THIRD-PARTY-LICENSES.md
Semaphore UI is built on the work of many open-source projects. This document identifies every third-party component distributed with Semaphore UI, in compliance with the attribution requirements of the respective licenses and with §3.6 of our Master Service Agreement (identification of open-source components by name, version, and license type).
Generated on 2026-05-05 08:19 UTC by scripts/collect_licenses.sh.
To regenerate this file, run:
scripts/collect_licenses.sh
scripts/check_policy.py .licenses-cache/
scripts/generate_md.py .licenses-cache/ > THIRD-PARTY-LICENSES.md
This document lists 116 third-party components distributed with Semaphore UI, grouped by ecosystem.
| Ecosystem | Components |
|---|---|
| Go (backend) | 63 |
| npm (frontend) | 53 |
| License | Count |
|---|---|
| MIT | 72 |
| BSD-3-Clause | 27 |
| Apache-2.0 | 12 |
| BSD-2-Clause | 3 |
| MPL-2.0 | 1 |
| ISC | 1 |
Modules statically linked into the Semaphore UI server binary. Sourced from go.mod (production dependencies only).
| Component | Version(s) | License | Source |
|---|---|---|---|
dario.cat/mergo | v1.0.1 | BSD-3-Clause | link |
filippo.io/edwards25519 | v1.1.1 | BSD-3-Clause | link |
github.com/Azure/go-ntlmssp | v0.1.1 | MIT | link |
github.com/boombuler/barcode | v1.0.1-0.20190219062509-6c824513bacc | MIT | link |
github.com/cloudflare/circl | v1.6.3 | BSD-3-Clause | link |
github.com/coreos/go-oidc/v3 | v3.17.0 | Apache-2.0 | link |
github.com/creack/pty | v1.1.24 | MIT | link |
github.com/cyphar/filepath-securejoin | v0.4.1 | BSD-3-Clause | link |
github.com/dustin/go-humanize | v1.0.1 | MIT | link |
github.com/emirpasic/gods | v1.18.1 | BSD-2-Clause | link |
github.com/felixge/httpsnoop | v1.0.4 | MIT | link |
github.com/go-asn1-ber/asn1-ber | v1.5.8-0.20250403174932-29230038a667 | MIT | link |
github.com/go-git/gcfg | v1.5.1-0.20230307220236-3a3c6141e376 | BSD-3-Clause | link |
github.com/go-git/go-billy/v5 | v5.8.0 | Apache-2.0 | link |
github.com/go-git/go-git/v5 | v5.18.0 | Apache-2.0 | link |
github.com/go-gorp/gorp/v3 | v3.1.0 | MIT | link |
github.com/go-jose/go-jose/v4 | v4.1.4 | Apache-2.0 | link |
github.com/go-ldap/ldap/v3 | v3.4.12 | MIT | link |
github.com/go-sql-driver/mysql | v1.9.3 | MPL-2.0 | link |
github.com/golang/groupcache | v0.0.0-20241129210726-2c02b8208cf8 | Apache-2.0 | link |
github.com/google/go-github | v17.0.0+incompatible | BSD-3-Clause | link |
github.com/google/go-querystring | v1.1.0 | BSD-3-Clause | link |
github.com/google/uuid | v1.6.0 | BSD-3-Clause | link |
github.com/gorilla/handlers | v1.5.2 | BSD-3-Clause | link |
github.com/gorilla/mux | v1.8.1 | BSD-3-Clause | link |
github.com/gorilla/securecookie | v1.1.2 | BSD-3-Clause | link |
github.com/gorilla/websocket | v1.5.3 | BSD-2-Clause | link |
github.com/jbenet/go-context | v0.0.0-20150711004518-d14ea06fba99 | MIT | link |
github.com/kevinburke/ssh_config | v1.2.0 | MIT | link |
github.com/lann/builder | v0.0.0-20180802200727-47ae307949d0 | MIT | link |
github.com/lann/ps | v0.0.0-20150810152359-62de8c46ede0 | MIT | link |
github.com/lib/pq | v1.11.2 | MIT | link |
github.com/Masterminds/squirrel | v1.5.4 | MIT | link |
github.com/mattn/go-isatty | v0.0.20 | MIT | link |
github.com/mdp/qrterminal/v3 | v3.2.1 | MIT | link |
github.com/ncruces/go-strftime | v0.1.9 | MIT | link |
github.com/pjbgf/sha1cd | v0.3.2 | Apache-2.0 | link |
github.com/pquerna/otp | v1.5.0 | Apache-2.0 | link |
github.com/ProtonMail/go-crypto | v1.1.6 | BSD-3-Clause | link |
github.com/remyoudompheng/bigfft | v0.0.0-20230129092748-24d4a6f8daec | BSD-3-Clause | link |
github.com/robfig/cron/v3 | v3.0.1 | MIT | link |
github.com/sergi/go-diff | v1.3.2-0.20230802210424-5b0b94c5c0d3 | MIT | link |
github.com/sirupsen/logrus | v1.9.4 | MIT | link |
