Third-party licenses¶
kubelatch includes open-source components made by others. This page lists those that ship with it: the Go modules linked into the kubelatch-server and kubelatch binaries, the JavaScript packages bundled into the web interface that kubelatch-server serves, and the font and container image base that come with them. Section 7 of the kubelatch End User License Agreement refers to this list. Each component is governed by its own license, linked in the last column, and the agreement does not limit the rights that license grants. The page is generated from the dependency graph of the source code (make licenses), and CI fails when it falls behind.
Go modules of the server and the CLI¶
Every module linked into either binary for Linux or macOS, on amd64 or arm64. The binaries are built with Go, whose standard library and runtime are under the Go license (BSD-3-Clause) and are not listed as modules.
| Component | Version | License | License text |
|---|---|---|---|
github.com/davecgh/go-spew |
v1.1.2-0.20180830191138-d8f796af33cc |
ISC | pkg.go.dev |
github.com/emicklei/go-restful/v3 |
v3.13.0 |
MIT | pkg.go.dev |
github.com/fxamacker/cbor/v2 |
v2.9.1 |
MIT | pkg.go.dev |
github.com/go-logr/logr |
v1.4.4 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/jsonpointer |
v1.0.0 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/jsonreference |
v1.0.0 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/cmdutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/conv |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/fileutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/jsonutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/loading |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/mangling |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/netutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/pools |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/stringutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/typeutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/go-openapi/swag/yamlutils |
v0.27.1 |
Apache-2.0 | pkg.go.dev |
github.com/golang-jwt/jwt/v5 |
v5.3.1 |
MIT | pkg.go.dev |
github.com/google/gnostic-models |
v0.7.0 |
Apache-2.0 | pkg.go.dev |
github.com/google/jsonschema-go |
v0.4.3 |
MIT | pkg.go.dev |
github.com/google/uuid |
v1.6.0 |
BSD-3-Clause | pkg.go.dev |
github.com/jackc/pgpassfile |
v1.0.0 |
MIT | pkg.go.dev |
github.com/jackc/pgservicefile |
v0.0.0-20240606120523-5a60cdf6a761 |
MIT | pkg.go.dev |
github.com/jackc/pgx/v5 |
v5.11.0 |
MIT | pkg.go.dev |
github.com/jackc/puddle/v2 |
v2.2.2 |
MIT | pkg.go.dev |
github.com/json-iterator/go |
v1.1.12 |
MIT | pkg.go.dev |
github.com/mfridman/interpolate |
v0.0.2 |
MIT | pkg.go.dev |
github.com/modelcontextprotocol/go-sdk |
v1.8.0 |
Apache-2.0 | pkg.go.dev |
github.com/modern-go/concurrent |
v0.0.0-20180306012644-bacd9c7ef1dd |
Apache-2.0 | pkg.go.dev |
github.com/modern-go/reflect2 |
v1.0.3-0.20250322232337-35a7c28c31ee |
Apache-2.0 | pkg.go.dev |
github.com/munnerz/goautoneg |
v0.0.0-20191010083416-a7dc8b61c822 |
BSD-3-Clause | pkg.go.dev |
github.com/pressly/goose/v3 |
v3.28.0 |
MIT | pkg.go.dev |
github.com/segmentio/asm |
v1.2.1 |
MIT-0 | pkg.go.dev |
github.com/segmentio/encoding |
v0.5.4 |
MIT | pkg.go.dev |
github.com/sethvargo/go-retry |
v0.4.0 |
