	rust	False		a
728	search	tracing-subscriber	0.3.23	MIT	direct	rust	False		a
729	search	try-lock	0.2.5	MIT	transitive	rust	False		a
730	search	typeid	1.0.3	Apache-2.0 OR MIT	transitive	rust	False		a
731	search	typenum	1.20.1	Apache-2.0 OR MIT	transitive	rust	False		a
732	search	typetag	0.2.23	Apache-2.0 OR MIT	transitive	rust	False		a
733	search	typetag-impl	0.2.23	Apache-2.0 OR MIT	transitive	rust	False		a
734	search	unicode-bidi	0.3.18	Apache-2.0 OR MIT	transitive	rust	False		a
735	search	unicode-ident	1.0.24	Apache-2.0 OR MIT OR Unicode-3.0	transitive	rust	False		a
736	search	unicode-normalization	0.1.25	Apache-2.0 OR MIT	transitive	rust	False		a
737	search	unicode-properties	0.1.4	Apache-2.0 OR MIT	transitive	rust	False		a
738	search	url	2.5.8	Apache-2.0 OR MIT	transitive	rust	False		a
739	search	utf8-ranges	1.0.5	MIT OR Unlicense	transitive	rust	False		a
740	search	utf8_iter	1.0.4	Apache-2.0 OR MIT	transitive	rust	False		a
741	search	uuid	1.24.0	Apache-2.0 OR MIT	transitive	rust	False		a
742	search	valuable	0.1.1	MIT	transitive	rust	False		a
743	search	version_check	0.9.5	Apache-2.0 OR MIT	transitive	rust	False		a
744	search	want	0.3.1	MIT	transitive	rust	False		a
745	search	wasi	0.11.1+wasi-snapshot-preview1	Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT	transitive	rust	False		a
746	search	wasm-bindgen	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
747	search	wasm-bindgen-futures	0.4.77	Apache-2.0 OR MIT	transitive	rust	False		a
748	search	wasm-bindgen-macro	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
749	search	wasm-bindgen-macro-support	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
750	search	wasm-bindgen-shared	0.2.127	Apache-2.0 OR MIT	transitive	rust	False		a
751	search	web-sys	0.3.104	Apache-2.0 OR MIT	transitive	rust	False		a
752	search	winapi	0.3.9	Apache-2.0 OR MIT	transitive	rust	False		a
753	search	winapi-i686-pc-windows-gnu	0.4.0	Apache-2.0 OR MIT	transitive	rust	False		a
754	search	winapi-x86_64-pc-windows-gnu	0.4.0	Apache-2.0 OR MIT	transitive	rust	False		a
755	search	windows-link	0.2.1	Apache-2.0 OR MIT	transitive	rust	False		a
756	search	windows-sys	0.52.0	Apache-2.0 OR MIT	transitive	rust	False		a
757	search	windows-sys	0.59.0	Apache-2.0 OR MIT	transitive	rust	False		a
758	search	windows-sys	0.61.2	Apache-2.0 OR MIT	transitive	rust	False		a
759	search	windows-targets	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
760	search	windows_aarch64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
761	search	windows_aarch64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
762	search	windows_i686_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
763	search	windows_i686_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
764	search	windows_i686_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
765	search	windows_x86_64_gnu	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
766	search	windows_x86_64_gnullvm	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
767	search	windows_x86_64_msvc	0.52.6	Apache-2.0 OR MIT	transitive	rust	False		a
768	search	writeable	0.6.4	Unicode-3.0	transitive	rust	False		a
769	search	yoke	0.8.3	Unicode-3.0	transitive	rust	False		a
770	search	yoke-derive	0.8.2	Unicode-3.0	transitive	rust	False		a
771	search	zerocopy	0.8.56	Apache-2.0 OR BSD-2-Clause OR MIT	transitive	rust	False		a
772	search	zerocopy-derive	0.8.56	Apache-2.0 OR BSD-2-Clause OR MIT	transitive	rust	False		a
773	search	zerofrom	0.1.8	Unicode-3.0	transitive	rust	False		a