github.com/skeema/knownhosts | v1.3.1 | Apache-2.0 | link |
github.com/snikch/goodman | v0.0.0-20171125024755-10e37e294daa | MIT | link |
github.com/spf13/cobra | v1.10.2 | Apache-2.0 | link |
github.com/spf13/pflag | v1.0.9 | BSD-3-Clause | link |
github.com/thedevsaddam/gojsonq/v2 | v2.5.2 | MIT | link |
github.com/xanzy/ssh-agent | v0.3.3 | Apache-2.0 | link |
go.etcd.io/bbolt | v1.4.1 | MIT | link |
golang.org/x/crypto | v0.48.0 | BSD-3-Clause | link |
golang.org/x/exp | v0.0.0-20250620022241-b7579e27df2b | BSD-3-Clause | link |
golang.org/x/net | v0.49.0 | BSD-3-Clause | link |
golang.org/x/oauth2 | v0.35.0 | BSD-3-Clause | link |
golang.org/x/sys | v0.41.0 | BSD-3-Clause | link |
golang.org/x/term | v0.40.0 | BSD-3-Clause | link |
gopkg.in/natefinch/lumberjack.v2 | v2.2.1 | MIT | link |
gopkg.in/warnings.v0 | v0.1.2 | BSD-2-Clause | link |
modernc.org/libc | v1.66.10 | BSD-3-Clause | link |
modernc.org/mathutil | v1.7.1 | BSD-3-Clause | link |
modernc.org/memory | v1.11.0 | BSD-3-Clause | link |
modernc.org/sqlite | v1.40.1 | BSD-3-Clause | link |
rsc.io/qr | v0.2.0 | BSD-3-Clause | link |
Packages bundled into the web UI assets, which are embedded in the server binary at build time. Sourced from the frontend package.json (production dependencies only; dev dependencies are not distributed).
| Component | Version(s) | License | Source |
|---|---|---|---|
@babel/helper-string-parser | 7.25.9 | MIT | link |
@babel/helper-validator-identifier | 7.25.9 | MIT | link |
@babel/parser | 7.27.0 | MIT | link |
@babel/types | 7.27.0 | MIT | link |
@mdi/font | 7.4.47 | Apache-2.0 | link |
@vue/compiler-sfc | 2.7.16 | MIT | — |
ansi_up | 6.0.6 | MIT | link |
asynckit | 0.4.0 | MIT | link |
axios | 1.12.0 | MIT | link |
call-bind-apply-helpers | 1.0.2 | MIT | link |
chart.js | 3.9.1 | MIT | link |
codemirror | 5.65.6 | MIT | link |
combined-stream | 1.0.8 | MIT | link |
core-js | 3.41.0 | MIT | link |
cron-parser | 5.3.0 | MIT | link |
csstype | 3.1.3 | MIT | link |
dayjs | 1.11.13 | MIT | link |
delayed-stream | 1.0.0 | MIT | link |
diff-match-patch | 1.0.5 | Apache-2.0 | link |
dunder-proto | 1.0.1 | MIT | link |
es-define-property | 1.0.1 | MIT | link |
es-errors | 1.3.0 | MIT | link |
es-object-atoms | 1.1.1 | MIT | link |
es-set-tostringtag | 2.1.0 | MIT | link |
follow-redirects | 1.15.6 | MIT | link |
form-data | 4.0.4 | MIT | link |
function-bind | 1.1.2 | MIT | link |
get-intrinsic | 1.3.0 | MIT | link |
get-proto | 1.0.1 | MIT | link |
gopd | 1.2.0 | MIT | link |
has-symbols | 1.1.0 | MIT | link |
has-tostringtag | 1.0.2 | MIT | link |
hasown | 2.0.2 | MIT | link |
luxon | 3.7.1 | MIT | link |
math-intrinsics | 1.1.0 | MIT | link |
mime-db | 1.52.0 | MIT | link |
mime-types | 2.1.35 | MIT | link |
nanoid | 3.3.7 | MIT | link |
picocolors | 1.1.1 | ISC | link |
postcss | 8.4.49 | MIT | link |
prettier | 2.8.8 | MIT | link |
proxy-from-env | 1.1.0 | MIT | link |
sortablejs | 1.10.2 | MIT | link |
source-map | 0.6.1 | BSD-3-Clause | link |
source-map-js | 1.2.1 | BSD-3-Clause | link |
vue | 2.7.16 | MIT | link |
vue-chartjs | 4.1.2 | MIT | link |
vue-codemirror | 4.0.6 | MIT | link |
vue-i18n | 8.28.2 | MIT | link |
vue-router | 3.6.5 | MIT | link |
vue-virtual-scroll-list | 2.3.5 | MIT | link |
vuedraggable | 2.24.3 | MIT | link |
vuetify | 2.7.2 | MIT | link |
Full license texts for each component are available at the source URLs listed above. For permissively-licensed packages (MIT, BSD, ISC, Apache-2.0), the original LICENSE and NOTICE files are preserved in their respective package directories within the Semaphore UI distribution.
If you believe a component is missing from this list or incorrectly attributed, please open an issue at https://github.com/semaphoreui/semaphore/issues.
<!-- end of generated file -->