Open-Source Software Notices
Last updated: March 18, 2026
Layer IQ Technologies, Inc.
Published at: https://www.layer-iq.com/legal/oss
Last Updated: March 18, 2026
1. Overview
The Layer IQ platform incorporates open-source software ("OSS") components. This page identifies the OSS components included in the Service, the applicable open-source licenses, and the copyright notices required by those licenses.
Use of the Layer IQ platform is governed by the Terms of Service. To the extent any open-source license expressly supersedes the Terms of Service with respect to a specific OSS component, the open-source license governs your use of that component.
Layer IQ does not claim ownership of OSS components. All rights in OSS components are retained by their respective authors and licensors.
2. License summary
The following table summarizes the open-source license types used by OSS components in the Service. For complete license texts, see Section 5.
| License | SPDX identifier | Type | Count |
|---|---|---|---|
| MIT License | MIT | Permissive | 831 |
| Apache License 2.0 | Apache-2.0 | Permissive | 240 |
| ISC License | ISC | Permissive | 48 |
| BSD 3-Clause License | BSD-3-Clause | Permissive | 38 |
| BSD 2-Clause License | BSD-2-Clause | Permissive | 15 |
| Blue Oak Model License 1.0.0 | BlueOak-1.0.0 | Permissive | 10 |
| The Unlicense | Unlicense | Permissive | 3 |
| Zero-Clause BSD | 0BSD | Permissive | 2 |
| Mozilla Public License 2.0 | MPL-2.0 | Weak copyleft | 2 |
| Creative Commons Zero 1.0 | CC0-1.0 | Public domain dedication | 1 |
| Creative Commons Attribution 4.0 | CC-BY-4.0 | Permissive (attribution) | 1 |
| Python Software Foundation License 2.0 | Python-2.0 | Permissive | 1 |
| MIT No Attribution | MIT-0 | Permissive | 1 |
| Dual: Apache-2.0 AND BSD-3-Clause | (Apache-2.0 AND BSD-3-Clause) | Permissive | 1 |
| Dual: BSD-2-Clause OR MIT OR Apache-2.0 | (BSD-2-Clause OR MIT OR Apache-2.0) | Permissive | 1 |
| Dual: MIT AND Zlib | (MIT AND Zlib) | Permissive | 1 |
| Dual: MIT OR CC0-1.0 | (MIT OR CC0-1.0) | Permissive | 1 |
| Dual: MPL-2.0 OR Apache-2.0 | (MPL-2.0 OR Apache-2.0) | Permissive (dual) | 1 |
| Dual: BSD-3-Clause OR GPL-2.0 | (BSD-3-Clause OR GPL-2.0) | Permissive (dual; BSD-3-Clause selected) | 1 |
| LGPL 3.0 or later | LGPL-3.0-or-later | Weak copyleft | 1 |
| Unknown | Unknown | Unknown | 1 |
| Commercial | Commercial | Proprietary | 1 |
Total: 1,203 packages (direct + transitive, production dependencies)
3. OSS component inventory
The tables below list OSS components included in the Service, organized by application area. Each entry includes the component name, version, license, and copyright holder. Sections 3.1–3.3 list direct production dependencies only. Section 3.4 includes shared libraries and build-time tooling (which are devDependencies in the root workspace but are integral to the build pipeline). Transitive dependencies are omitted for readability.
3.1 Web application
| Component | Version | License | Copyright |
|---|---|---|---|
| @marsidev/react-turnstile | 1.4.2 | MIT | Luis Marsiglia |
| @panva/hkdf | 1.2.1 | MIT | Filip Skokan |
| @radix-ui/react-accordion | 1.2.12 | MIT | See package repository |
| @radix-ui/react-avatar | 1.1.11 | MIT | See package repository |
| @radix-ui/react-checkbox | 1.3.3 | MIT | See package repository |
| @radix-ui/react-dialog | 1.1.15 | MIT | See package repository |
| @radix-ui/react-dropdown-menu | 2.1.16 | MIT | See package repository |
| @radix-ui/react-label | 2.1.8 | MIT | See package repository |
