Open Source Schedule

A Software Bill of Materials (SBOM): the open-source components ScaiDNS depends on, with their versions and licenses. Generated from the actual installed dependencies by scripts/generate_oss_schedule.py.

Product: ScaiDNS
Generated: 2026-09-03
Third-party OSS components: 49 distributed (44 backend runtime, 5 frontend runtime)
First-party ScaiLabs components: 2

All third-party licenses below are OSI-approved and permissive (MIT/BSD/Apache/ISC/PSF) except where a note flags an obligation. None are strong copyleft (no GPL/AGPL).

License summary (distributed third-party components)#

License	Count
MIT	31
BSD-3-Clause	10
Apache-2.0	2
Apache-2.0 OR BSD-3-Clause	1
ISC	1
MIT AND Python-2.0	1
MPL-2.0 — weak copyleft (file-level); source of modified MPL files must be offered	1
PSF-2.0 — permissive (Python Software Foundation)	1
Unlicense — public domain dedication	1

Backend — runtime (distributed)#

Python packages that ship and run in the service (the full runtime dependency closure).

Component	Version	License
alembic	1.18.0	MIT
annotated-doc	0.0.4	MIT
annotated-types	0.7.0	MIT
anyio	4.12.1	MIT
argon2-cffi	25.1.0	MIT
argon2-cffi-bindings	25.1.0	MIT
arq	0.26.3	MIT
asyncmy	0.2.10	Apache-2.0
attrs	25.4.0	MIT
certifi	2026.1.4	MPL-2.0
cffi	2.0.0	MIT
click	8.3.1	BSD-3-Clause
cryptography	46.0.3	Apache-2.0 OR BSD-3-Clause
dnspython	2.8.0	ISC
email-validator	2.3.0	Unlicense
fastapi	0.128.0	MIT
greenlet	3.3.0	MIT AND Python-2.0
h11	0.16.0	MIT
httpcore	1.0.9	BSD-3-Clause
httpx	0.28.1	BSD-3-Clause
httpx-sse	0.4.3	MIT
idna	3.11	BSD-3-Clause
jsonschema	4.26.0	MIT
jsonschema-specifications	2025.9.1	MIT
Mako	1.3.10	MIT
MarkupSafe	3.0.3	BSD-3-Clause
mcp	1.25.0	MIT
pycparser	2.23	BSD-3-Clause
pydantic	2.12.5	MIT
pydantic_core	2.41.5	MIT
pydantic-settings	2.12.0	MIT
PyJWT	2.10.1	MIT
python-dotenv	1.2.1	BSD-3-Clause
python-multipart	0.0.21	Apache-2.0
PyYAML	6.0.3	MIT
redis	5.3.1	MIT
referencing	0.37.0	MIT
rpds-py	0.30.0	MIT
SQLAlchemy	2.0.45	MIT
sse-starlette	3.1.2	BSD-3-Clause
starlette	0.50.0	BSD-3-Clause
typing_extensions	4.15.0	PSF-2.0
typing-inspection	0.4.2	MIT
uvicorn	0.40.0	BSD-3-Clause

Frontend — runtime (distributed to the browser)#

JavaScript packages bundled into the served application.

Component	Version	License
@solidjs/router	0.15.4	MIT
csstype	3.2.3	MIT
seroval	1.3.2	MIT
seroval-plugins	1.3.3	MIT
solid-js	1.9.10	MIT

First-party ScaiLabs components#

ScaiLabs-authored components (vendored SDKs). Their declared license is shown; they are not third-party OSS.

Component	Version	License
scaikey-sdk	1.1.6	MIT
scailog	1.0.2	Apache-2.0

Build & development tooling (not distributed)#

Used to build/test the product; compiled output may derive from them (e.g. CSS from Tailwind/daisyUI) but the tools themselves are not shipped.

Frontend build/dev#

Component	Version	License
@tailwindcss/vite	4.1.18	MIT
@types/node	24.10.7	MIT
daisyui	5.5.14	MIT
tailwindcss	4.1.18	MIT
typescript	5.9.3	Apache-2.0
vite	7.3.1	MIT
vite-plugin-solid	2.11.10	MIT

Backend dev/test#

Component	Version	License
aiosqlite	0.22.1	MIT
httpx	0.28.1	BSD-3-Clause
mypy	(declared)	see upstream
pytest	9.1.1	MIT
pytest-asyncio	1.4.0	Apache-2.0
pytest-cov	7.1.0	MIT
ruff	(declared)	see upstream

Methodology#

Backend: importlib.metadata over the backend venv, walking the app distribution's Requires-Dist runtime closure (dev/test extras excluded).
Frontend runtime: npm ls --omit=dev --all; licenses from each package's package.json.
Regenerate per release with scripts/generate_oss_schedule.py and commit the result.

Schedule generated 2026-09-03. Verify against the release build before distributing externally.