Apache-2.0 | pkg.go.dev |
github.com/x448/float16 |
v0.8.4 |
MIT | pkg.go.dev |
github.com/yosida95/uritemplate/v3 |
v3.0.2 |
BSD-3-Clause | pkg.go.dev |
go.uber.org/multierr |
v1.11.0 |
MIT | pkg.go.dev |
go.yaml.in/yaml/v2 |
v2.4.4 |
Apache-2.0 | pkg.go.dev |
go.yaml.in/yaml/v3 |
v3.0.5 |
MIT | pkg.go.dev |
golang.org/x/crypto |
v0.57.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/net |
v0.58.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/oauth2 |
v0.36.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/sync |
v0.23.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/sys |
v0.48.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/term |
v0.46.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/text |
v0.42.0 |
BSD-3-Clause | pkg.go.dev |
golang.org/x/time |
v0.15.0 |
BSD-3-Clause | pkg.go.dev |
google.golang.org/protobuf |
v1.36.12 |
BSD-3-Clause | pkg.go.dev |
gopkg.in/evanphx/json-patch.v4 |
v4.13.0 |
BSD-3-Clause | pkg.go.dev |
gopkg.in/inf.v0 |
v0.9.1 |
BSD-3-Clause | pkg.go.dev |
k8s.io/api |
v0.37.1 |
Apache-2.0 | pkg.go.dev |
k8s.io/apimachinery |
v0.37.1 |
Apache-2.0 AND BSD-3-Clause | pkg.go.dev |
k8s.io/apiserver |
v0.37.1 |
Apache-2.0 | pkg.go.dev |
k8s.io/client-go |
v0.37.1 |
Apache-2.0 | pkg.go.dev |
k8s.io/klog/v2 |
v2.140.0 |
Apache-2.0 | pkg.go.dev |
k8s.io/kube-openapi |
v0.0.0-20260721132016-d427ff9ee9ad |
Apache-2.0 AND BSD-3-Clause | pkg.go.dev |
k8s.io/streaming |
v0.37.1 |
Apache-2.0 | pkg.go.dev |
k8s.io/utils |
v0.0.0-20260626114624-be93311217bd |
Apache-2.0 AND BSD-3-Clause | pkg.go.dev |
sigs.k8s.io/json |
v0.0.0-20250730193827-2d320260d730 |
Apache-2.0 | pkg.go.dev |
sigs.k8s.io/randfill |
v1.0.0 |
Apache-2.0 | pkg.go.dev |
sigs.k8s.io/structured-merge-diff/v6 |
v6.4.2 |
Apache-2.0 | pkg.go.dev |
sigs.k8s.io/yaml |
v1.6.0 |
Apache-2.0 | pkg.go.dev |
JavaScript packages of the web interface¶
The runtime dependencies of the web interface and theirs, as web/package-lock.json pins them, plus three build tools whose own code ends up in the bundle: Tailwind CSS (its base styles), Vite and Rolldown (module loading helpers).
| Component | Version | License | License text |
|---|---|---|---|
@floating-ui/core |
1.8.0 |
MIT | npm |
@floating-ui/dom |
1.8.0 |
MIT | npm |
@floating-ui/react-dom |
2.1.9 |
MIT | npm |
@floating-ui/utils |
0.2.12 |
MIT | npm |
@radix-ui/number |
1.1.3 |
MIT | npm |
@radix-ui/primitive |
1.1.7 |
MIT | npm |
@radix-ui/react-accessible-icon |
1.1.15 |
MIT | npm |
@radix-ui/react-accordion |
1.2.20 |
MIT | npm |
@radix-ui/react-alert-dialog |
1.1.23 |
MIT | npm |
@radix-ui/react-arrow |
1.1.15 |
MIT | npm |
@radix-ui/react-aspect-ratio |
1.1.15 |
MIT | npm |
@radix-ui/react-avatar |
1.2.6 |
MIT | npm |
@radix-ui/react-checkbox |
1.3.11 |
MIT | npm |
@radix-ui/react-collapsible |
1.1.20 |
MIT | npm |
@radix-ui/react-collection |
1.1.15 |
MIT | npm |
@radix-ui/react-compose-refs |
1.1.5 |
MIT | npm |
@radix-ui/react-context |
1.2.2 |
MIT | npm |
@radix-ui/react-context-menu |
2.3.7 |
MIT | npm |
@radix-ui/react-dialog |
1.1.23 |
MIT | npm |
@radix-ui/react-direction |
1.1.4 |
MIT | npm |
@radix-ui/react-dismissable-layer |
1.1.19 |
MIT | npm |
@radix-ui/react-dropdown-menu |
2.1.24 |
MIT | npm |
@radix-ui/react-focus-guards |
1.1.6 |
MIT | npm |
@radix-ui/react-focus-scope |
1.1.16 |
MIT | npm |
@radix-ui/react-form |
