Skip to content

3rd Party Libraries

Copyright © 2026 Cegal AS. All rights reserved.

Cenova and its first-party components (including all Cegal.*, Blueback.*, and the Blueback.CPT.* projects) are proprietary software owned by Cegal AS and are not covered by the third-party notices below.

This product includes third-party open-source software. The components listed here are redistributed under their respective licenses. Each component remains the copyright of its respective authors, and Cegal AS claims no ownership over them.

All bundled third-party components are licensed under permissive licenses (MIT, BSD-2-Clause, BSD-3-Clause, ISC, and Apache-2.0). No copyleft (GPL/LGPL/AGPL/MPL) or commercially restricted components are distributed with Cenova 1.0.

The lists below enumerate the actual shipped dependency closure of each component:

  • Go services / CLI — modules compiled into the cenova binary (go list -deps).
  • Web frontend — production (--omit=dev) npm dependency closure.
  • TrackerService (.NET) — direct and transitive NuGet packages of the shipped Blueback.CPT.API and Blueback.CPT.Ingestor services.

Build-, test-, and tooling-only dependencies (e.g. buf, docker/containerd, nilaway, Vite, ESLint, Grpc.Tools, EntityFrameworkCore.Design) are excluded because they are not distributed with the product.

License summary

LicenseComponents
MITMajority of Go, frontend, and .NET components
Apache-2.0NATS, Serilog, google/go-tpm, minio/highwayhash, jonboulle/clockwork, @mdi/font, TypeScript
BSD-3-Clausegolang.org/x/*, google.golang.org/protobuf, google/uuid, klauspost/compress, Google.Protobuf, NetTopologySuite, source-map-js, speakingurl
BSD-2-Clausepkg/errors, entities
ISCpicocolors, yaml

Go components (cenova binary)

ModuleVersionLicense
github.com/BurntSushi/tomlv1.5.0MIT
github.com/Masterminds/semver/v3v3.4.0MIT
github.com/antithesishq/antithesis-sdk-gov0.6.0-default-no-opMIT
github.com/aymanbagabas/go-osc52/v2v2.0.1MIT
github.com/charmbracelet/bubblesv0.21.0MIT
github.com/charmbracelet/bubbleteav1.3.6MIT
github.com/charmbracelet/colorprofilev0.3.1MIT
github.com/charmbracelet/harmonicav0.2.0MIT
github.com/charmbracelet/lipglossv1.1.0MIT
github.com/charmbracelet/x/ansiv0.9.3MIT
github.com/charmbracelet/x/cellbufv0.0.13MIT
github.com/charmbracelet/x/termv0.2.1MIT
github.com/erikgeiser/coninputv0.0.0-20211004153227-1c3628e74d0fMIT
github.com/go-co-op/gocron/v2v2.16.2MIT
github.com/gobwas/globv0.2.3MIT
github.com/golang-jwt/jwt/v5v5.2.3MIT
github.com/google/go-tpmv0.9.8Apache-2.0
github.com/google/uuidv1.6.0BSD-3-Clause
github.com/jedib0t/go-pretty/v6v6.6.7MIT
github.com/jonboulle/clockworkv0.5.0Apache-2.0
github.com/klauspost/compressv1.18.4BSD-3-Clause
github.com/lestrrat-go/backoff/v2v2.0.8MIT
github.com/lestrrat-go/blackmagicv1.0.2MIT
github.com/lestrrat-go/httpccv1.0.1MIT
github.com/lestrrat-go/iterv1.0.2MIT
github.com/lestrrat-go/jwxv1.2.31MIT
github.com/lestrrat-go/optionv1.0.1MIT
github.com/lucasb-eyer/go-colorfulv1.2.0MIT
github.com/mattn/go-colorablev0.1.14MIT
github.com/mattn/go-isattyv0.0.20MIT
github.com/mattn/go-localereaderv0.0.1MIT
github.com/mattn/go-runewidthv0.0.16MIT
github.com/mattn/go-sqlite3v1.14.28MIT
github.com/minio/highwayhashv1.0.4-0.20251030100505-070ab1a87a76Apache-2.0
github.com/muesli/ansiv0.0.0-20230316100256-276c6243b2f6MIT
github.com/muesli/cancelreaderv0.2.2MIT
github.com/muesli/termenvv0.16.0MIT
github.com/nats-io/jwt/v2v2.8.1Apache-2.0
github.com/nats-io/nats-server/v2v2.11.15Apache-2.0
github.com/nats-io/nats.gov1.49.0Apache-2.0
github.com/nats-io/nkeysv0.4.15Apache-2.0
github.com/nats-io/nuidv1.0.1Apache-2.0
github.com/pkg/errorsv0.9.1BSD-2-Clause
github.com/rivo/unisegv0.4.7MIT
github.com/robfig/cron/v3v3.0.1MIT
github.com/rs/zerologv1.34.0MIT
github.com/urfave/cli-altsrc/v3v3.1.0MIT
github.com/urfave/cli/v3v3.6.1MIT
github.com/xo/terminfov0.0.0-20220910002029-abceb7e1c41eMIT
golang.org/x/cryptov0.49.0BSD-3-Clause
golang.org/x/expv0.0.0-20250718183923-645b1fa84792BSD-3-Clause
golang.org/x/oauth2v0.34.0BSD-3-Clause
golang.org/x/syncv0.20.0BSD-3-Clause
golang.org/x/sysv0.42.0BSD-3-Clause
golang.org/x/termv0.41.0BSD-3-Clause
golang.org/x/textv0.35.0BSD-3-Clause
golang.org/x/timev0.15.0BSD-3-Clause
google.golang.org/protobufv1.36.10BSD-3-Clause
gopkg.in/natefinch/lumberjack.v2v2.2.1MIT

