inbuxa-server/THIRD-PARTY.md

Third-party code

INBUXA is a fork of Stalwart. Stalwart is original work by Stalwart Labs LLC, not a fork of anything, but a few of its files carry code, adapted or ported, from other projects under permissive licenses. Those parts stay under their own licenses, not the AGPL, and their notices are reproduced here as the licenses require. Where a project offers MIT or Apache-2.0, INBUXA takes it under MIT.

tools/fork/strip.py lists every such file on each upstream import and names any this page doesn't cover yet (docs/spec/SPEC.md §2.2). The fork's own code, and Rust crates pulled in as dependencies, aren't listed here: dependencies carry their own license files.

Under the MIT license

Where	From	Notice
crates/common/src/scripts/functions/text.rs	levenshtein-rs	Copyright (c) 2016 Titus Wormer [email protected]
crates/common/src/telemetry/tracers/journald.rs	the journald snippet	Copyright (c) 2018 Benjamin Saunders [email protected]
crates/jmap/src/registry/mapping/log.rs	rev_lines	Copyright (c) 2017 Michael Coyne [email protected]
crates/imap-proto/src/utf7.rs	MailKit, by Jeffrey Stedfast	Copyright (C) 2013-2026 .NET Foundation and Contributors
crates/nlp/src/tokenizers/japanese.rs	rust-tinysegmenter	Copyright (c) 2015 woxtu
crates/store/src/backend/postgres/tls.rs	tokio-postgres-rustls	Copyright (c) 2019 Jasper Hugo
crates/common/src/network/acme/directory.rs, crates/common/src/network/acme/jose.rs, crates/common/src/network/acme/order.rs	rustls-acme (MIT or Apache-2.0)	Copyright (c) Florian Uekermann
crates/types/src/id.rs	crockford (MIT or Apache-2.0)	Copyright (c) 2017 J/A [email protected]
crates/nlp/src/tokenizers/types.rs	test cases from linkify (MIT or Apache-2.0)	Copyright (c) 2017 Robin Stocker
crates/calcard/src/datecalc/error.rs	rust-rrule (MIT or Apache-2.0)	Copyright (c) 2021 Fredrik Meringdal, Ralph Bisschops
crates/calcard/src/datecalc/recurrence.rs, crates/calcard/src/datecalc/weekdate.rs	bttf, by Andrew Gallant (MIT or Unlicense)	Copyright (c) 2025 Andrew Gallant [email protected]
crates/jmap-tools/src/json/deserializer.rs, crates/jmap-tools/src/json/index.rs, crates/jmap-tools/src/json/key.rs, crates/jmap-tools/src/json/mod.rs, crates/jmap-tools/src/json/num.rs, crates/jmap-tools/src/json/object_vec.rs, crates/jmap-tools/src/json/ser.rs	code by Pascal Seitz, apparently serde_json_borrow (MIT or Apache-2.0); the files name the author, not the project. crates/jmap-tools/src/json/value.rs carries no notice but belongs with them	Copyright (c) 2021 Pascal Seitz [email protected]
resources/spam-filter/spam-filter-rules.json.gz	the published rules of spam-filter v3.0.2, unmodified, built into the server as its default spam rules (MIT or Apache-2.0)	Copyright (C) 2024, Stalwart Labs LLC

Each notice above applies with this permission notice:

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Under the BSD 3-Clause license

Where	From	Notice
crates/jmap-proto/src/types/date.rs, crates/registry/src/types/datetime.rs, crates/smtp-proto/src/request/parser.rs	upb, the date parsing marked in each file	Copyright (c) 2009-2011, Google Inc. All rights reserved.

Copyright (c) 2009-2011, Google Inc.
All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

    * Redistributions of source code must retain the above copyright
      notice, this list of conditions and the following disclaimer.
    * Redistributions in binary form must reproduce the above copyright
      notice, this list of conditions and the following disclaimer in the
      documentation and/or other materials provided with the distribution.
    * Neither the name of Google Inc. nor the names of any other
      contributors may be used to endorse or promote products
      derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY GOOGLE INC. ``AS IS'' AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
EVENT SHALL GOOGLE INC. BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.

Data derived from Adobe's published resources

The PDF text extractor (crates/text-extract/src/pdf/tables/) ships compact tables that, going by their contents, were built from Adobe's published font resources. The files don't say so; they're credited here because the data matches. Each is a modified, compacted form, not the original files.

Where	From	Notice
cid_cns1.bin, cid_gb1.bin, cid_japan1.bin, cid_korea1.bin, cid_data.rs, cmap_data.rs	the CID-to-Unicode mappings and predefined CMaps of cmap-resources	Copyright 1990-2023 Adobe. All rights reserved.
glyph_data.rs	the Adobe Glyph List	Copyright 2002-2019 Adobe (http://www.adobe.com/).
font_data.rs	the character widths of the Core 14 AFM files	Copyright (c) 1985, 1987, 1989, 1990, 1997 Adobe Systems Incorporated. All Rights Reserved.

The cmap-resources and Adobe Glyph List notices apply with this license:

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

    * Redistributions of source code must retain the above copyright
      notice, this list of conditions and the following disclaimer.
    * Redistributions in binary form must reproduce the above copyright
      notice, this list of conditions and the following disclaimer in the
      documentation and/or other materials provided with the distribution.
    * Neither the name of Adobe nor the names of its contributors may be
      used to endorse or promote products derived from this software
      without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.

The Core 14 AFM notice applies with Adobe's permission paragraph:

This file and the 14 PostScript(R) AFM files it accompanies may be used, copied, and distributed for any purpose and without charge, with or without modification, provided that all copyright notices are retained; that the AFM files are not distributed without this file; that all modifications to this file or any of the AFM files are prominently noted in the modified file(s); and that this paragraph is not modified.

INBUXA distributes none of the AFM files themselves, only widths taken from them and repacked as above.

Credited algorithms

These files implement published algorithms and credit their source. No code is copied, so there's no notice to carry. They're listed so the strip report doesn't flag them as new.

• crates/jmap-proto/src/types/date.rs, crates/registry/src/types/datetime.rs, crates/smtp-proto/src/response/generate.rs: civil_from_days, from Howard Hinnant's date algorithms
• crates/utils/src/glob.rs: Russ Cox's glob matching

Upstream's own files under a permissive license

Stalwart Labs' own code, released under a license other than the AGPL. No third-party notice applies; listed so the strip report doesn't flag them.

• crates/calcard/src/datecalc/rrule.rs (Apache-2.0 or MIT)
• crates/smtp-report/src/lib.rs (flagged only because its documentation says an address "is taken from" a struct)

Crates upstream moved into its tree

Stalwart 1.0 brought four of its own libraries into the server's tree and relabeled them AGPL-3.0-only OR LicenseRef-SEL. Each was published on crates.io by Stalwart Labs under Apache-2.0 OR MIT, and those releases stay under those terms. The third-party parts inside them are listed above.

In this tree	Last published permissive release
crates/calcard	calcard 0.3.14
crates/jmap-tools	jmap-tools 0.1.8
crates/smtp-proto	smtp-proto 0.2.5
crates/smtp-report	the report module of mail-auth 0.13.3