Layer IQ

Open-Source Software Notices

Last updated: March 18, 2026

Layer IQ Technologies, Inc.

Published at: https://www.layer-iq.com/legal/oss

Last Updated: March 18, 2026

1. Overview

The Layer IQ platform incorporates open-source software ("OSS") components. This page identifies the OSS components included in the Service, the applicable open-source licenses, and the copyright notices required by those licenses.

Use of the Layer IQ platform is governed by the Terms of Service. To the extent any open-source license expressly supersedes the Terms of Service with respect to a specific OSS component, the open-source license governs your use of that component.

Layer IQ does not claim ownership of OSS components. All rights in OSS components are retained by their respective authors and licensors.

2. License summary

The following table summarizes the open-source license types used by OSS components in the Service. For complete license texts, see Section 5.

LicenseSPDX identifierTypeCount
MIT LicenseMITPermissive831
Apache License 2.0Apache-2.0Permissive240
ISC LicenseISCPermissive48
BSD 3-Clause LicenseBSD-3-ClausePermissive38
BSD 2-Clause LicenseBSD-2-ClausePermissive15
Blue Oak Model License 1.0.0BlueOak-1.0.0Permissive10
The UnlicenseUnlicensePermissive3
Zero-Clause BSD0BSDPermissive2
Mozilla Public License 2.0MPL-2.0Weak copyleft2
Creative Commons Zero 1.0CC0-1.0Public domain dedication1
Creative Commons Attribution 4.0CC-BY-4.0Permissive (attribution)1
Python Software Foundation License 2.0Python-2.0Permissive1
MIT No AttributionMIT-0Permissive1
Dual: Apache-2.0 AND BSD-3-Clause(Apache-2.0 AND BSD-3-Clause)Permissive1
Dual: BSD-2-Clause OR MIT OR Apache-2.0(BSD-2-Clause OR MIT OR Apache-2.0)Permissive1
Dual: MIT AND Zlib(MIT AND Zlib)Permissive1
Dual: MIT OR CC0-1.0(MIT OR CC0-1.0)Permissive1
Dual: MPL-2.0 OR Apache-2.0(MPL-2.0 OR Apache-2.0)Permissive (dual)1
Dual: BSD-3-Clause OR GPL-2.0(BSD-3-Clause OR GPL-2.0)Permissive (dual; BSD-3-Clause selected)1
LGPL 3.0 or laterLGPL-3.0-or-laterWeak copyleft1
UnknownUnknownUnknown1
CommercialCommercialProprietary1

Total: 1,203 packages (direct + transitive, production dependencies)

3. OSS component inventory

The tables below list OSS components included in the Service, organized by application area. Each entry includes the component name, version, license, and copyright holder. Sections 3.1–3.3 list direct production dependencies only. Section 3.4 includes shared libraries and build-time tooling (which are devDependencies in the root workspace but are integral to the build pipeline). Transitive dependencies are omitted for readability.

3.1 Web application

ComponentVersionLicenseCopyright
@marsidev/react-turnstile1.4.2MITLuis Marsiglia
@panva/hkdf1.2.1MITFilip Skokan
@radix-ui/react-accordion1.2.12MITSee package repository
@radix-ui/react-avatar1.1.11MITSee package repository
@radix-ui/react-checkbox1.3.3MITSee package repository
@radix-ui/react-dialog1.1.15MITSee package repository
@radix-ui/react-dropdown-menu2.1.16MITSee package repository
@radix-ui/react-label2.1.8MITSee package repository
@radix-ui/react-popover1.1.15MITSee package repository
@radix-ui/react-progress1.1.8MITSee package repository
@radix-ui/react-select2.2.6MITSee package repository
@radix-ui/react-separator1.1.8MITSee package repository
@radix-ui/react-slider1.3.6MITSee package repository
@radix-ui/react-slot1.2.3MITSee package repository
@radix-ui/react-switch1.2.6MITSee package repository
@radix-ui/react-tabs1.1.13MITSee package repository
@radix-ui/react-tooltip1.2.8MITSee package repository
@stripe/react-stripe-js5.6.1MITStripe
@stripe/stripe-js8.9.0MITStripe
@tailwindcss/postcss4.1.18MITSee package repository
@tanstack/react-query5.90.20MITTanner Linsley
@tanstack/react-table8.21.3MITTanner Linsley
ag-charts-react13.0.1MITAG Grid
class-variance-authority0.7.1Apache-2.0Joe Bell
clsx2.1.1MITLuke Edwards
cmdk1.1.1MITPaco
cookie1.1.1MITRoman Shtylman
framer-motion12.29.0MITMatt Perry
jose4.15.9MITFilip Skokan
jspdf4.2.0MITSee package repository
jspdf-autotable5.0.7MITSimon Bengtsson
lucide-react0.562.0ISCEric Fennis
next15.1.11MITVercel, Inc.
next-intl3.26.5MITJan Amann
posthog-js1.341.0MITPostHog
react19.2.3MITMeta Platforms, Inc. and affiliates
react-dom19.2.3MITMeta Platforms, Inc. and affiliates
sonner1.7.4MITEmil Kowalski
tailwind-merge3.4.0MITDany Castillo
tailwindcss4.1.18MITTailwind Labs, Inc.
typescript5.9.3Apache-2.0Microsoft Corp.
xlsx0.18.5Apache-2.0SheetJS (also used in API Server)

TypeScript type definition packages (@types/*) are listed in dependencies for build compatibility but are compile-time only and do not ship in the runtime application. Transitive dependencies omitted. Run pnpm --filter @layer-iq/web licenses list for the complete list.

