Open-source licenses

Protectory uses the open-source software and public data listed below, under their licenses.

Protectory is built on open-source software and public data. This file is generated by make licenses.

Data sources

  • RetireJS vulnerability repository - Apache License 2.0. Library detection patterns and vulnerable version ranges (jsrepository-v4.json), Copyright the RetireJS contributors. https://github.com/RetireJS/retire.js
  • OSV.dev - Terms published by OSV.dev; individual advisories carry their own licenses. Optional vulnerability enrichment. Vulnerability data from OSV.dev (https://osv.dev), operated by Google.
  • wpvulnerability.net - Terms published by wpvulnerability.net. WordPress core, plugin and theme vulnerability data. https://www.wpvulnerability.net
  • WordPress.org API - Terms published by WordPress.org. Current WordPress version (api.wordpress.org).
  • WordPress.org checksums - Terms published by WordPress.org; WordPress and directory plugins are GPL-licensed. Official core and plugin file checksums for Integrity (api.wordpress.org, downloads.wordpress.org).
  • crt.sh - Terms published by Sectigo (crt.sh). Certificate Transparency search for sub-domain names.
  • RDAP (rdap.org) - Public registry data. Domain expiry and transfer-lock status.
  • DNS blocklists - Free-use terms of each list. zen.spamhaus.org, bl.spamcop.net, b.barracudacentral.org (mail server IP reputation, low volume).
  • disposable-email-domains - CC0 1.0 (public domain dedication). Disposable e-mail domain list. https://github.com/disposable-email-domains/disposable-email-domains

Front-end assets shipped with the site

  • htmx 2.0.4 - 0BSD (Zero-Clause BSD) - app/web/static/vendor/htmx.min.js - https://github.com/bigskysoftware/htmx
  • Shepherd.js 11.2.0 - MIT - app/web/static/vendor/shepherd.min.js, shepherd.css - https://github.com/shipshapecode/shepherd
  • Bricolage Grotesque (font) - - SIL Open Font License 1.1 - app/web/static/fonts/bricolage-grotesque-* - https://github.com/ateliertriay/bricolage
  • Figtree (font) - - SIL Open Font License 1.1 - app/web/static/fonts/figtree-* - https://github.com/erikdkennedy/figtree
  • Heebo (font) - - SIL Open Font License 1.1 - app/web/static/fonts/heebo-* - https://github.com/OdedEzer/heebo
  • Rubik (font) - - SIL Open Font License 1.1 - app/web/static/fonts/rubik-* - https://github.com/googlefonts/rubik