774	search	zerofrom-derive	0.1.7	Unicode-3.0	transitive	rust	False		a
775	search	zerotrie	0.2.5	Unicode-3.0	transitive	rust	False		a
776	search	zerovec	0.11.7	Unicode-3.0	transitive	rust	False		a
777	search	zerovec-derive	0.11.4	Unicode-3.0	transitive	rust	False		a
778	search	zmij	1.0.23	MIT	transitive	rust	False		a
779	search	zstd	0.13.3	MIT	transitive	rust	False		a
780	search	zstd-safe	7.2.4	Apache-2.0 OR MIT	transitive	rust	False		a
781	search	zstd-sys	2.0.16+zstd.1.5.7	Apache-2.0 OR MIT	transitive	rust	False		a
782	web	Overpass (font)	variable	OFL-1.1	direct	font-asset	False		a
783	web	Overpass Mono (font)	variable	OFL-1.1	direct	font-asset	False		a
784	web	favicon.svg	n/a	MIT (Svelte project asset)	direct	vendored-asset	True	Copied from SvelteKit's default project scaffold (<title>svelte-logo</title>), never replaced with an original mark -- not a license-compatibility blocker (Svelte's own assets are MIT) but is unauthored, unattributed, third-party branded content shipping as this product's own favicon. Flagged for replacement, not a legal blocker.	n/a-branding
785	transport	redpanda (docker image)	v24.2.7	BSL 1.1 (Business Source License) for Redpanda Core, as pinned (v24.2.7, released 2024-10-11) -- NOT yet converted to Apache-2.0 (4-year Change Date is ~2028-10-11). Source-available, not OSI-approved open source. Additional Use Grant permits any use except offering it as a hosted 'Streaming or Queuing Service' to third parties.	direct	docker-image	True	Category (c): BSL is explicitly source-available, not OSI-approved open source, per the audit's own classification framework. Verified against the actual licenses/bsl.md at the v24.2.7 tag, not assumed. No AGPL linking-compatibility issue (Redpanda is consumed only over the Kafka wire protocol, never linked into Cairn OBS's own code -- same relationship as ClickHouse/Postgres). Real open question: whether a third party self-hosting Cairn OBS (now fully AGPLv3 per task 6) 'as a service' would trip BSL's Streaming-or-Queuing-Service restriction on the bundled Redpanda image -- Cairn OBS's ingest pipeline creates fixed internal topics, not per-end-user topics, so this is very likely NOT a Streaming-or-Queuing-Service under BSL's own definition, but this is a business/redistribution judgment call, not a pure technical one -- flagged for your decision, not resolved unilaterally. See license-audit-report.md's Redpanda section for the three remediation options (accept as-is / swap to Apache Kafka / flag only). RESOLVED 2026-08-16 (business decision): accept as-is. Cairn OBS's own use (internal Kafka-protocol transport, no resale of broker access) is within BSL's Additional Use Grant; the third-party self-hosting-as-a-service question was judged unlikely to trip BSL's Streaming-or-Queuing-Service restriction, and was accepted as a known, disclosed risk rather than swapping to a heavier broker or dropping the bundled image. See license-audit-report.md's Redpanda section.	c
786	storage	clickhouse-server (docker image)	24.8	Apache-2.0, confirmed directly against ClickHouse's LICENSE file. No evidence of any historical license change (unlike Redpanda/Elastic/MongoDB) -- confirmed via web search plus direct file fetch, not assumed from general reputation.	direct	docker-image	False		a
787	metadata	postgres (docker image)	16-alpine	PostgreSQL License (OSI-approved, MIT/BSD-equivalent permissive terms), confirmed directly against the official postgres/postgres COPYRIGHT file.	direct	docker-image	False		a

62 KiB Raw Blame History

62 KiB

Raw Blame History