0.1.16 |
MIT | npm |
@radix-ui/react-hover-card |
1.1.23 |
MIT | npm |
@radix-ui/react-id |
1.1.4 |
MIT | npm |
@radix-ui/react-label |
2.1.15 |
MIT | npm |
@radix-ui/react-menu |
2.1.24 |
MIT | npm |
@radix-ui/react-menubar |
1.1.24 |
MIT | npm |
@radix-ui/react-navigation-menu |
1.2.22 |
MIT | npm |
@radix-ui/react-one-time-password-field |
0.1.16 |
MIT | npm |
@radix-ui/react-password-toggle-field |
0.1.11 |
MIT | npm |
@radix-ui/react-popover |
1.1.23 |
MIT | npm |
@radix-ui/react-popper |
1.3.7 |
MIT | npm |
@radix-ui/react-portal |
1.1.17 |
MIT | npm |
@radix-ui/react-presence |
1.1.10 |
MIT | npm |
@radix-ui/react-primitive |
2.1.10 |
MIT | npm |
@radix-ui/react-progress |
1.1.16 |
MIT | npm |
@radix-ui/react-radio-group |
1.4.7 |
MIT | npm |
@radix-ui/react-roving-focus |
1.1.19 |
MIT | npm |
@radix-ui/react-scroll-area |
1.2.18 |
MIT | npm |
@radix-ui/react-select |
2.3.7 |
MIT | npm |
@radix-ui/react-separator |
1.1.15 |
MIT | npm |
@radix-ui/react-slider |
1.4.7 |
MIT | npm |
@radix-ui/react-slot |
1.3.3 |
MIT | npm |
@radix-ui/react-switch |
1.3.7 |
MIT | npm |
@radix-ui/react-tabs |
1.1.21 |
MIT | npm |
@radix-ui/react-toast |
1.2.23 |
MIT | npm |
@radix-ui/react-toggle |
1.1.18 |
MIT | npm |
@radix-ui/react-toggle-group |
1.1.19 |
MIT | npm |
@radix-ui/react-toolbar |
1.1.19 |
MIT | npm |
@radix-ui/react-tooltip |
1.2.16 |
MIT | npm |
@radix-ui/react-use-callback-ref |
1.1.4 |
MIT | npm |
@radix-ui/react-use-controllable-state |
1.2.6 |
MIT | npm |
@radix-ui/react-use-effect-event |
0.0.5 |
MIT | npm |
@radix-ui/react-use-escape-keydown |
1.1.5 |
MIT | npm |
@radix-ui/react-use-is-hydrated |
0.1.3 |
MIT | npm |
@radix-ui/react-use-layout-effect |
1.1.4 |
MIT | npm |
@radix-ui/react-use-previous |
1.1.4 |
MIT | npm |
@radix-ui/react-use-rect |
1.1.4 |
MIT | npm |
@radix-ui/react-use-size |
1.1.4 |
MIT | npm |
@radix-ui/react-visually-hidden |
1.2.11 |
MIT | npm |
@radix-ui/rect |
1.1.3 |
MIT | npm |
@remix-run/route-pattern |
0.22.1 |
MIT | npm |
@tanstack/query-core |
5.103.2 |
MIT | npm |
@tanstack/react-query |
5.103.2 |
MIT | npm |
aria-hidden |
1.2.6 |
MIT | npm |
class-variance-authority |
0.7.1 |
Apache-2.0 | npm |
clsx |
2.1.1 |
MIT | npm |
cmdk |
1.1.1 |
MIT | npm |
cookie-es |
3.1.1 |
MIT | npm |
detect-node-es |
1.1.0 |
MIT | npm |
get-nonce |
1.0.1 |
MIT | npm |
lucide-react |
1.48.0 |
ISC | npm |
radix-ui |
1.6.7 |
MIT | npm |
react |
19.3.0 |
MIT | npm |
react-dom |
19.3.0 |
MIT | npm |
react-remove-scroll |
2.7.2 |
MIT | npm |
react-remove-scroll-bar |
2.3.8 |
MIT | npm |
react-router |
8.4.0 |
MIT | npm |
react-style-singleton |
2.2.3 |
MIT | npm |
rolldown |
1.2.10 |
MIT | npm |
scheduler |
0.28.0 |
MIT | npm |
tailwind-merge |
3.7.0 |
MIT | npm |
tailwindcss |
4.3.3 |
MIT | npm |
tslib |
2.8.1 |
0BSD | npm |
tw-animate-css |
1.4.0 |
MIT | npm |
use-callback-ref |
1.3.3 |
MIT | npm |
use-sidecar |
1.1.3 |
MIT | npm |
vite |
8.3.1 |
MIT | npm |
Fonts and other assets¶
The Inter font ships with its license as /fonts/LICENSE-Inter.txt next to it. The container image is built on a distroless base, whose Debian packages keep their copyright files under /usr/share/doc in the image.
| Component | Version | License | License text |
|---|---|---|---|
gcr.io/distroless/static-debian12 |
nonroot |
Apache-2.0 | GitHub |
| Inter | 4.1 |
OFL-1.1 | GitHub |