Skip to content

Third-party attribution

This file lists every Python package bundled in the CodeNavi container image, plus the web assets (JS libraries and fonts) vendored into the built-in web UI — with declared license, version, and upstream. It satisfies the attribution obligations of the bundled open-source components (MIT / Apache-2.0 / BSD / MPL-2.0 / ISC / OFL-1.1).

Generated from the live GA image via scripts/gen_third_party_attribution.py. For the embedder + reranker model licenses, see THIRD-PARTY-NOTICES.md.

Summary

  • Packages bundled: 109
  • Bootstrap (pip/setuptools/wheel): 3

Packages

Package Version License Upstream
annotated-doc 0.0.4 MIT https://github.com/fastapi/annotated-doc
annotated-types 0.7.0 MIT https://github.com/annotated-types/annotated-types
anthropic 0.112.0 MIT https://github.com/anthropics/anthropic-sdk-python
anyio 4.14.2 MIT https://anyio.readthedocs.io/en/latest/
attrs 26.1.0 MIT https://www.attrs.org/
certifi 2026.6.17 MPL-2.0 https://github.com/certifi/python-certifi
cffi 2.0.0 MIT https://cffi.readthedocs.io/
click 8.4.2 BSD-3-Clause https://click.palletsprojects.com/page/changes/
cryptography 49.0.0 Apache-2.0 OR BSD-3-Clause https://cryptography.io/en/latest/changelog/
deprecation 2.1.0 Apache 2 http://deprecation.readthedocs.io/
distro 1.9.0 Apache License, Version 2.0 https://github.com/python-distro/distro
docstring_parser 0.18.0 MIT https://github.com/rr-/docstring_parser
filelock 3.29.0 MIT https://py-filelock.readthedocs.io
fsspec 2026.4.0 BSD-3-Clause https://filesystem-spec.readthedocs.io/en/latest/changelog.html
h11 0.16.0 MIT https://github.com/python-hyper/h11
hf-xet 1.5.1 Apache-2.0 https://huggingface.co/docs/hub/xet/index
httpcore 1.0.9 BSD-3-Clause https://www.encode.io/httpcore
httpx 0.28.1 BSD-3-Clause https://github.com/encode/httpx/blob/master/CHANGELOG.md
httpx-sse 0.4.3 MIT https://github.com/florimondmanca/httpx-sse
huggingface_hub 1.21.0 Apache-2.0 https://github.com/huggingface/huggingface_hub
idna 3.18 BSD-3-Clause https://github.com/kjd/idna/blob/master/HISTORY.md
Jinja2 3.1.6 BSD https://jinja.palletsprojects.com/changes/
jiter 0.15.0 MIT https://github.com/pydantic/jiter/
joblib 1.5.3 BSD-3-Clause https://joblib.readthedocs.io
jsonschema 4.26.0 MIT https://github.com/python-jsonschema/jsonschema
jsonschema-specifications 2025.9.1 MIT https://jsonschema-specifications.readthedocs.io/
lance-namespace 0.7.2 Apache-2.0 https://github.com/lance-format/lance-namespace
lance-namespace-urllib3-client 0.7.2 Apache-2.0 https://github.com/lance-format/lance-namespace
lancedb 0.30.2 Apache Software https://github.com/lancedb/lancedb
lxml 6.1.1 BSD-3-Clause https://lxml.de/
markdown-it-py 4.2.0 MIT https://markdown-it-py.readthedocs.io
MarkupSafe 3.0.3 BSD-3-Clause https://palletsprojects.com/donate
mcp 1.27.2 MIT https://modelcontextprotocol.io
mdurl 0.1.2 MIT https://github.com/executablebooks/mdurl
mpmath 1.3.0 BSD http://mpmath.org/
narwhals 2.22.1 MIT https://github.com/narwhals-dev/narwhals
numpy 2.5.0 BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0 https://numpy.org
nvidia-cublas-cu12 12.8.3.14 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cuda-cupti-cu12 12.8.57 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cuda-runtime-cu12 12.8.57 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cudnn-cu12 9.7.1.26 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cufft-cu12 11.3.3.41 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cufile-cu12 1.13.0.11 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-curand-cu12 10.3.9.55 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cusolver-cu12 11.7.2.55 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cusparse-cu12 12.5.7.53 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-cusparselt-cu12 0.6.3 NVIDIA Proprietary Software https://developer.nvidia.com/cusparselt
nvidia-nccl-cu12 2.26.2 BSD-3-Clause https://developer.nvidia.com/cuda-zone
nvidia-nvjitlink-cu12 12.8.61 NVIDIA Proprietary Software https://developer.nvidia.com/cuda-zone
nvidia-nvtx-cu12 12.8.55 Apache 2.0 https://developer.nvidia.com/cuda-zone
openai 2.44.0 Apache-2.0 https://github.com/openai/openai-python
