Cenova

Cenova 1.0 — Copyright and Third-Party Notices ​

Copyright © 2026 Cegal AS. All rights reserved.

Cenova and its first-party components (including all Cegal.*, Blueback.*, and the Blueback.CPT.* projects) are proprietary software owned by Cegal AS and are not covered by the third-party notices below.

This product includes third-party open-source software. The components listed in this document are redistributed under their respective licenses. Each component remains the copyright of its respective authors. Cegal AS claims no ownership over these components.

All bundled third-party components are licensed under permissive licenses (MIT, BSD-2-Clause, BSD-3-Clause, ISC, and Apache-2.0). No copyleft (GPL/LGPL/AGPL/MPL) or commercially restricted components are distributed with Cenova 1.0.

This document was generated by enumerating the actual shipped dependency closure of each component:

  • Go services / CLI — modules compiled into the cenova binary (go list -deps).
  • Web frontend — production (--omit=dev) npm dependency closure.
  • TrackerService (.NET) — direct and transitive NuGet packages of the shipped Blueback.CPT.API and Blueback.CPT.Ingestor services.

Build-, test-, and tooling-only dependencies (e.g. buf, docker/containerd, nilaway, Vite, ESLint, Grpc.Tools, EntityFrameworkCore.Design) are excluded because they are not distributed with the product.

License summary ​

LicenseComponents
MITMajority of Go, frontend, and .NET components
Apache-2.0NATS, Serilog, google/go-tpm, minio/highwayhash, jonboulle/clockwork, @mdi/font, TypeScript
BSD-3-Clausegolang.org/x/*, google.golang.org/protobuf, google/uuid, klauspost/compress, Google.Protobuf, NetTopologySuite, source-map-js, speakingurl
BSD-2-Clausepkg/errors, entities
ISCpicocolors, yaml

Full license texts are reproduced in Appendix A.

1. Go components (cenova binary) ​

ModuleVersionLicense
github.com/BurntSushi/tomlv1.5.0MIT
github.com/Masterminds/semver/v3v3.4.0MIT
github.com/antithesishq/antithesis-sdk-gov0.6.0-default-no-opMIT
github.com/aymanbagabas/go-osc52/v2v2.0.1MIT
github.com/charmbracelet/bubblesv0.21.0MIT
github.com/charmbracelet/bubbleteav1.3.6MIT
github.com/charmbracelet/colorprofilev0.3.1MIT
github.com/charmbracelet/harmonicav0.2.0MIT
github.com/charmbracelet/lipglossv1.1.0MIT
github.com/charmbracelet/x/ansiv0.9.3MIT
github.com/charmbracelet/x/cellbufv0.0.13MIT
github.com/charmbracelet/x/termv0.2.1MIT
github.com/erikgeiser/coninputv0.0.0-20211004153227-1c3628e74d0fMIT
github.com/go-co-op/gocron/v2v2.16.2MIT
github.com/gobwas/globv0.2.3MIT
github.com/golang-jwt/jwt/v5v5.2.3MIT
github.com/google/go-tpmv0.9.8Apache-2.0
github.com/google/uuidv1.6.0BSD-3-Clause
github.com/jedib0t/go-pretty/v6v6.6.7MIT
github.com/jonboulle/clockworkv0.5.0Apache-2.0
github.com/klauspost/compressv1.18.4BSD-3-Clause
github.com/lestrrat-go/backoff/v2v2.0.8MIT
github.com/lestrrat-go/blackmagicv1.0.2MIT
github.com/lestrrat-go/httpccv1.0.1MIT
github.com/lestrrat-go/iterv1.0.2MIT
github.com/lestrrat-go/jwxv1.2.31MIT
github.com/lestrrat-go/optionv1.0.1MIT
github.com/lucasb-eyer/go-colorfulv1.2.0MIT
github.com/mattn/go-colorablev0.1.14MIT
github.com/mattn/go-isattyv0.0.20MIT
github.com/mattn/go-localereaderv0.0.1MIT
github.com/mattn/go-runewidthv0.0.16MIT
github.com/mattn/go-sqlite3v1.14.28MIT
github.com/minio/highwayhashv1.0.4-0.20251030100505-070ab1a87a76Apache-2.0
github.com/muesli/ansiv0.0.0-20230316100256-276c6243b2f6MIT
github.com/muesli/cancelreaderv0.2.2MIT
github.com/muesli/termenvv0.16.0MIT
github.com/nats-io/jwt/v2v2.8.1Apache-2.0
github.com/nats-io/nats-server/v2v2.11.15Apache-2.0
github.com/nats-io/nats.gov1.49.0Apache-2.0
github.com/nats-io/nkeysv0.4.15Apache-2.0
github.com/nats-io/nuidv1.0.1Apache-2.0
github.com/pkg/errorsv0.9.1BSD-2-Clause
github.com/rivo/unisegv0.4.7MIT
github.com/robfig/cron/v3v3.0.1MIT
github.com/rs/zerologv1.34.0MIT
github.com/urfave/cli-altsrc/v3v3.1.0MIT
github.com/urfave/cli/v3v3.6.1MIT
github.com/xo/terminfov0.0.0-20220910002029-abceb7e1c41eMIT
golang.org/x/cryptov0.49.0BSD-3-Clause
golang.org/x/expv0.0.0-20250718183923-645b1fa84792BSD-3-Clause
golang.org/x/oauth2v0.34.0BSD-3-Clause
golang.org/x/syncv0.20.0BSD-3-Clause
golang.org/x/sysv0.42.0BSD-3-Clause
golang.org/x/termv0.41.0BSD-3-Clause
golang.org/x/textv0.35.0BSD-3-Clause
golang.org/x/timev0.15.0BSD-3-Clause
google.golang.org/protobufv1.36.10BSD-3-Clause
gopkg.in/natefinch/lumberjack.v2v2.2.1MIT

