Open source & history

Third-Party Licenses

Version 1.1Not yet effectiveUpdated 2026-07-21

DRAFT

This document is a pre-launch draft. Bracketed values such as [LEGAL_ENTITY_NAME] and the effective date are placeholders to be finalized before launch. It is not yet legally effective.

Evigate is built with open-source software. This page lists the direct dependencies declared in the project's manifests and their licenses. Each component remains governed solely by its own license.

Maintainer note: this list is generated from backend/pyproject.toml and frontend/package.json (direct dependencies). Transitive dependencies are not listed individually. Before publishing, generate a complete, verified manifest with a license scanner (e.g. pip-licenses / uv pip licenses for Python, license-checker for npm) and reconcile any license marked [VERIFY] against the installed package metadata. Update this file whenever dependencies change (see the SDLC §6).

Backend (Python)

Component	Purpose	License
FastAPI	Web framework	MIT
Uvicorn	ASGI server	BSD-3-Clause
SQLAlchemy	ORM / data access	MIT
Alembic	Database migrations	MIT
psycopg (`psycopg[binary]`)	PostgreSQL driver	LGPL-3.0-or-later
pgvector (Python client)	Vector type support	MIT
pydantic-settings	Configuration	MIT
boto3	S3-compatible object storage client	Apache-2.0
anthropic	Anthropic (Claude) SDK	MIT `[VERIFY]`
google-genai	Google Gemini API SDK (conditional LLM fallback)	Apache-2.0 `[VERIFY]`
fastembed	Local embeddings (`bge-large-en-v1.5`) runtime	Apache-2.0 `[VERIFY]`
onnxruntime	ONNX inference engine for local embeddings	MIT `[VERIFY]`
cryptography	Encryption (BYOK key cipher)	Apache-2.0 OR BSD-3-Clause
openpyxl	XLSX parsing/writing	MIT
python-docx	DOCX parsing	MIT
python-multipart	Multipart upload parsing	Apache-2.0
pypdf	PDF parsing	BSD-3-Clause
pypdfium2	PDF page rendering (scanned-page images for OCR intake)	Apache-2.0 OR BSD-3-Clause `[VERIFY]`
pillow	Image handling for scanned-page OCR intake	HPND `[VERIFY]`
arq	Redis-backed answering worker queue	MIT `[VERIFY]`
redis	Redis client (worker queue, rate limiter)	MIT `[VERIFY]`
httpx	HTTP client	BSD-3-Clause `[VERIFY]`
ruff (dev)	Linter	MIT
pytest (dev)	Test framework	MIT

Frontend (JavaScript)

Component	Purpose	License
Next.js	React framework	MIT
React	UI library	MIT
React DOM	DOM renderer	MIT
ESLint (dev)	Linter	MIT
eslint-config-next (dev)	Lint config	MIT

Infrastructure / runtime

Component	Purpose	License	Notes
PostgreSQL	Database	PostgreSQL License	Self-hosted (container) in production, on the Hostinger VPS
pgvector (extension)	Vector search in Postgres	PostgreSQL License	Postgres extension
MinIO	S3-compatible object store	AGPL-3.0	Self-hosted for both local development and production (Hostinger VPS)

The full text of each license is available from the respective project. Required attributions are reproduced in the NOTICE file.

*Last updated: 2026-07-21 · Version 1.1*