packaging 26.2 Apache-2.0 OR BSD-2-Clause https://packaging.pypa.io/
pathspec 1.1.1 Mozilla Public License 2.0 (MPL 2.0) https://python-path-specification.readthedocs.io/en/latest/changes.html
prometheus_client 0.25.0 Apache-2.0 AND BSD-2-Clause https://github.com/prometheus/client_python
pyarrow 24.0.0 Apache-2.0 https://arrow.apache.org/
pycparser 3.0 BSD-3-Clause https://github.com/eliben/pycparser
pydantic 2.13.4 MIT https://github.com/pydantic/pydantic
pydantic-settings 2.14.2 MIT https://github.com/pydantic/pydantic-settings
pydantic_core 2.46.4 MIT https://github.com/pydantic/pydantic
Pygments 2.20.0 BSD-2-Clause https://pygments.org
PyJWT 2.14.0 MIT https://github.com/jpadilla/pyjwt
pypdf 6.14.2 BSD-3-Clause https://github.com/py-pdf/pypdf/issues
python-dateutil 2.9.0.post0 Dual License https://github.com/dateutil/dateutil
python-docx 1.2.0 MIT https://github.com/python-openxml/python-docx/blob/master/HISTORY.rst
python-dotenv 1.2.2 BSD-3-Clause https://github.com/theskumar/python-dotenv
python-json-logger 4.1.0 BSD-2-Clause https://nhairs.github.io/python-json-logger
python-multipart 0.0.32 Apache-2.0 https://github.com/Kludex/python-multipart
PyYAML 6.0.3 MIT https://pyyaml.org/
referencing 0.37.0 MIT https://referencing.readthedocs.io/
regex 2026.5.9 Apache-2.0 AND CNRI-Python https://github.com/mrabarnett/mrab-regex
rich 15.0.0 MIT https://rich.readthedocs.io/en/latest/
rpds-py 2026.5.1 MIT https://rpds.readthedocs.io/
safetensors 0.8.0 Apache Software https://github.com/huggingface/safetensors
scikit-learn 1.9.0 BSD-3-Clause https://scikit-learn.org
scipy 1.18.0 BSD https://scipy.org/
sentence-transformers 5.6.0 Apache-2.0 https://www.SBERT.net
shellingham 1.5.4 ISC License https://github.com/sarugaku/shellingham
six 1.17.0 MIT https://github.com/benjaminp/six
sniffio 1.3.1 MIT OR Apache-2.0 https://github.com/python-trio/sniffio
sqlparse 0.5.5 BSD https://github.com/andialbrecht/sqlparse
sse-starlette 3.4.5 BSD-3-Clause https://github.com/sysid/sse-starlette
starlette 1.3.1 BSD-3-Clause https://github.com/Kludex/starlette
sympy 1.14.0 BSD https://sympy.org
threadpoolctl 3.6.0 BSD-3-Clause https://github.com/joblib/threadpoolctl
tokenizers 0.22.2 Apache Software https://github.com/huggingface/tokenizers
torch 2.7.1+cu128 BSD-3-Clause https://pytorch.org/
tqdm 4.68.3 MPL-2.0 AND MIT https://tqdm.github.io
transformers 5.3.0 Apache 2.0 License https://github.com/huggingface/transformers
tree-sitter 0.25.2 MIT https://tree-sitter.github.io/tree-sitter/
tree-sitter-bash 0.25.1 MIT https://github.com/tree-sitter/tree-sitter-bash
tree-sitter-c-sharp 0.23.5 MIT https://github.com/tree-sitter/tree-sitter-c-sharp
tree-sitter-fortran 0.6.0 MIT https://github.com/stadelmanma/tree-sitter-fortran
tree-sitter-go 0.25.0 MIT https://github.com/tree-sitter/tree-sitter-go
tree-sitter-java 0.23.5 MIT https://github.com/tree-sitter/tree-sitter-java
tree-sitter-javascript 0.25.0 MIT https://github.com/tree-sitter/tree-sitter-javascript
tree-sitter-kotlin 1.1.0 MIT https://github.com/tree-sitter-grammars/tree-sitter-kotlin
tree-sitter-perl 1.0.2 MIT https://github.com/tree-sitter-perl/tree-sitter-perl
tree-sitter-php 0.24.1 MIT https://github.com/tree-sitter/tree-sitter-php
tree-sitter-python 0.25.0 MIT https://github.com/tree-sitter/tree-sitter-python
tree-sitter-ruby 0.23.1 MIT https://github.com/tree-sitter/tree-sitter-ruby
tree-sitter-rust 0.24.2 MIT https://github.com/tree-sitter/tree-sitter-rust
tree-sitter-scala 0.26.0 MIT https://github.com/tree-sitter/tree-sitter-scala
tree-sitter-swift 0.7.3 MIT https://github.com/alex-pinkus/tree-sitter-swift
tree-sitter-typescript 0.23.2 MIT https://github.com/tree-sitter/tree-sitter-typescript
typer 0.25.1 MIT https://github.com/fastapi/typer
typing-inspection 0.4.2 MIT https://github.com/pydantic/typing-inspection
typing_extensions 4.15.0 PSF-2.0 https://github.com/python/typing_extensions/issues
urllib3 2.7.0 MIT https://github.com/urllib3/urllib3/blob/main/CHANGES.rst
uvicorn 0.49.0 BSD-3-Clause https://uvicorn.dev/release-notes
pip *(bootstrap)* 25.0.1 MIT https://pip.pypa.io/
setuptools *(bootstrap)* 80.9.0 MIT https://github.com/pypa/setuptools
wheel *(bootstrap)* 0.48.0 MIT https://wheel.readthedocs.io/en/stable/news.html