Web frontend components (npm, production closure)

PackageVersionLicense
@babel/generator7.29.1MIT
@babel/helper-string-parser7.27.1MIT
@babel/helper-validator-identifier7.28.5MIT
@babel/parser7.29.0MIT
@babel/types7.29.0MIT
@bufbuild/protobuf2.11.0Apache-2.0 AND BSD-3-Clause
@jridgewell/gen-mapping0.3.13MIT
@jridgewell/remapping2.3.5MIT
@jridgewell/resolve-uri3.1.2MIT
@jridgewell/sourcemap-codec1.5.5MIT
@jridgewell/trace-mapping0.3.31MIT
@kurkle/color0.3.4MIT
@mdi/font7.4.47Apache-2.0
@primeuix/styled0.7.4MIT
@primeuix/styles2.0.3MIT
@primeuix/themes2.0.3MIT
@primeuix/utils0.6.4MIT
@primevue/core4.5.4MIT
@primevue/icons4.5.4MIT
@vue-macros/common3.1.2MIT
@vue/compiler-core3.5.30MIT
@vue/compiler-dom3.5.30MIT
@vue/compiler-sfc3.5.30MIT
@vue/compiler-ssr3.5.30MIT
@vue/devtools-api8.1.0MIT
@vue/devtools-kit7.7.9MIT
@vue/devtools-shared7.7.9MIT
@vue/reactivity3.5.30MIT
@vue/runtime-core3.5.30MIT
@vue/runtime-dom3.5.30MIT
@vue/server-renderer3.5.30MIT
@vue/shared3.5.30MIT
acorn8.16.0MIT
ast-kit2.2.0MIT
ast-walker-scope0.8.3MIT
birpc2.9.0MIT
chart.js4.5.1MIT
chartjs-chart-treemap3.1.0MIT
chokidar5.0.0MIT
confbox0.2.4MIT
copy-anything3.0.5MIT
cron-parser5.5.0MIT
cronstrue3.13.0MIT
csstype3.2.3MIT
entities7.0.1BSD-2-Clause
estree-walker2.0.2MIT
exsolve1.0.8MIT
hookable5.5.3MIT
is-what4.1.16MIT
jsesc3.1.0MIT
json52.2.3MIT
local-pkg1.1.2MIT
luxon3.7.2MIT
magic-string0.30.21MIT
magic-string-ast1.0.3MIT
mitt3.0.1MIT
mlly1.8.1MIT
muggle-string0.4.1MIT
nanoid3.3.11MIT
pathe2.0.3MIT
perfect-debounce1.0.0MIT
picocolors1.1.1ISC
picomatch2.3.2MIT
pinia3.0.4MIT
pkg-types2.3.0MIT
postcss8.5.14MIT
primeflex4.0.0MIT
primeicons7.0.0MIT
primevue4.5.4MIT
quansync0.2.11MIT
rfdc1.4.1MIT
scule1.3.0MIT
source-map-js1.2.1BSD-3-Clause
speakingurl14.0.1BSD-3-Clause
superjson2.2.2MIT
tinyglobby0.2.15MIT
typescript5.9.3Apache-2.0
ufo1.6.3MIT
unplugin2.3.11MIT
unplugin-utils0.3.1MIT
vue3.5.30MIT
vue-router5.0.3MIT
webpack-virtual-modules0.6.2MIT
yaml2.9.0ISC

TrackerService components (.NET / NuGet)

Microsoft and .NET Foundation packages (Microsoft.*, System.*) are distributed under the MIT License.