2. Web frontend components (npm, production closure) ​

PackageVersionLicense
@babel/generator7.29.1MIT
@babel/helper-string-parser7.27.1MIT
@babel/helper-validator-identifier7.28.5MIT
@babel/parser7.29.0MIT
@babel/types7.29.0MIT
@bufbuild/protobuf2.11.0Apache-2.0 AND BSD-3-Clause
@jridgewell/gen-mapping0.3.13MIT
@jridgewell/remapping2.3.5MIT
@jridgewell/resolve-uri3.1.2MIT
@jridgewell/sourcemap-codec1.5.5MIT
@jridgewell/trace-mapping0.3.31MIT
@kurkle/color0.3.4MIT
@mdi/font7.4.47Apache-2.0
@primeuix/styled0.7.4MIT
@primeuix/styles2.0.3MIT
@primeuix/themes2.0.3MIT
@primeuix/utils0.6.4MIT
@primevue/core4.5.4MIT
@primevue/icons4.5.4MIT
@vue-macros/common3.1.2MIT
@vue/compiler-core3.5.30MIT
@vue/compiler-dom3.5.30MIT
@vue/compiler-sfc3.5.30MIT
@vue/compiler-ssr3.5.30MIT
@vue/devtools-api8.1.0MIT
@vue/devtools-kit7.7.9MIT
@vue/devtools-shared7.7.9MIT
@vue/reactivity3.5.30MIT
@vue/runtime-core3.5.30MIT
@vue/runtime-dom3.5.30MIT
@vue/server-renderer3.5.30MIT
@vue/shared3.5.30MIT
acorn8.16.0MIT
ast-kit2.2.0MIT
ast-walker-scope0.8.3MIT
birpc2.9.0MIT
chart.js4.5.1MIT
chartjs-chart-treemap3.1.0MIT
chokidar5.0.0MIT
confbox0.2.4MIT
copy-anything3.0.5MIT
cron-parser5.5.0MIT
cronstrue3.13.0MIT
csstype3.2.3MIT
entities7.0.1BSD-2-Clause
estree-walker2.0.2MIT
exsolve1.0.8MIT
hookable5.5.3MIT
is-what4.1.16MIT
jsesc3.1.0MIT
json52.2.3MIT
local-pkg1.1.2MIT
luxon3.7.2MIT
magic-string0.30.21MIT
magic-string-ast1.0.3MIT
mitt3.0.1MIT
mlly1.8.1MIT
muggle-string0.4.1MIT
nanoid3.3.11MIT
pathe2.0.3MIT
perfect-debounce1.0.0MIT
picocolors1.1.1ISC
picomatch2.3.2MIT
pinia3.0.4MIT
pkg-types2.3.0MIT
postcss8.5.14MIT
primeflex4.0.0MIT
primeicons7.0.0MIT
primevue4.5.4MIT
quansync0.2.11MIT
rfdc1.4.1MIT
scule1.3.0MIT
source-map-js1.2.1BSD-3-Clause
speakingurl14.0.1BSD-3-Clause
superjson2.2.2MIT
tinyglobby0.2.15MIT
typescript5.9.3Apache-2.0
ufo1.6.3MIT
unplugin2.3.11MIT
unplugin-utils0.3.1MIT
vue3.5.30MIT
vue-router5.0.3MIT
webpack-virtual-modules0.6.2MIT
yaml2.9.0ISC

3. TrackerService components (.NET / NuGet) ​

Microsoft and .NET Foundation packages (Microsoft.*, System.*) are distributed under the MIT License.

