This text is pending legal review. It describes what the product does today and may be reworded after that review.
Third-Party Licences
The open source components Zabuno is built on, with the licence each one is published under, generated from this deployment's own dependency manifests.
1. What this page is
Zabuno is built on open source components published by other people. This page names the ones the service depends on directly and the licence each is published under, so that a procurement or legal review can answer the question without asking for a spreadsheet.
The lists below are not typed by hand. They are read from this deployment's own dependency manifests and lock files when the page is opened, so a component added or removed by a release is reflected here without anyone having to remember to update a document.
The licence names come from those lock files as the package authors declared them. Where a package declares no licence, the entry says so instead of guessing one.
The full text of each licence is published by that package with the package itself; it is not copied here, because a copy would in time stop matching the original.
2. PHP (Composer)
Direct dependencies declared in composer.json / composer.lock, with the licence each declares (13 packages; 100 further packages are pulled in indirectly and are not named here):
brick/money 0.14.1 — MIT
endroid/qr-code 6.0.0 — MIT
iyzico/iyzipay-php v2.0.61 — MIT
khanamiryan/qrcode-detector-decoder 2.0.2 — MIT OR Apache-2.0
laravel/fortify v1.38.0 — MIT
laravel/framework v13.26.1 — MIT
laravel/pennant v1.26.0 — MIT
laravel/sanctum v4.3.3 — MIT
laravel/tinker v3.0.2 — MIT
mpdf/mpdf v8.3.1 — GPL-2.0-only
symfony/http-client v7.4.18 — MIT
symfony/intl v7.4.16 — MIT
symfony/mailgun-mailer v7.4.18 — MIT
3. JavaScript (npm)
Direct dependencies declared in package.json / package-lock.json, with the licence each declares (7 packages; 495 further packages are pulled in indirectly and are not named here):
@phosphor-icons/react 2.1.10 — MIT
@radix-ui/react-separator 1.1.15 — MIT
clsx 2.1.1 — MIT
flowbite-react 0.12.17 — MIT
react 19.2.8 — MIT
react-dom 19.2.8 — MIT
tailwind-merge 3.6.0 — MIT
4. What is not listed here
Indirect dependencies are counted above but not named one by one. Naming several hundred packages on a page nobody could read would hide the ones that matter; the complete resolved list, with versions, is in the lock files in the public source repository of this software.
Build and development tooling that never reaches a visitor's browser or a running server — test runners, linters, the component workshop, the type checker — is not listed. It is not distributed as part of the service.
The runtime the service needs — the PHP interpreter and its extensions, the database engine, the web server and the operating system — is not listed either. Those are not components shipped inside this software; they are the environment it runs in.
5. Zabuno's own code
The source code of Zabuno itself is published in a public repository, under the licence stated there. This page is about the components Zabuno uses, not about Zabuno's own licence terms; what you may do with the service is set out in the Terms of Service.
6. Questions and corrections
If you believe a component is listed with the wrong licence, or that a component is missing, write through the contact form on this site or to not yet provided. Say which package you mean.