Vendored web assets (built-in web UI)

JavaScript libraries served from interfaces/spa/vendor/ — bundled so the UI works fully offline (no CDN).

Library Version License Copyright Upstream
Cytoscape.js 3.34.0 MIT © The Cytoscape Consortium https://js.cytoscape.org
DOMPurify 3.1.6 Apache-2.0 OR MPL-2.0 © Cure53 and other contributors https://github.com/cure53/DOMPurify
Lucide 0.577.0 ISC © Lucide Contributors https://lucide.dev
marked 12.0.2 MIT © 2011–2024 Christopher Jeffrey https://github.com/markedjs/marked

Webfonts

Vendored at interfaces/spa/vendor/fonts/, both licensed under the SIL Open Font License 1.1 (full text: https://openfontlicense.org). Per the OFL, the fonts are used unmodified and these notices accompany them; the fonts are not sold standalone.

Font License Copyright Upstream
Inter OFL-1.1 Copyright 2016 The Inter Project Authors https://github.com/rsms/inter
Outfit OFL-1.1 Copyright 2021 The Outfit Project Authors https://github.com/Outfitio/Outfit-Fonts

Notes

  • The base Python interpreter is the Python Software Foundation distribution (PSF License); see python3 --version for the exact patch.
  • The PyTorch wheel ships under BSD-3-Clause; the CUDA runtime libraries inside the wheel are NVIDIA's own EULA (see the wheel's accompanying cuda-license/).
  • The Buric-E4B embedder is under the CodeNavi Model License (see MODEL-LICENSE.md), not in this table.
  • The cross-encoder reranker is under Apache-2.0 (see THIRD-PARTY-NOTICES.md), not in this table.