Python packages

  • alembic 1.20.0 - MIT - https://alembic.sqlalchemy.org
  • annotated-doc 0.0.5 - MIT - https://github.com/fastapi/annotated-doc
  • annotated-types 0.8.0 - MIT - https://github.com/annotated-types/annotated-types
  • anyio 4.15.1 - MIT - https://anyio.readthedocs.io/en/stable/versionhistory.html
  • argon2-cffi 25.1.0 - MIT - https://github.com/hynek/argon2-cffi/blob/main/CHANGELOG.md
  • argon2-cffi-bindings 26.1.0 - MIT - https://github.com/hynek/argon2-cffi-bindings/blob/main/CHANGELOG.md
  • ast_serialize 0.12.1 - MIT - https://github.com/mypyc/ast_serialize
  • asyncpg 0.31.0 - Apache-2.0
  • babel 2.18.0 - BSD License - https://babel.pocoo.org/
  • black 26.10.0 - MIT - https://github.com/psf/black
  • blinker 1.9.0 - MIT License - https://github.com/pallets-eco/blinker/
  • boto3 1.43.108 - Apache-2.0 - https://github.com/boto/boto3
  • boto3-stubs 1.43.108 - MIT - https://github.com/youtype/mypy_boto3_builder
  • botocore 1.43.108 - Apache-2.0 - https://github.com/boto/botocore
  • botocore-stubs 1.43.67 - MIT - https://github.com/youtype/botocore-stubs
  • certifi 2026.7.22 - Mozilla Public License 2.0 (MPL 2.0) - https://github.com/certifi/python-certifi
  • cffi 2.1.1 - MIT-0 - https://cffi.readthedocs.io/en/latest/whatsnew.html
  • charset-normalizer 3.5.2 - MIT - https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md
  • click 8.5.0 - BSD-3-Clause - https://github.com/pallets/click/
  • coverage 7.16.2 - Apache-2.0 - https://github.com/coveragepy/coveragepy
  • croniter 6.2.4 - MIT - https://github.com/pallets-eco/croniter
  • cryptography 50.0.2 - Apache-2.0 OR BSD-3-Clause - https://github.com/pyca/cryptography
  • defusedxml 0.7.1 - Python Software Foundation License - https://github.com/tiran/defusedxml
  • dnspython 2.8.0 - ISC License (ISCL) - https://www.dnspython.org
  • fakeredis 2.39.0 - BSD-3-Clause - https://github.com/cunla/fakeredis-py
  • fastapi 0.142.2 - MIT - https://github.com/fastapi/fastapi
  • Flask 3.1.3 - BSD-3-Clause - https://github.com/pallets/flask/
  • flask-cors 6.0.5 - MIT - https://corydolphin.github.io/flask-cors/
  • greenlet 3.5.6 - MIT AND PSF-2.0 - https://greenlet.readthedocs.io
  • h11 0.16.0 - MIT License - https://github.com/python-hyper/h11
  • h2 4.4.1 - MIT - https://github.com/python-hyper/h2/
  • hpack 4.2.0 - MIT - https://github.com/python-hyper/hpack/
  • httpcore 1.0.9 - BSD-3-Clause - https://www.encode.io/httpcore/
  • httptools 0.8.0 - MIT - https://github.com/MagicStack/httptools
  • httpx 0.28.1 - BSD License - https://github.com/encode/httpx
  • hyperframe 6.1.0 - MIT License - https://github.com/python-hyper/hyperframe/
  • idna 3.20 - BSD-3-Clause - https://github.com/kjd/idna
  • iniconfig 2.3.0 - MIT - https://github.com/pytest-dev/iniconfig
  • itsdangerous 2.2.0 - BSD License - https://github.com/pallets/itsdangerous/
  • Jinja2 3.1.6 - BSD License - https://github.com/pallets/jinja/
  • jmespath 1.1.0 - MIT License - https://github.com/jmespath/jmespath.py
  • librt 0.16.0 - MIT - https://github.com/mypyc/librt
  • Mako 1.4.3 - MIT - https://www.makotemplates.org/
  • MarkupSafe 3.0.4 - BSD-3-Clause - https://github.com/pallets/markupsafe/
  • moto 5.2.3 - Apache-2.0 - https://github.com/getmoto/moto
  • mypy 2.4.0 - MIT - https://www.mypy-lang.org/
  • mypy-boto3-s3 1.43.106 - MIT - https://github.com/youtype/mypy_boto3_builder
  • mypy_extensions 1.1.0 - MIT - https://github.com/python/mypy_extensions
  • opentelemetry-api 1.45.0 - Apache-2.0 - https://github.com/open-telemetry/opentelemetry-python/tree/main/opentelemetry-api
  • packaging 26.3 - Apache-2.0 OR BSD-2-Clause - https://github.com/pypa/packaging
  • pathspec 1.1.1 - Mozilla Public License 2.0 (MPL 2.0) - https://python-path-specification.readthedocs.io/en/latest/index.html
  • platformdirs 4.12.3 - MIT - https://github.com/tox-dev/platformdirs
  • playwright 1.63.0 - Apache-2.0 - https://github.com/Microsoft/playwright-python
  • pluggy 1.6.0 - MIT License
