Semaphore UI is built on the work of many open-source projects. This document identifies every third-party component distributed with Semaphore UI, in compliance with the attribution requirements of the respective licenses and with §3.6 of our Master Service Agreement (identification of open-source components by name, version, and license type).
Generated on 2026-06-13 15:49 UTC by scripts/collect_licenses.sh.
To regenerate this file, run:
scripts/collect_licenses.sh
scripts/check_policy.py .licenses-cache/
scripts/generate_md.py .licenses-cache/ > THIRD-PARTY-LICENSES.mdThis document lists 116 third-party components distributed with Semaphore UI, grouped by ecosystem.
| Ecosystem | Components |
|---|---|
| Go (backend) | 63 |
| npm (frontend) | 53 |
| License | Count |
|---|---|
| MIT | 74 |
| BSD-3-Clause | 24 |
| Apache-2.0 | 12 |
| BSD-2-Clause | 3 |
| MPL-2.0 | 2 |
| ISC | 1 |
Modules statically linked into the Semaphore UI server binary. Sourced from go.mod (production dependencies only).
| Component | Version(s) | License | Source |
|---|---|---|---|
dario.cat/mergo |
v1.0.2 | BSD-3-Clause | link |
filippo.io/edwards25519 |
v1.2.0 | BSD-3-Clause | link |
github.com/Azure/go-ntlmssp |
v0.1.1 | MIT | link |
github.com/boombuler/barcode |
v1.1.0 | MIT | link |
github.com/cloudflare/circl |
v1.6.3 | BSD-3-Clause | link |
github.com/coreos/go-oidc/v3 |
v3.18.0 | Apache-2.0 | link |
github.com/creack/pty |
v1.1.24 | MIT | link |
github.com/cyphar/filepath-securejoin |
v0.6.1 | MPL-2.0 | link |
github.com/dustin/go-humanize |
v1.0.1 | MIT | link |
github.com/emirpasic/gods |
v1.18.1 | BSD-2-Clause | link |
github.com/felixge/httpsnoop |
v1.1.0 | MIT | link |
github.com/go-asn1-ber/asn1-ber |
v1.5.8-0.20250403174932-29230038a667 | MIT | link |
github.com/go-git/gcfg |
v1.5.1-0.20230307220236-3a3c6141e376 | BSD-3-Clause | link |
github.com/go-git/go-billy/v5 |
v5.9.0 | Apache-2.0 | link |
github.com/go-git/go-git/v5 |
v5.19.1 | Apache-2.0 | link |
github.com/go-gorp/gorp/v3 |
v3.1.0 | MIT | link |
github.com/go-jose/go-jose/v4 |
v4.1.4 | Apache-2.0 | link |
github.com/go-ldap/ldap/v3 |
v3.4.13 | MIT | link |
github.com/go-sql-driver/mysql |
v1.10.0 | MPL-2.0 | link |
github.com/golang/groupcache |
v0.0.0-20241129210726-2c02b8208cf8 | Apache-2.0 | link |
github.com/google/go-github |
v17.0.0+incompatible | BSD-3-Clause | link |
github.com/google/go-querystring |
v1.2.0 | BSD-3-Clause | link |
github.com/google/uuid |
v1.6.0 | BSD-3-Clause | link |
github.com/gorilla/handlers |
v1.5.2 | BSD-3-Clause | link |
github.com/gorilla/mux |
v1.8.1 | BSD-3-Clause | link |
github.com/gorilla/securecookie |
v1.1.2 | BSD-3-Clause | link |
github.com/gorilla/websocket |
v1.5.4-0.20250319132907-e064f32e3674 | BSD-2-Clause | link |
github.com/jbenet/go-context |
v0.0.0-20150711004518-d14ea06fba99 | MIT | link |
github.com/kevinburke/ssh_config |
v1.6.0 | MIT | link |
github.com/klauspost/cpuid/v2 |
v2.3.0 | MIT | link |
github.com/lann/builder |
v0.0.0-20180802200727-47ae307949d0 | MIT | link |
github.com/lann/ps |
v0.0.0-20150810152359-62de8c46ede0 | MIT | link |
github.com/lib/pq |
v1.12.3 | MIT | link |
github.com/Masterminds/squirrel |
v1.5.4 | MIT | link |
github.com/mattn/go-isatty |
v0.0.22 | MIT | link |
github.com/mdp/qrterminal/v3 |
v3.2.1 | MIT | link |
github.com/ncruces/go-strftime |
v1.0.0 | MIT | link |
github.com/pjbgf/sha1cd |
v0.6.0 | Apache-2.0 | link |
github.com/pquerna/otp |
v1.5.0 | Apache-2.0 | link |
github.com/ProtonMail/go-crypto |
v1.4.1 | BSD-3-Clause | link |
github.com/remyoudompheng/bigfft |
v0.0.0-20230129092748-24d4a6f8daec | BSD-3-Clause | link |
github.com/robfig/cron/v3 |
v3.0.1 | MIT | link |
github.com/sergi/go-diff |
v1.4.0 | MIT | link |
