Third-party notices
shithub depends on the open-source software listed below. Each
entry includes the module path, the license SPDX identifier as
detected by go-licenses, and a link upstream. The full license
texts are bundled with each Go module under your $GOPATH/pkg/mod/
checkout when you build from source; this file is the index, not
the corpus.
This file is generated by scripts/gen-third-party-notices.sh
from the active go.mod. Do not edit by hand; re-run the script
when bumping dependencies and commit the result in the same PR.
CI verifies that the committed file is byte-identical to a fresh generation.
Modules
| Module | License | Source |
|---|---|---|
github.com/alecthomas/chroma/v2 |
MIT | link |
github.com/bluekeyes/go-gitdiff |
MIT | link |
github.com/boombuler/barcode |
MIT | link |
github.com/BurntSushi/toml |
MIT | link |
github.com/getsentry/sentry-go |
MIT | link |
github.com/go-chi/chi/v5 |
MIT | link |
github.com/jackc/pgx/v5 |
MIT | link |
github.com/justinas/nosurf |
MIT | link |
github.com/microcosm-cc/bluemonday |
BSD-3-Clause | link |
github.com/minio/minio-go/v7 |
Apache-2.0 | link |
github.com/pquerna/otp |
Apache-2.0 | link |
github.com/pressly/goose/v3 |
MIT | link |
github.com/prometheus/client_golang |
Apache-2.0 | link |
github.com/spf13/cobra |
Apache-2.0 | link |
github.com/yuin/goldmark |
MIT | link |
go.opentelemetry.io/otel |
Apache-2.0 | link |
go.opentelemetry.io/otel/exporters/otlp/otlptrace |
Apache-2.0 | link |
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp |
Apache-2.0 | link |
go.opentelemetry.io/otel/sdk |
Apache-2.0 | link |
go.opentelemetry.io/otel/trace |
Apache-2.0 | link |
golang.org/x/crypto |
BSD-3-Clause | link |
golang.org/x/image |
BSD-3-Clause | link |
golang.org/x/sync |
BSD-3-Clause | link |
Notes
- Modules under
golang.org/x/...are subject to the Go BSD-style license unless noted otherwise. - The Go standard library and toolchain are licensed under the Go BSD-style license and are not enumerated here.
- A small number of dependencies expose multiple licenses in their repository (e.g., a base license plus an alternate for bundled vendor code). go-licenses reports the one applying to the imported package; full license materials are in each module's distribution.
- Indirect (transitive) dependencies are subject to their own
licenses. Run
go mod graphfor the full dependency tree;go-licenses csv ./...enumerates licenses for everything imported by build, not just the directrequireblock.
View source
| 1 | # Third-party notices |
| 2 | |
| 3 | shithub depends on the open-source software listed below. Each |
| 4 | entry includes the module path, the license SPDX identifier as |
| 5 | detected by go-licenses, and a link upstream. The full license |
| 6 | texts are bundled with each Go module under your `$GOPATH/pkg/mod/` |
| 7 | checkout when you build from source; this file is the index, not |
| 8 | the corpus. |
| 9 | |
| 10 | This file is generated by `scripts/gen-third-party-notices.sh` |
| 11 | from the active `go.mod`. Do not edit by hand; re-run the script |
| 12 | when bumping dependencies and commit the result in the same PR. |
| 13 | |
| 14 | CI verifies that the committed file is byte-identical to a fresh |
| 15 | generation. |
| 16 | |
| 17 | ## Modules |
| 18 | |
| 19 | | Module | License | Source | |
| 20 | |---|---|---| |
| 21 | | `github.com/alecthomas/chroma/v2` | MIT | [link](https://github.com/alecthomas/chroma) | |
| 22 | | `github.com/bluekeyes/go-gitdiff` | MIT | [link](https://github.com/bluekeyes/go-gitdiff) | |
| 23 | | `github.com/boombuler/barcode` | MIT | [link](https://github.com/boombuler/barcode) | |
| 24 | | `github.com/BurntSushi/toml` | MIT | [link](https://github.com/BurntSushi/toml) | |
| 25 | | `github.com/getsentry/sentry-go` | MIT | [link](https://github.com/getsentry/sentry-go) | |
| 26 | | `github.com/go-chi/chi/v5` | MIT | [link](https://github.com/go-chi/chi) | |
| 27 | | `github.com/jackc/pgx/v5` | MIT | [link](https://github.com/jackc/pgx) | |
| 28 | | `github.com/justinas/nosurf` | MIT | [link](https://github.com/justinas/nosurf) | |
| 29 | | `github.com/microcosm-cc/bluemonday` | BSD-3-Clause | [link](https://github.com/microcosm-cc/bluemonday) | |
| 30 | | `github.com/minio/minio-go/v7` | Apache-2.0 | [link](https://github.com/minio/minio-go) | |
| 31 | | `github.com/pquerna/otp` | Apache-2.0 | [link](https://github.com/pquerna/otp) | |
| 32 | | `github.com/pressly/goose/v3` | MIT | [link](https://github.com/pressly/goose) | |
| 33 | | `github.com/prometheus/client_golang` | Apache-2.0 | [link](https://github.com/prometheus/client_golang) | |
| 34 | | `github.com/spf13/cobra` | Apache-2.0 | [link](https://github.com/spf13/cobra) | |
| 35 | | `github.com/yuin/goldmark` | MIT | [link](https://github.com/yuin/goldmark) | |
| 36 | | `go.opentelemetry.io/otel` | Apache-2.0 | [link](https://github.com/open-telemetry/opentelemetry-go) | |
| 37 | | `go.opentelemetry.io/otel/exporters/otlp/otlptrace` | Apache-2.0 | [link](https://github.com/open-telemetry/opentelemetry-go) | |
| 38 | | `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` | Apache-2.0 | [link](https://github.com/open-telemetry/opentelemetry-go) | |
| 39 | | `go.opentelemetry.io/otel/sdk` | Apache-2.0 | [link](https://github.com/open-telemetry/opentelemetry-go) | |
| 40 | | `go.opentelemetry.io/otel/trace` | Apache-2.0 | [link](https://github.com/open-telemetry/opentelemetry-go) | |
| 41 | | `golang.org/x/crypto` | BSD-3-Clause | [link](https://cs.opensource.google/go/x/crypto) | |
| 42 | | `golang.org/x/image` | BSD-3-Clause | [link](https://cs.opensource.google/go/x/image) | |
| 43 | | `golang.org/x/sync` | BSD-3-Clause | [link](https://cs.opensource.google/go/x/sync) | |
| 44 | |
| 45 | ## Notes |
| 46 | |
| 47 | - Modules under `golang.org/x/...` are subject to the |
| 48 | [Go BSD-style license](https://go.dev/LICENSE) unless noted |
| 49 | otherwise. |
| 50 | - The Go standard library and toolchain are licensed under the |
| 51 | [Go BSD-style license](https://go.dev/LICENSE) and are not |
| 52 | enumerated here. |
| 53 | - A small number of dependencies expose multiple licenses in |
| 54 | their repository (e.g., a base license plus an alternate for |
| 55 | bundled vendor code). go-licenses reports the one applying to |
| 56 | the imported package; full license materials are in each |
| 57 | module's distribution. |
| 58 | - Indirect (transitive) dependencies are subject to their own |
| 59 | licenses. Run `go mod graph` for the full dependency tree; |
| 60 | `go-licenses csv ./...` enumerates licenses for everything |
| 61 | imported by build, not just the direct `require` block. |