3.2 API server

Includes components from apps/api, apps/mcp, and apps/pricing-worker.

ComponentVersionLicenseCopyright
@aws-sdk/client-s33.986.0Apache-2.0AWS SDK for JavaScript Team
@aws-sdk/s3-request-presigner3.986.0Apache-2.0AWS SDK for JavaScript Team
@google-cloud/documentai9.5.0Apache-2.0Google LLC
@modelcontextprotocol/sdk1.27.1MITAnthropic, PBC
cors2.8.6MITTroy Goode
express4.22.1MITTJ Holowaychuk
inngest3.52.5Apache-2.0Inngest Inc.
jose6.1.3MITFilip Skokan
next15.1.11MITVercel, Inc. (also used in Web Application)
node-cron3.0.3ISCLucas Merencia
p-limit7.3.0MITSindre Sorhus
react19.2.3MITMeta Platforms, Inc. and affiliates (also used in Web Application)
react-dom19.2.3MITMeta Platforms, Inc. and affiliates (also used in Web Application)
resend4.8.0MITResend
stripe20.4.0MITStripe
strnum2.1.2MITAmit Gupta
typescript5.9.3Apache-2.0Microsoft Corp. (also used in Web Application)
xlsx0.18.5Apache-2.0SheetJS (also used in Web Application)
zod3.25.76MITColin McDonnell

Transitive dependencies omitted. Run pnpm --filter @layer-iq/api licenses list for the complete list.

3.3 Mobile application

ComponentVersionLicenseCopyright
@babel/runtime7.28.6MITThe Babel Team
@expo/metro-runtime6.1.2MIT650 Industries, Inc.
@expo/vector-icons15.0.3MITBrent Vatne
@react-native-async-storage/async-storage2.2.0MITKrzysztof Borowy
@react-native-community/netinfo11.4.1MITMatt Oakes
@react-native-ml-kit/barcode-scanning2.0.0MITJT Wright
@react-native-ml-kit/text-recognition2.0.0MITAhmed Mahmoud
@react-navigation/native7.1.28MITSee package repository
expo54.0.33MITExpo / 650 Industries, Inc.
expo-application7.0.8MIT650 Industries, Inc.
expo-build-properties1.0.10MIT650 Industries, Inc.
expo-camera17.0.10MIT650 Industries, Inc.
expo-constants18.0.13MIT650 Industries, Inc.
expo-crypto15.0.8MIT650 Industries, Inc.
expo-device8.0.10MIT650 Industries, Inc.
expo-file-system19.0.21MIT650 Industries, Inc.
expo-font14.0.11MIT650 Industries, Inc.
expo-haptics15.0.8MIT650 Industries, Inc.
expo-image-manipulator14.0.8MIT650 Industries, Inc.
expo-linking8.0.11MIT650 Industries, Inc.
expo-local-authentication17.0.8MIT650 Industries, Inc.
expo-localization17.0.8MIT650 Industries, Inc.
expo-modules-core3.0.29MIT650 Industries, Inc.
expo-router6.0.23MIT650 Industries, Inc.
expo-secure-store15.0.8MIT650 Industries, Inc.
expo-splash-screen31.0.13MIT650 Industries, Inc.
expo-sqlite16.0.10MIT650 Industries, Inc.
expo-status-bar3.0.9MIT650 Industries, Inc.
expo-system-ui6.0.9MIT650 Industries, Inc.
expo-web-browser15.0.10MIT650 Industries, Inc.
posthog-react-native4.30.3MITPostHog
react19.1.0MITMeta Platforms, Inc. and affiliates (also used in Web, API)
react-dom19.1.0MITMeta Platforms, Inc. and affiliates (also used in Web, API)
react-native0.81.5MITMeta Platforms, Inc. and affiliates
react-native-auth05.4.0MITAuth0
react-native-gesture-handler2.28.0MITKrzysztof Magiera
react-native-reanimated4.1.6MITKrzysztof Magiera
react-native-safe-area-context5.6.2MITJanic Duplessis
react-native-screens4.16.0MITKrzysztof Magiera
react-native-vision-camera4.7.3MITMarc Rousavy
react-native-web0.21.2MITNicolas Gallagher
react-native-worklets0.7.2MITSee package repository
zustand5.0.11MITPaul Henschel

Transitive dependencies omitted. Run pnpm --filter @layer-iq/mobile licenses list for the complete list.