  • psycopg2-binary 2.9.13 - GNU Library or Lesser General Public License (LGPL) - https://psycopg.org/
  • py-partiql-parser 0.6.3 - MIT - https://github.com/getmoto/py-partiql-parser
  • pycparser 3.0 - BSD-3-Clause - https://github.com/eliben/pycparser
  • pydantic 2.13.5 - MIT - https://github.com/pydantic/pydantic
  • pydantic-settings 2.15.0 - MIT - https://github.com/pydantic/pydantic-settings
  • pydantic_core 2.46.5 - MIT - https://github.com/pydantic
  • pyee 13.0.1 - MIT License - https://github.com/jfhbrook/pyee
  • Pygments 2.21.0 - BSD-2-Clause - https://pygments.org
  • PyMySQL 1.2.3 - MIT - https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md
  • PyOTP 2.10.0 - MIT - https://github.com/pyauth/pyotp
  • pytest 9.1.1 - MIT - https://docs.pytest.org/en/latest/
  • pytest-asyncio 1.4.0 - Apache-2.0 - https://github.com/pytest-dev/pytest-asyncio
  • pytest-cov 7.1.0 - MIT - https://pytest-cov.readthedocs.io/en/latest/changelog.html
  • python-dateutil 2.9.0.post0 - Apache Software License; BSD License - https://github.com/dateutil/dateutil
  • python-dotenv 1.2.4 - BSD-3-Clause - https://github.com/theskumar/python-dotenv
  • python-multipart 0.0.32 - Apache-2.0 - https://github.com/Kludex/python-multipart
  • python-ulid 4.0.1 - MIT - https://github.com/mdomke/python-ulid
  • pytokens 0.4.1 - MIT License - https://github.com/tusharsadhwani/pytokens
  • PyYAML 6.0.3 - MIT License - https://pyyaml.org/
  • redis 8.1.0 - MIT - https://github.com/redis/redis-py
  • regex 2026.9.29 - Apache-2.0 AND CNRI-Python - https://github.com/mrabarnett/mrab-regex
  • requests 2.34.2 - Apache Software License - https://github.com/psf/requests
  • responses 0.26.3 - Apache-2.0 - https://github.com/getsentry/responses
  • respx 0.23.1 - BSD License - https://lundberg.github.io/respx/
  • rq 2.12.0 - BSD-2-Clause - https://python-rq.org/
  • ruff 0.16.10 - MIT - https://docs.astral.sh/ruff
  • s3transfer 0.19.2 - Apache Software License - https://github.com/boto/s3transfer
  • segno 1.6.6 - BSD License - https://github.com/heuer/segno/
  • six 1.17.0 - MIT License - https://github.com/benjaminp/six
  • sortedcontainers 2.4.0 - Apache Software License - http://www.grantjenks.com/docs/sortedcontainers/
  • SQLAlchemy 2.1.3 - MIT - https://www.sqlalchemy.org
  • starlette 1.7.0 - BSD-3-Clause - https://github.com/Kludex/starlette
  • structlog 26.1.0 - MIT OR Apache-2.0 - https://github.com/hynek/structlog/blob/main/CHANGELOG.md
  • types-cffi 2.1.0.20260827 - Apache-2.0 - https://github.com/python/typeshed
  • types-defusedxml 0.7.0.20260504 - Apache-2.0 - https://github.com/python/typeshed
  • types-PyMySQL 1.2.0.20260923 - Apache-2.0 - https://github.com/python/typeshed
  • types-pyOpenSSL 24.1.0.20240722 - Apache Software License - https://github.com/python/typeshed
  • types-PyYAML 6.0.12.20260906 - Apache-2.0 - https://github.com/python/typeshed
  • types-redis 4.6.0.20241004 - Apache Software License - https://github.com/python/typeshed
  • types-regex 2026.9.29.20261005 - Apache-2.0 - https://github.com/python/typeshed
  • types-s3transfer 0.16.0 - MIT - https://github.com/youtype/types-s3transfer
  • types-setuptools 84.0.0.20260812 - Apache-2.0 - https://github.com/python/typeshed
  • typing-inspection 0.4.4 - MIT - https://github.com/pydantic/typing-inspection
  • typing_extensions 4.16.0 - PSF-2.0 - https://github.com/python/typing_extensions
  • urllib3 2.8.0 - MIT - https://github.com/urllib3/urllib3/blob/main/CHANGES.rst
  • uvicorn 0.54.0 - BSD-3-Clause - https://uvicorn.dev/
  • uvloop 0.23.0 - Apache Software License; MIT License
  • watchfiles 1.3.0 - MIT License - https://github.com/samuelcolvin/watchfiles
  • websockets 17.2 - BSD-3-Clause - https://github.com/python-websockets/websockets
  • Werkzeug 3.1.9 - BSD-3-Clause - https://github.com/pallets/werkzeug/
  • xmltodict 1.0.4 - MIT - https://github.com/martinblech/xmltodict
  • zstandard 0.25.0 - BSD-3-Clause - https://github.com/indygreg/python-zstandard
Feedback
Type