| @radix-ui/react-popover | 1.1.15 | MIT | See package repository |
| @radix-ui/react-progress | 1.1.8 | MIT | See package repository |
| @radix-ui/react-select | 2.2.6 | MIT | See package repository |
| @radix-ui/react-separator | 1.1.8 | MIT | See package repository |
| @radix-ui/react-slider | 1.3.6 | MIT | See package repository |
| @radix-ui/react-slot | 1.2.3 | MIT | See package repository |
| @radix-ui/react-switch | 1.2.6 | MIT | See package repository |
| @radix-ui/react-tabs | 1.1.13 | MIT | See package repository |
| @radix-ui/react-tooltip | 1.2.8 | MIT | See package repository |
| @stripe/react-stripe-js | 5.6.1 | MIT | Stripe |
| @stripe/stripe-js | 8.9.0 | MIT | Stripe |
| @tailwindcss/postcss | 4.1.18 | MIT | See package repository |
| @tanstack/react-query | 5.90.20 | MIT | Tanner Linsley |
| @tanstack/react-table | 8.21.3 | MIT | Tanner Linsley |
| ag-charts-react | 13.0.1 | MIT | AG Grid |
| class-variance-authority | 0.7.1 | Apache-2.0 | Joe Bell |
| clsx | 2.1.1 | MIT | Luke Edwards |
| cmdk | 1.1.1 | MIT | Paco |
| cookie | 1.1.1 | MIT | Roman Shtylman |
| framer-motion | 12.29.0 | MIT | Matt Perry |
| jose | 4.15.9 | MIT | Filip Skokan |
| jspdf | 4.2.0 | MIT | See package repository |
| jspdf-autotable | 5.0.7 | MIT | Simon Bengtsson |
| lucide-react | 0.562.0 | ISC | Eric Fennis |
| next | 15.1.11 | MIT | Vercel, Inc. |
| next-intl | 3.26.5 | MIT | Jan Amann |
| posthog-js | 1.341.0 | MIT | PostHog |
| react | 19.2.3 | MIT | Meta Platforms, Inc. and affiliates |
| react-dom | 19.2.3 | MIT | Meta Platforms, Inc. and affiliates |
| sonner | 1.7.4 | MIT | Emil Kowalski |
| tailwind-merge | 3.4.0 | MIT | Dany Castillo |
| tailwindcss | 4.1.18 | MIT | Tailwind Labs, Inc. |
| typescript | 5.9.3 | Apache-2.0 | Microsoft Corp. |
| xlsx | 0.18.5 | Apache-2.0 | SheetJS (also used in API Server) |
TypeScript type definition packages (@types/*) are listed in dependencies for build compatibility but are compile-time only and do not ship in the runtime application. Transitive dependencies omitted. Run pnpm --filter @layer-iq/web licenses list for the complete list.
3.2 API server
Includes components from apps/api, apps/mcp, and apps/pricing-worker.
| Component | Version | License | Copyright |
|---|---|---|---|
| @aws-sdk/client-s3 | 3.986.0 | Apache-2.0 | AWS SDK for JavaScript Team |
| @aws-sdk/s3-request-presigner | 3.986.0 | Apache-2.0 | AWS SDK for JavaScript Team |
| @google-cloud/documentai | 9.5.0 | Apache-2.0 | Google LLC |
| @modelcontextprotocol/sdk | 1.27.1 | MIT | Anthropic, PBC |
| cors | 2.8.6 | MIT | Troy Goode |
| express | 4.22.1 | MIT | TJ Holowaychuk |
| inngest | 3.52.5 | Apache-2.0 | Inngest Inc. |
| jose | 6.1.3 | MIT | Filip Skokan |
| next | 15.1.11 | MIT | Vercel, Inc. (also used in Web Application) |
| node-cron | 3.0.3 | ISC | Lucas Merencia |
| p-limit | 7.3.0 | MIT | Sindre Sorhus |
| react | 19.2.3 | MIT | Meta Platforms, Inc. and affiliates (also used in Web Application) |
| react-dom | 19.2.3 | MIT | Meta Platforms, Inc. and affiliates (also used in Web Application) |
| resend | 4.8.0 | MIT | Resend |
| stripe | 20.4.0 | MIT | Stripe |
| strnum | 2.1.2 | MIT | Amit Gupta |
| typescript | 5.9.3 | Apache-2.0 | Microsoft Corp. (also used in Web Application) |
| xlsx | 0.18.5 | Apache-2.0 | SheetJS (also used in Web Application) |
| zod | 3.25.76 | MIT | Colin McDonnell |
Transitive dependencies omitted. Run pnpm --filter @layer-iq/api licenses list for the complete list.