PackageVersionLicense
Google.Protobuf3.34.1BSD-3-Clause
Microsoft.AspNetCore.OpenApi10.0.5MIT
Microsoft.Bcl.Cryptography9.0.13MIT
Microsoft.Data.SqlClient7.0.0MIT
Microsoft.Data.SqlClient.Extensions.Abstractions1.0.0MIT
Microsoft.Data.SqlClient.Internal.Logging1.0.0MIT
Microsoft.Data.SqlClient.SNI.runtime6.0.2MIT
Microsoft.EntityFrameworkCore10.0.5MIT
Microsoft.EntityFrameworkCore.Abstractions10.0.5MIT
Microsoft.EntityFrameworkCore.Analyzers10.0.5MIT
Microsoft.EntityFrameworkCore.Relational10.0.5MIT
Microsoft.EntityFrameworkCore.SqlServer10.0.5MIT
Microsoft.EntityFrameworkCore.SqlServer.NetTopologySuite10.0.5MIT
Microsoft.Extensions.* (Caching, Configuration, DependencyInjection, Diagnostics, FileProviders, Hosting, Logging, Options, Primitives, ApiDescription.Server, DependencyModel)10.0.0 / 10.0.5MIT
Microsoft.IdentityModel.Abstractions8.16.0MIT
Microsoft.IdentityModel.JsonWebTokens8.16.0MIT
Microsoft.IdentityModel.Logging8.16.0MIT
Microsoft.IdentityModel.Protocols8.16.0MIT
Microsoft.IdentityModel.Protocols.OpenIdConnect8.16.0MIT
Microsoft.IdentityModel.Tokens8.16.0MIT
Microsoft.OpenApi2.4.1MIT
Microsoft.SqlServer.Server1.0.0MIT
NATS.Client.Abstractions2.7.3Apache-2.0
NATS.Client.Core2.7.3Apache-2.0
NATS.Client.Hosting2.7.3Apache-2.0
NATS.Client.JetStream2.7.3Apache-2.0
NATS.Client.KeyValueStore2.7.3Apache-2.0
NATS.Client.ObjectStore2.7.3Apache-2.0
NATS.Client.Serializers.Json2.7.3Apache-2.0
NATS.Client.Services2.7.3Apache-2.0
NATS.Client.Simplified2.7.3Apache-2.0
NATS.Extensions.Microsoft.DependencyInjection2.7.3Apache-2.0
NATS.Net2.7.3Apache-2.0
NetTopologySuite2.6.0BSD-3-Clause
NetTopologySuite.IO.SqlServerBytes2.1.0BSD-3-Clause
Serilog4.3.1Apache-2.0
Serilog.AspNetCore10.0.0Apache-2.0
Serilog.Expressions5.0.0Apache-2.0
Serilog.Extensions.Hosting10.0.0Apache-2.0
Serilog.Extensions.Logging10.0.0Apache-2.0
Serilog.Formatting.Compact3.0.0Apache-2.0
Serilog.Settings.Configuration10.0.0Apache-2.0
Serilog.Sinks.Console6.1.1Apache-2.0
Serilog.Sinks.Debug3.0.0Apache-2.0
Serilog.Sinks.File7.0.0Apache-2.0
Swashbuckle.AspNetCore10.1.5MIT
Swashbuckle.AspNetCore.Swagger10.1.5MIT
Swashbuckle.AspNetCore.SwaggerGen10.1.5MIT
Swashbuckle.AspNetCore.SwaggerUI10.1.5MIT
System.Configuration.ConfigurationManager9.0.13MIT
System.Diagnostics.EventLog10.0.5MIT
System.IdentityModel.Tokens.Jwt8.16.0MIT
System.Security.Cryptography.Pkcs9.0.13MIT
System.Security.Cryptography.ProtectedData9.0.13MIT

Appendix A — License texts ​

MIT License ​

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

ISC License ​

Permission to use, copy, modify, and/or distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.

BSD-2-Clause License ​

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this
   list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice,
   this list of conditions and the following disclaimer in the documentation
   and/or other materials provided with the distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

BSD-3-Clause License ​

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

1. Redistributions of source code must retain the above copyright notice, this
   list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice,
   this list of conditions and the following disclaimer in the documentation
   and/or other materials provided with the distribution.
3. Neither the name of the copyright holder nor the names of its contributors
   may be used to endorse or promote products derived from this software
   without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

Apache License 2.0 ​

The full text of the Apache License, Version 2.0 is available at https://www.apache.org/licenses/LICENSE-2.0. A copy is reproduced below.