PackageVersionLicense
Google.Protobuf3.34.1BSD-3-Clause
Microsoft.AspNetCore.OpenApi10.0.5MIT
Microsoft.Bcl.Cryptography9.0.13MIT
Microsoft.Data.SqlClient7.0.0MIT
Microsoft.Data.SqlClient.Extensions.Abstractions1.0.0MIT
Microsoft.Data.SqlClient.Internal.Logging1.0.0MIT
Microsoft.Data.SqlClient.SNI.runtime6.0.2MIT
Microsoft.EntityFrameworkCore10.0.5MIT
Microsoft.EntityFrameworkCore.Abstractions10.0.5MIT
Microsoft.EntityFrameworkCore.Analyzers10.0.5MIT
Microsoft.EntityFrameworkCore.Relational10.0.5MIT
Microsoft.EntityFrameworkCore.SqlServer10.0.5MIT
Microsoft.EntityFrameworkCore.SqlServer.NetTopologySuite10.0.5MIT
Microsoft.Extensions.* (Caching, Configuration, DependencyInjection, Diagnostics, FileProviders, Hosting, Logging, Options, Primitives, ApiDescription.Server, DependencyModel)10.0.0 / 10.0.5MIT
Microsoft.IdentityModel.Abstractions8.16.0MIT
Microsoft.IdentityModel.JsonWebTokens8.16.0MIT
Microsoft.IdentityModel.Logging8.16.0MIT
Microsoft.IdentityModel.Protocols8.16.0MIT
Microsoft.IdentityModel.Protocols.OpenIdConnect8.16.0MIT
Microsoft.IdentityModel.Tokens8.16.0MIT
Microsoft.OpenApi2.4.1MIT
Microsoft.SqlServer.Server1.0.0MIT
NATS.Client.Abstractions2.7.3Apache-2.0
NATS.Client.Core2.7.3Apache-2.0
NATS.Client.Hosting2.7.3Apache-2.0
NATS.Client.JetStream2.7.3Apache-2.0
NATS.Client.KeyValueStore2.7.3Apache-2.0
NATS.Client.ObjectStore2.7.3Apache-2.0
NATS.Client.Serializers.Json2.7.3Apache-2.0
NATS.Client.Services2.7.3Apache-2.0
NATS.Client.Simplified2.7.3Apache-2.0
NATS.Extensions.Microsoft.DependencyInjection2.7.3Apache-2.0
NATS.Net2.7.3Apache-2.0
NetTopologySuite2.6.0BSD-3-Clause
NetTopologySuite.IO.SqlServerBytes2.1.0BSD-3-Clause
Serilog4.3.1Apache-2.0
Serilog.AspNetCore10.0.0Apache-2.0
Serilog.Expressions5.0.0Apache-2.0
Serilog.Extensions.Hosting10.0.0Apache-2.0
Serilog.Extensions.Logging10.0.0Apache-2.0
Serilog.Formatting.Compact3.0.0Apache-2.0
Serilog.Settings.Configuration10.0.0Apache-2.0
Serilog.Sinks.Console6.1.1Apache-2.0
Serilog.Sinks.Debug3.0.0Apache-2.0
Serilog.Sinks.File7.0.0Apache-2.0
Swashbuckle.AspNetCore10.1.5MIT
Swashbuckle.AspNetCore.Swagger10.1.5MIT
Swashbuckle.AspNetCore.SwaggerGen10.1.5MIT
Swashbuckle.AspNetCore.SwaggerUI10.1.5MIT
System.Configuration.ConfigurationManager9.0.13MIT
System.Diagnostics.EventLog10.0.5MIT
System.IdentityModel.Tokens.Jwt8.16.0MIT
System.Security.Cryptography.Pkcs9.0.13MIT
System.Security.Cryptography.ProtectedData9.0.13MIT

License texts

Full license texts (MIT, ISC, BSD-2-Clause, BSD-3-Clause, and Apache-2.0) are available from the respective projects. The Apache License, Version 2.0 is available at https://www.apache.org/licenses/LICENSE-2.0.