3.3 Mobile application
| Component | Version | License | Copyright |
|---|---|---|---|
| @babel/runtime | 7.28.6 | MIT | The Babel Team |
| @expo/metro-runtime | 6.1.2 | MIT | 650 Industries, Inc. |
| @expo/vector-icons | 15.0.3 | MIT | Brent Vatne |
| @react-native-async-storage/async-storage | 2.2.0 | MIT | Krzysztof Borowy |
| @react-native-community/netinfo | 11.4.1 | MIT | Matt Oakes |
| @react-native-ml-kit/barcode-scanning | 2.0.0 | MIT | JT Wright |
| @react-native-ml-kit/text-recognition | 2.0.0 | MIT | Ahmed Mahmoud |
| @react-navigation/native | 7.1.28 | MIT | See package repository |
| expo | 54.0.33 | MIT | Expo / 650 Industries, Inc. |
| expo-application | 7.0.8 | MIT | 650 Industries, Inc. |
| expo-build-properties | 1.0.10 | MIT | 650 Industries, Inc. |
| expo-camera | 17.0.10 | MIT | 650 Industries, Inc. |
| expo-constants | 18.0.13 | MIT | 650 Industries, Inc. |
| expo-crypto | 15.0.8 | MIT | 650 Industries, Inc. |
| expo-device | 8.0.10 | MIT | 650 Industries, Inc. |
| expo-file-system | 19.0.21 | MIT | 650 Industries, Inc. |
| expo-font | 14.0.11 | MIT | 650 Industries, Inc. |
| expo-haptics | 15.0.8 | MIT | 650 Industries, Inc. |
| expo-image-manipulator | 14.0.8 | MIT | 650 Industries, Inc. |
| expo-linking | 8.0.11 | MIT | 650 Industries, Inc. |
| expo-local-authentication | 17.0.8 | MIT | 650 Industries, Inc. |
| expo-localization | 17.0.8 | MIT | 650 Industries, Inc. |
| expo-modules-core | 3.0.29 | MIT | 650 Industries, Inc. |
| expo-router | 6.0.23 | MIT | 650 Industries, Inc. |
| expo-secure-store | 15.0.8 | MIT | 650 Industries, Inc. |
| expo-splash-screen | 31.0.13 | MIT | 650 Industries, Inc. |
| expo-sqlite | 16.0.10 | MIT | 650 Industries, Inc. |
| expo-status-bar | 3.0.9 | MIT | 650 Industries, Inc. |
| expo-system-ui | 6.0.9 | MIT | 650 Industries, Inc. |
| expo-web-browser | 15.0.10 | MIT | 650 Industries, Inc. |
| posthog-react-native | 4.30.3 | MIT | PostHog |
| react | 19.1.0 | MIT | Meta Platforms, Inc. and affiliates (also used in Web, API) |
| react-dom | 19.1.0 | MIT | Meta Platforms, Inc. and affiliates (also used in Web, API) |
| react-native | 0.81.5 | MIT | Meta Platforms, Inc. and affiliates |
| react-native-auth0 | 5.4.0 | MIT | Auth0 |
| react-native-gesture-handler | 2.28.0 | MIT | Krzysztof Magiera |
| react-native-reanimated | 4.1.6 | MIT | Krzysztof Magiera |
| react-native-safe-area-context | 5.6.2 | MIT | Janic Duplessis |
| react-native-screens | 4.16.0 | MIT | Krzysztof Magiera |
| react-native-vision-camera | 4.7.3 | MIT | Marc Rousavy |
| react-native-web | 0.21.2 | MIT | Nicolas Gallagher |
| react-native-worklets | 0.7.2 | MIT | See package repository |
| zustand | 5.0.11 | MIT | Paul Henschel |
Transitive dependencies omitted. Run pnpm --filter @layer-iq/mobile licenses list for the complete list.
3.4 Shared libraries and build tools
Includes components from packages/auth, packages/database, and root workspace tooling.
| Component | Version | License | Copyright |
|---|---|---|---|
| @auth0/nextjs-auth0 | 3.8.0 | MIT | Auth0 |
| @babel/types | 7.29.0 | MIT | The Babel Team |
| @prisma/adapter-pg | 7.3.0 | Apache-2.0 | Prisma |
| @prisma/client | 7.3.0 | Apache-2.0 | Prisma |
| @typescript-eslint/eslint-plugin | 8.53.1 | MIT | typescript-eslint |
| @typescript-eslint/parser | 8.53.1 | MIT | typescript-eslint |
| @vitest/coverage-v8 | 4.0.18 | MIT | Anthony Fu |
| dotenv | 16.4.7 | BSD-2-Clause | See package repository |
| eslint | 9.39.2 | MIT | Nicholas C. Zakas |
| husky | 9.1.7 | MIT | typicode |
| prisma | 7.3.0 | Apache-2.0 | Prisma |
| turbo | 2.7.5 | MIT | Vercel, Inc. |
| typedoc | 0.25.13 | Apache-2.0 | TypeDoc Contributors |
| typescript | 5.9.3 | Apache-2.0 | Microsoft Corp. (also used in Web, API) |
| vitest | 4.0.18 | MIT | Anthony Fu |
Transitive dependencies omitted. Run pnpm licenses list for the complete list.
