Third-party licences
Lucerta includes open-source components distributed under their respective licences. The main components are listed below, derived from the repository's manifests. For the full text of each licence, the terms published by the respective project apply.
Core (Java / Spring Boot)
| Component | Licence |
|---|---|
| Spring Boot (Web, Security, Data JPA, Validation, Mail, Actuator) 3.3.x | Apache License 2.0 |
| Spring Framework | Apache License 2.0 |
| springdoc-openapi 2.6.x | Apache License 2.0 |
| jjwt (io.jsonwebtoken) 0.12.x | Apache License 2.0 |
| acme4j (org.shredzone.acme4j) 5.1.x | Apache License 2.0 |
| Bouncy Castle (bcprov / bcpkix) 1.83 | MIT (Bouncy Castle Licence) |
| AWS SDK for Java v2 (software.amazon.awssdk) 2.46.x | Apache License 2.0 |
| Jackson (com.fasterxml.jackson) | Apache License 2.0 |
| Hibernate ORM | GNU LGPL 2.1 |
| Flyway | Apache License 2.0 |
| H2 Database | MPL 2.0 / EPL 1.0 (dual licence) |
| PostgreSQL JDBC Driver | BSD 2-Clause |
| MariaDB Java Client | GNU LGPL 2.1 |
| SNMP4J 3.4.x | Apache License 2.0 |
| HikariCP | Apache License 2.0 |
| Logback | EPL 1.0 / LGPL 2.1 |
| Apache Tomcat (embedded) | Apache License 2.0 |
| SLF4J | MIT |
| JUnit 5 (tests only) | Eclipse Public License 2.0 |
| AssertJ (tests only) | Apache License 2.0 |
| Mockito (tests only) | MIT |
Console (Python / FastAPI)
| Component | Licence |
|---|---|
| FastAPI | MIT |
| Starlette | BSD 3-Clause |
| Pydantic | MIT |
| Uvicorn | BSD 3-Clause |
| Jinja2 | BSD 3-Clause |
| httpx | BSD 3-Clause |
| python-multipart | Apache License 2.0 |
| itsdangerous | BSD 3-Clause |
| HTMX (loaded from CDN) | BSD 2-Clause |
| Alpine.js (loaded from CDN) | MIT |
| pytest (development only) | MIT |
| pytest-asyncio (development only) | Apache License 2.0 |
Agent (Go)
| Component | Licence |
|---|---|
| github.com/kardianos/service | zlib |
| gopkg.in/yaml.v3 | MIT / Apache License 2.0 (dual licence) |
| golang.org/x/sys | BSD 3-Clause |
Notes
This list covers the main components and is not exhaustive: transitive dependencies may vary between versions. The complete list of components and licences (SBOM) is generated automatically at release time from the project's manifests.
The respective licences apply to third-party components; the Licence (EULA) applies to the original parts of the Software. In the event of a conflict, Section 5 of the EULA applies.