Overview
The Veirox CLI and Veirox Connect binaries are themselves licensed under the Apache License, Version 2.0 (see each project's NOTICE file). Both are built on open-source packages maintained by their own communities, each under its own license.
This page lists the direct dependencies of each binary — what's declared in go.mod (CLI) and Cargo.toml (Connect) — with the license each project publishes. It is not an exhaustive transitive-dependency audit (each has additional indirect dependencies pulled in by these), and it's a summary for a quick vendor-review pass, not a substitute for your own legal review. The authoritative, complete manifest for either binary is its lockfile (go.sum / Cargo.lock) — contact us if you need the full transitive list for a compliance process.
Veirox CLI (Go)
| Package | License |
|---|---|
github.com/spf13/cobra | Apache-2.0 |
gopkg.in/ini.v1 | Apache-2.0 |
gopkg.in/yaml.v3 | Apache-2.0 / MIT |
github.com/charmbracelet/bubbletea | MIT |
github.com/charmbracelet/bubbles | MIT |
github.com/charmbracelet/lipgloss | MIT |
github.com/charmbracelet/log | MIT |
github.com/mattn/go-isatty | MIT |
github.com/pelletier/go-toml/v2 | MIT |
github.com/posthog/posthog-go | MIT |
github.com/r3labs/sse/v2 | MIT |
github.com/stretchr/testify | MIT |
github.com/zalando/go-keyring | MIT |
github.com/atotto/clipboard | BSD-3-Clause |
github.com/gofrs/flock | BSD-3-Clause |
github.com/google/uuid | BSD-3-Clause |
golang.org/x/sync | BSD-3-Clause |
Veirox Connect (Rust)
| Crate | License |
|---|---|
tokio | MIT |
tokio-tungstenite | MIT |
tracing | MIT |
tracing-subscriber | MIT |
sysinfo | MIT |
nix | MIT |
anyhow | MIT / Apache-2.0 |
base64 | MIT / Apache-2.0 |
clap | MIT / Apache-2.0 |
futures-util | MIT / Apache-2.0 |
rand | MIT / Apache-2.0 |
rcgen | MIT / Apache-2.0 |
reqwest | MIT / Apache-2.0 |
serde | MIT / Apache-2.0 |
serde_json | MIT / Apache-2.0 |
thiserror | MIT / Apache-2.0 |
uuid | MIT / Apache-2.0 |
x509-parser | MIT / Apache-2.0 |
rustls | Apache-2.0 / ISC / MIT |
rustls-native-certs | Apache-2.0 / ISC / MIT |
rustls-pemfile | Apache-2.0 / ISC / MIT |
globset | MIT / Unlicense |
Verifying this list
License strings above are as declared by each package at the time of writing — dependency versions change over time and some packages relicense between versions. To verify against the exact versions shipped in a given release, check that release's go.sum (CLI) or Cargo.lock (Connect) in the corresponding source tag, or run a license scanner (go-licenses, cargo-license) against it yourself.