github.com/sirupsen/logrus |
v1.9.4 | MIT | link |
github.com/skeema/knownhosts |
v1.3.2 | Apache-2.0 | link |
github.com/snikch/goodman |
v0.0.0-20171125024755-10e37e294daa | MIT | link |
github.com/spf13/cobra |
v1.10.2 | Apache-2.0 | link |
github.com/spf13/pflag |
v1.0.10 | BSD-3-Clause | link |
github.com/thedevsaddam/gojsonq/v2 |
v2.5.2 | MIT | link |
github.com/xanzy/ssh-agent |
v0.3.3 | Apache-2.0 | link |
golang.org/x/crypto |
v0.53.0 | BSD-3-Clause | link |
golang.org/x/net |
v0.56.0 | BSD-3-Clause | link |
golang.org/x/oauth2 |
v0.36.0 | BSD-3-Clause | link |
golang.org/x/sys |
v0.46.0 | BSD-3-Clause | link |
golang.org/x/term |
v0.44.0 | BSD-3-Clause | link |
gopkg.in/natefinch/lumberjack.v2 |
v2.2.1 | MIT | link |
gopkg.in/warnings.v0 |
v0.1.2 | BSD-2-Clause | link |
gopkg.in/yaml.v3 |
v3.0.1 | MIT | link |
modernc.org/libc |
v1.73.1 | MIT | link |
modernc.org/mathutil |
v1.7.1 | BSD-3-Clause | link |
modernc.org/memory |
v1.11.0 | BSD-3-Clause | link |
modernc.org/sqlite |
v1.52.0 | BSD-3-Clause | link |
rsc.io/qr |
v0.2.0 | BSD-3-Clause | link |
Packages bundled into the web UI assets, which are embedded in the server binary at build time. Sourced from the frontend package.json (production dependencies only; dev dependencies are not distributed).
| Component | Version(s) | License | Source |
|---|---|---|---|
@babel/helper-string-parser |
7.25.9 | MIT | link |
@babel/helper-validator-identifier |
7.25.9 | MIT | link |
@babel/parser |
7.27.0 | MIT | link |
@babel/types |
7.27.0 | MIT | link |
@mdi/font |
7.4.47 | Apache-2.0 | link |
@vue/compiler-sfc |
2.7.16 | MIT | — |
ansi_up |
6.0.6 | MIT | link |
asynckit |
0.4.0 | MIT | link |
axios |
1.15.2 | MIT | link |
call-bind-apply-helpers |
1.0.2 | MIT | link |
chart.js |
3.9.1 | MIT | link |
codemirror |
5.65.6 | MIT | link |
combined-stream |
1.0.8 | MIT | link |
core-js |
3.49.0 | MIT | link |
cron-parser |
5.5.0 | MIT | link |
csstype |
3.1.3 | MIT | link |
dayjs |
1.11.19 | MIT | link |
delayed-stream |
1.0.0 | MIT | link |
diff-match-patch |
1.0.5 | Apache-2.0 | link |
dunder-proto |
1.0.1 | MIT | link |
es-define-property |
1.0.1 | MIT | link |
es-errors |
1.3.0 | MIT | link |
es-object-atoms |
1.1.1 | MIT | link |
es-set-tostringtag |
2.1.0 | MIT | link |
follow-redirects |
1.16.0 | MIT | link |
form-data |
4.0.5 | MIT | link |
function-bind |
1.1.2 | MIT | link |
get-intrinsic |
1.3.0 | MIT | link |
get-proto |
1.0.1 | MIT | link |
gopd |
1.2.0 | MIT | link |
has-symbols |
1.1.0 | MIT | link |
has-tostringtag |
1.0.2 | MIT | link |
hasown |
2.0.2 | MIT | link |
luxon |
3.7.1 | MIT | link |
math-intrinsics |
1.1.0 | MIT | link |
mime-db |
1.52.0 | MIT | link |
mime-types |
2.1.35 | MIT | link |
nanoid |
3.3.7 | MIT | link |
picocolors |
1.1.1 | ISC | link |
postcss |
8.4.49 | MIT | link |
prettier |
2.8.8 | MIT | link |
proxy-from-env |
2.1.0 | MIT | link |
sortablejs |
1.10.2 | MIT | link |
source-map |
0.6.1 | BSD-3-Clause | link |
source-map-js |
1.2.1 | BSD-3-Clause | link |
vue |
2.7.16 | MIT | link |
vue-chartjs |
4.1.2 | MIT | link |
vue-codemirror |
4.0.6 | MIT | link |
vue-i18n |
8.28.2 | MIT | link |
vue-router |
3.6.5 | MIT | link |
vue-virtual-scroll-list |
2.3.5 | MIT | link |
vuedraggable |
2.24.3 | MIT | link |
vuetify |
2.7.2 | MIT | link |
Full license texts for each component are available at the source URLs listed above. For permissively-licensed packages (MIT, BSD, ISC, Apache-2.0), the original LICENSE and NOTICE files are preserved in their respective package directories within the Semaphore UI distribution.
If you believe a component is missing from this list or incorrectly attributed, please open an issue at https://github.com/semaphoreui/semaphore/issues.