3.4 Shared libraries and build tools

Includes components from packages/auth, packages/database, and root workspace tooling.

ComponentVersionLicenseCopyright
@auth0/nextjs-auth03.8.0MITAuth0
@babel/types7.29.0MITThe Babel Team
@prisma/adapter-pg7.3.0Apache-2.0Prisma
@prisma/client7.3.0Apache-2.0Prisma
@typescript-eslint/eslint-plugin8.53.1MITtypescript-eslint
@typescript-eslint/parser8.53.1MITtypescript-eslint
@vitest/coverage-v84.0.18MITAnthony Fu
dotenv16.4.7BSD-2-ClauseSee package repository
eslint9.39.2MITNicholas C. Zakas
husky9.1.7MITtypicode
prisma7.3.0Apache-2.0Prisma
turbo2.7.5MITVercel, Inc.
typedoc0.25.13Apache-2.0TypeDoc Contributors
typescript5.9.3Apache-2.0Microsoft Corp. (also used in Web, API)
vitest4.0.18MITAnthony Fu

Transitive dependencies omitted. Run pnpm licenses list for the complete list.

4. Commercial and dual-licensed components

The following components are not open-source or have licensing that warrants special notice. They are listed here for transparency.

ComponentVersionLicense typeLicensorNotes
ag-charts-enterprise13.0.1Commercial (proprietary)AG Grid LtdEnterprise charting library. Requires a valid commercial license key. Not open-source. Used in apps/web for data visualization. The companion package ag-charts-react (MIT wrapper) is listed in Section 3.1.
@img/sharp-libvips-darwin-arm641.0.4LGPL-3.0-or-laterLovell Fuller / sharp projectTransitive dependency of the sharp image processing library. LGPL allows dynamic linking without source disclosure. As a SaaS platform, Layer IQ does not distribute binaries, so LGPL obligations do not trigger. Included for transparency.
node-forge1.3.3BSD-3-Clause OR GPL-2.0Digital Bazaar, Inc.Dual-licensed. Layer IQ uses this component under the BSD-3-Clause license (permissive). No GPL obligations apply.
lightningcss1.30.2MPL-2.0Parcel projectCSS parser/transformer used by Tailwind CSS. MPL-2.0 is file-level copyleft; modifications to MPL-licensed source files must be shared, but using the library as-is in a larger work does not trigger copyleft. No action required for SaaS.
lightningcss-darwin-arm641.30.2MPL-2.0Parcel projectPlatform-specific binary for lightningcss. Same MPL-2.0 analysis as above.
dompurify3.3.1MPL-2.0 OR Apache-2.0Dr.-Ing. Mario Heiderich, Cure53Dual-licensed. Layer IQ uses this under Apache-2.0 (permissive). No copyleft obligations apply.
graphmatch1.1.0UnknownSee package repositoryLicense not detected in package metadata. Repository: https://github.com/fabiospampinato/graphmatch. Manual review indicates MIT license in the repository. Low risk (transitive dependency).
xlsx0.18.5Apache-2.0SheetJSCommunity Edition (CE) published on npm under Apache-2.0. This is the free, open-source version. SheetJS also offers a separate proprietary “Pro” edition which is NOT used. Verified: package.json declares Apache-2.0.

5. License texts

The full text of each open-source license referenced in this document is available at the links below.

6. AGPL and copyleft policy

Layer IQ does not incorporate any software licensed under the GNU Affero General Public License (AGPL) or the GNU General Public License (GPL) in the Service. If a future dependency introduces an AGPL or GPL component, Layer IQ will either obtain a commercial license for that component, replace it with a permissive-licensed alternative, or disclose the relevant source code as required by the applicable license.

Current copyleft status

  • AGPL: None detected.
  • GPL: One dual-licensed package (node-forge) offers GPL-2.0 as an option; Layer IQ uses it under the BSD-3-Clause alternative. No GPL obligations apply.
  • LGPL: One transitive dependency (@img/sharp-libvips-darwin-arm64). As a SaaS platform, Layer IQ does not distribute binaries, so LGPL source-disclosure obligations do not trigger. The dependency is dynamically linked.
  • MPL-2.0: Two packages (lightningcss, lightningcss-darwin-arm64). MPL-2.0 is file-level copyleft; using these libraries without modification does not trigger copyleft obligations. A third package (dompurify) is dual-licensed MPL-2.0 OR Apache-2.0; Layer IQ uses it under Apache-2.0, so no MPL obligations apply.

7. Reporting

If you believe an OSS component is missing from this list, or if you are a copyright holder who believes your attribution requirements are not being met, please contact us at:

Layer IQ Technologies, Inc.
132 W International Speedway Boulevard, #1189
Daytona Beach, FL 32114
Email: legal@layer-iq.com

8. Update history

DateDescription
March 18, 2026Initial publication. Component inventory populated from automated scan (pnpm licenses list). All direct production dependencies cataloged across 4 application areas. Risk assessment completed: no AGPL or runtime GPL dependencies found.