4. Commercial and dual-licensed components
The following components are not open-source or have licensing that warrants special notice. They are listed here for transparency.
| Component | Version | License type | Licensor | Notes |
|---|---|---|---|---|
| ag-charts-enterprise | 13.0.1 | Commercial (proprietary) | AG Grid Ltd | Enterprise charting library. Requires a valid commercial license key. Not open-source. Used in apps/web for data visualization. The companion package ag-charts-react (MIT wrapper) is listed in Section 3.1. |
| @img/sharp-libvips-darwin-arm64 | 1.0.4 | LGPL-3.0-or-later | Lovell Fuller / sharp project | Transitive dependency of the sharp image processing library. LGPL allows dynamic linking without source disclosure. As a SaaS platform, Layer IQ does not distribute binaries, so LGPL obligations do not trigger. Included for transparency. |
| node-forge | 1.3.3 | BSD-3-Clause OR GPL-2.0 | Digital Bazaar, Inc. | Dual-licensed. Layer IQ uses this component under the BSD-3-Clause license (permissive). No GPL obligations apply. |
| lightningcss | 1.30.2 | MPL-2.0 | Parcel project | CSS parser/transformer used by Tailwind CSS. MPL-2.0 is file-level copyleft; modifications to MPL-licensed source files must be shared, but using the library as-is in a larger work does not trigger copyleft. No action required for SaaS. |
| lightningcss-darwin-arm64 | 1.30.2 | MPL-2.0 | Parcel project | Platform-specific binary for lightningcss. Same MPL-2.0 analysis as above. |
| dompurify | 3.3.1 | MPL-2.0 OR Apache-2.0 | Dr.-Ing. Mario Heiderich, Cure53 | Dual-licensed. Layer IQ uses this under Apache-2.0 (permissive). No copyleft obligations apply. |
| graphmatch | 1.1.0 | Unknown | See package repository | License not detected in package metadata. Repository: https://github.com/fabiospampinato/graphmatch. Manual review indicates MIT license in the repository. Low risk (transitive dependency). |
| xlsx | 0.18.5 | Apache-2.0 | SheetJS | Community Edition (CE) published on npm under Apache-2.0. This is the free, open-source version. SheetJS also offers a separate proprietary “Pro” edition which is NOT used. Verified: package.json declares Apache-2.0. |
5. License texts
The full text of each open-source license referenced in this document is available at the links below.
- MIT License https://opensource.org/licenses/MIT
- Apache License 2.0 https://www.apache.org/licenses/LICENSE-2.0
- BSD 2-Clause License https://opensource.org/licenses/BSD-2-Clause
- BSD 3-Clause License https://opensource.org/licenses/BSD-3-Clause
- ISC License https://opensource.org/licenses/ISC
- Mozilla Public License 2.0 https://www.mozilla.org/en-US/MPL/2.0/
- Blue Oak Model License 1.0.0 https://blueoakcouncil.org/license/1.0.0
- The Unlicense https://unlicense.org/
- GNU Lesser General Public License v3.0 https://www.gnu.org/licenses/lgpl-3.0.html
- Zero-Clause BSD (0BSD) https://opensource.org/licenses/0BSD
- Creative Commons Zero 1.0 (CC0-1.0) https://creativecommons.org/publicdomain/zero/1.0/
- Creative Commons Attribution 4.0 (CC-BY-4.0) https://creativecommons.org/licenses/by/4.0/
- Python Software Foundation License 2.0 https://opensource.org/licenses/Python-2.0
- MIT No Attribution (MIT-0) https://opensource.org/licenses/MIT-0
6. AGPL and copyleft policy
Layer IQ does not incorporate any software licensed under the GNU Affero General Public License (AGPL) or the GNU General Public License (GPL) in the Service. If a future dependency introduces an AGPL or GPL component, Layer IQ will either obtain a commercial license for that component, replace it with a permissive-licensed alternative, or disclose the relevant source code as required by the applicable license.
Current copyleft status
- AGPL: None detected.
- GPL: One dual-licensed package (node-forge) offers GPL-2.0 as an option; Layer IQ uses it under the BSD-3-Clause alternative. No GPL obligations apply.
- LGPL: One transitive dependency (@img/sharp-libvips-darwin-arm64). As a SaaS platform, Layer IQ does not distribute binaries, so LGPL source-disclosure obligations do not trigger. The dependency is dynamically linked.
- MPL-2.0: Two packages (lightningcss, lightningcss-darwin-arm64). MPL-2.0 is file-level copyleft; using these libraries without modification does not trigger copyleft obligations. A third package (dompurify) is dual-licensed MPL-2.0 OR Apache-2.0; Layer IQ uses it under Apache-2.0, so no MPL obligations apply.
7. Reporting
If you believe an OSS component is missing from this list, or if you are a copyright holder who believes your attribution requirements are not being met, please contact us at:
Layer IQ Technologies, Inc.
132 W International Speedway Boulevard, #1189
Daytona Beach, FL 32114
Email: legal@layer-iq.com
8. Update history
| Date | Description |
|---|---|
| March 18, 2026 | Initial publication. Component inventory populated from automated scan (pnpm licenses list). All direct production dependencies cataloged across 4 application areas. Risk assessment completed: no AGPL or runtime GPL dependencies found. |