                                 Apache License
                           Version 2.0, January 2004
                        http://www.apache.org/licenses/

   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

   1. Definitions.

      "License" shall mean the terms and conditions for use, reproduction,
      and distribution as defined by Sections 1 through 9 of this document.

      "Licensor" shall mean the copyright owner or entity authorized by
      the copyright owner that is granting the License.

      "Legal Entity" shall mean the union of the acting entity and all
      other entities that control, are controlled by, or are under common
      control with that entity. For the purposes of this definition,
      "control" means (i) the power, direct or indirect, to cause the
      direction or management of such entity, whether by contract or
      otherwise, or (ii) ownership of fifty percent (50%) or more of the
      outstanding shares, or (iii) beneficial ownership of such entity.

      "You" (or "Your") shall mean an individual or Legal Entity
      exercising permissions granted by this License.

      "Source" form shall mean the preferred form for making modifications,
      including but not limited to software source code, documentation
      source, and configuration files.

      "Object" form shall mean any form resulting from mechanical
      transformation or translation of a Source form, including but not
      limited to compiled object code, generated documentation, and
      conversions to other media types.

      "Work" shall mean the work of authorship, whether in Source or
      Object form, made available under the License, as indicated by a
      copyright notice that is included in or attached to the work.

      "Derivative Works" shall mean any work, whether in Source or Object
      form, that is based on (or derived from) the Work and for which the
      editorial revisions, annotations, elaborations, or other modifications
      represent, as a whole, an original work of authorship.

      "Contribution" shall mean any work of authorship, including the
      original version of the Work and any modifications or additions to
      that Work or Derivative Works thereof, that is intentionally submitted
      to Licensor for inclusion in the Work.

      "Contributor" shall mean Licensor and any individual or Legal Entity
      on behalf of whom a Contribution has been received by Licensor and
      subsequently incorporated within the Work.

   2. Grant of Copyright License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      copyright license to reproduce, prepare Derivative Works of,
      publicly display, publicly perform, sublicense, and distribute the
      Work and such Derivative Works in Source or Object form.

   3. Grant of Patent License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      (except as stated in this section) patent license to make, have
      made, use, offer to sell, sell, import, and otherwise transfer the
      Work, where such license applies only to those patent claims
      licensable by such Contributor that are necessarily infringed by
      their Contribution(s) alone or by combination of their
      Contribution(s) with the Work to which such Contribution(s) was
      submitted. If You institute patent litigation against any entity
      (including a cross-claim or counterclaim in a lawsuit) alleging that
      the Work or a Contribution incorporated within the Work constitutes
      direct or contributory patent infringement, then any patent licenses
      granted to You under this License for that Work shall terminate as
      of the date such litigation is filed.

   4. Redistribution. You may reproduce and distribute copies of the Work
      or Derivative Works thereof in any medium, with or without
      modifications, and in Source or Object form, provided that You meet
      the following conditions:

      (a) You must give any other recipients of the Work or Derivative
          Works a copy of this License; and
      (b) You must cause any modified files to carry prominent notices
          stating that You changed the files; and
      (c) You must retain, in the Source form of any Derivative Works that
          You distribute, all copyright, patent, trademark, and attribution
          notices from the Source form of the Work; and
      (d) If the Work includes a "NOTICE" text file as part of its
          distribution, then any Derivative Works that You distribute must
          include a readable copy of the attribution notices contained
          within such NOTICE file.

   5. Submission of Contributions. Unless You explicitly state otherwise,
      any Contribution intentionally submitted for inclusion in the Work
      by You to the Licensor shall be under the terms and conditions of
      this License, without any additional terms or conditions.

   6. Trademarks. This License does not grant permission to use the trade
      names, trademarks, service marks, or product names of the Licensor.

   7. Disclaimer of Warranty. Unless required by applicable law or agreed
      to in writing, Licensor provides the Work (and each Contributor
      provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES
      OR CONDITIONS OF ANY KIND, either express or implied.

   8. Limitation of Liability. In no event and under no legal theory shall
      any Contributor be liable to You for damages, including any direct,
      indirect, special, incidental, or consequential damages of any
      character arising as a result of this License or out of the use or
      inability to use the Work.

   9. Accepting Warranty or Additional Liability. While redistributing the
      Work or Derivative Works thereof, You may choose to offer, and charge
      a fee for, acceptance of support, warranty, indemnity, or other
      liability obligations and/or rights consistent with this License.

   END OF TERMS AND CONDITIONS

Generated for the Cenova 1.0 release. To regenerate after dependency changes, re-run the dependency enumeration for each stack (go list -deps on the root package, npm ls --omit=dev --all in frontend/, and dotnet list package --include-transitive on the shipped TrackerService projects).

Copyright Cegal AS 2026