Skip to content

NOTICES.md

Latest commit

 

History

History
248 lines (175 loc) · 7.75 KB

NOTICES.md

File metadata and controls

248 lines (175 loc) · 7.75 KB

Third-Party Notices

This file contains required notices and attributions for third-party components used in Mimir.

Apache License 2.0 Components

The following components are licensed under the Apache License 2.0:

Neo4j Driver

Sharp (Image Processing)

OpenAI SDK

TypeScript

RxJS

PDF.js

PDF Parse

Other Apache-2.0 Components

  • b4a@1.7.3 - Buffer utilities
  • bare-events@2.8.2 - Event emitter
  • crc-32@1.2.2 - CRC-32 implementation
  • detect-libc@2.1.2 - Libc detection
  • ecdsa-sig-formatter@1.0.11 - ECDSA signature formatting
  • eslint-visitor-keys@4.2.1 - ESLint visitor keys
  • events-universal@1.0.1 - Universal events
  • readdir-glob@1.1.3 - Directory reading with glob
  • text-decoder@1.2.3 - Text decoding utilities

LGPL-3.0-or-later Components

libvips (via Sharp)

Important Notice: This component is dynamically linked and not statically compiled into Mimir. Users may replace this library with a compatible alternative. This usage complies with LGPL-3.0 requirements and does not impose GPL obligations on Mimir or its users.

Compliance:

  • ✅ Dynamic linking (not static compilation)
  • ✅ Library can be replaced by users
  • ✅ Source code available at repository above
  • ✅ No modifications made to libvips source

BSD-2-Clause Components

The following components are licensed under BSD-2-Clause:

  • mammoth@1.11.0 - .docx to HTML converter

    • Copyright (c) 2013, Michael Williamson

  • cheerio-select@2.1.0 - CSS selector engine

    • Copyright (c) Felix Böhm

  • dingbat-to-unicode@1.0.1 - Dingbat conversion

    • Copyright (c) 2014 Desmond Brand

  • lop@0.4.2 - List operations

    • Copyright (c) 2014 Quildreen Motta

  • uglify-js@3.19.3 - JavaScript minifier

    • Copyright 2012-2019 (c) Mihai Bazon

BSD-3-Clause Components

The following components are licensed under BSD-3-Clause:

  • buffer-equal-constant-time@1.0.1 - Constant-time buffer comparison

    • Copyright (c) 2013, GoInstant Inc.

  • fast-uri@3.1.0 - Fast URI parser

    • Copyright (c) 2020 Vincent Voyer

  • sprintf-js@1.0.3 - sprintf implementation

    • Copyright (c) 2007-2014, Alexandru Marasteanu

  • qs@6.14.0 - Query string parser

    • Copyright (c) 2014 Nathan LaFreniere and other contributors

Python-2.0 License

ISC License Components

The following components use the ISC license (functionally equivalent to MIT):

  • graceful-fs@4.2.11 - Improved fs module
  • glob@10.5.0 - Glob pattern matching
  • minimatch@9.0.5 - Minimatch pattern matching
  • lru-cache@10.4.3 - LRU cache implementation
  • semver@7.7.3 - Semantic versioning
  • fastq@1.19.1 - Fast queue implementation
  • signal-exit@4.1.0 - Signal handling
  • yaml@2.8.1 - YAML parser
  • zod-to-json-schema@3.24.6 - Zod to JSON Schema converter

And many others - see LICENSE_AUDIT_REPORT.md for complete list.

MIT License Components

The majority of dependencies (295 packages, 87.3%) use the MIT license, which is the same as Mimir's license. Notable MIT-licensed components include:

  • @langchain/* - LangChain ecosystem (MIT)
  • @modelcontextprotocol/sdk - MCP SDK (MIT)
  • express - Web framework (MIT)
  • chokidar - File watcher (MIT)
  • dotenv - Environment variables (MIT)
  • zod - Schema validation (MIT)
  • vitest - Testing framework (MIT)

For a complete list of MIT-licensed components, see LICENSE_AUDIT_REPORT.md.

Dual-Licensed Components

jszip@3.10.1

  • License: MIT OR GPL-3.0-or-later
  • Our Choice: MIT (we use the MIT license option)
  • Copyright: Copyright (c) 2009-2016 Stuart Knightley, David Duponchel, Franz Buchinger, António Afonso

pako@1.0.11

  • License: MIT AND Zlib
  • Note: Both licenses apply, both are permissive
  • Copyright: Copyright (C) 2014-2017 by Vitaly Puzrin and Andrei Tuputcyn

Attribution Requirements Summary

For Apache-2.0 Components:

  1. ✅ Include this NOTICES.md file in distributions
  2. ✅ Preserve copyright notices (included above)
  3. ✅ Include Apache-2.0 license text (linked above)
  4. ✅ State any modifications (none made)
  5. ✅ Patent grant automatically applies

For LGPL-3.0 Components:

  1. ✅ Include LGPL-3.0 license text (linked above)
  2. ✅ Document dynamic linking (stated above)
  3. ✅ Inform users library can be replaced (stated above)
  4. ✅ Provide source code location (linked above)

For BSD Components:

  1. ✅ Include copyright notices (included above)
  2. ✅ Include license text (standard BSD text applies)
  3. ✅ Do not use names for endorsement (BSD-3-Clause)

Full License Texts

For complete license texts, see:

Compliance Statement

Mimir complies with all license requirements of its dependencies:

  • ✅ All required attributions included
  • ✅ All copyright notices preserved
  • ✅ LGPL component dynamically linked (compliant)
  • ✅ Apache-2.0 patent grants accepted
  • ✅ No modifications made to third-party code
  • ✅ All license texts referenced and available

For questions or concerns about licensing, see LICENSE_AUDIT_REPORT.md or consult legal counsel.

Last Updated: November 24, 2025
Next Review: February 24, 2026 (Quarterly)
Maintained By: Mimir Project Team