Open Source Licenses

TapTidy is proprietary software owned by Think Tank Systems, built with the help of many open-source packages. We are grateful to the maintainers and contributors of these projects. Below is every third-party dependency, grouped by the license it is distributed under.

MIT 312 packages

@babel/helper-string-parser@7.29.7
@babel/helper-validator-identifier@7.29.7
@babel/parser@7.29.7
@babel/types@7.29.7
@fastify/busboy@3.2.0
@hono/node-server@2.0.4
@ioredis/commands@1.5.1
@js-sdsl/ordered-map@4.4.2
@kurkle/color@0.3.4
@nodable/entities@2.1.0
@radix-ui/primitive@1.1.3
@radix-ui/react-compose-refs@1.1.2
@radix-ui/react-primitive@2.1.3
@radix-ui/react-slot@1.2.3
@radix-ui/react-toggle@1.1.10
@radix-ui/react-use-controllable-state@1.2.2
@radix-ui/react-use-effect-event@0.0.2
@radix-ui/react-use-layout-effect@1.1.1
@redocly/ajv@8.18.1
@simplewebauthn/browser@13.3.0
@simplewebauthn/server@13.3.1
@socket.io/component-emitter@3.1.2
@standard-schema/spec@1.1.0
@tootallnate/once@3.0.1
@types/caseless@0.12.5
@types/cors@2.8.19
@types/jsonwebtoken@9.0.10
@types/long@4.0.2
@types/ms@2.1.0
@types/node@25.9.1
@types/pg@8.20.0
@types/prop-types@15.7.15
@types/react@18.3.29
@types/request@2.48.13
@types/tough-cookie@4.0.5
@types/ws@8.18.1
abort-controller@3.0.0
accepts@1.3.8
accepts@2.0.0
adm-zip@0.5.17
agent-base@6.0.2
agent-base@7.1.4
ansi-regex@5.0.1
ansi-styles@4.3.0
archiver-utils@4.0.1
archiver@6.0.2
arrify@2.0.1
asn1.js@5.4.1
async-retry@1.3.3
async@3.2.6
asynckit@0.4.0
aws-ssl-profiles@1.1.2
balanced-match@4.0.4
base64-js@1.5.1
base64id@2.0.0
bcryptjs@2.4.3
better-result@2.9.2
bignumber.js@9.3.1
bintrees@1.0.2
bn.js@5.2.3
body-parser@2.2.2
bowser@2.14.1
brace-expansion@5.0.6
buffer-crc32@0.2.13
bytes@3.1.2
c12@3.1.0
call-bind-apply-helpers@1.0.2
call-bound@1.0.4
chart.js@4.5.1
chokidar@4.0.3
citty@0.1.6
citty@0.2.2
color-convert@2.0.1
color-name@1.1.4
combined-stream@1.0.8
compress-commons@5.0.3
confbox@0.2.4
consola@3.4.2
content-disposition@1.1.0
content-type@1.0.5
content-type@2.0.0
cookie-signature@1.2.2
cookie@0.7.2
cookie@1.1.1
core-util-is@1.0.3
cors@2.8.6
crc32-stream@5.0.1
cross-spawn@7.0.6
csstype@3.2.3
data-uri-to-buffer@4.0.1
date-fns-tz@3.2.0
date-fns@4.3.0
debug@4.4.3
defu@6.1.7
delayed-stream@1.0.0
depd@2.0.0
destr@2.0.5
dunder-proto@1.0.1
duplexify@4.1.3
ee-first@1.1.1
effect@3.20.0
emoji-regex@8.0.0
empathic@2.0.0
encodeurl@2.0.0
end-of-stream@1.4.5
engine.io-parser@5.2.3
engine.io@6.6.8
env-paths@3.0.0
es-define-property@1.0.1
es-errors@1.3.0
es-object-atoms@1.1.2
es-set-tostringtag@2.1.0
escalade@3.2.0
escape-html@1.0.3
etag@1.8.1
event-target-shim@5.0.1
express-rate-limit@8.5.2
express@5.2.1
exsolve@1.0.8
extend@3.0.2
farmhash-modern@1.1.0
fast-check@3.23.2
fast-deep-equal@3.1.3
fast-fifo@1.3.2
fast-xml-builder@1.2.0
fast-xml-parser@5.7.3
fast-xml-parser@5.8.0
fetch-blob@3.2.0
finalhandler@2.1.1
form-data@2.5.5
formdata-polyfill@4.0.10
forwarded@0.2.0
fresh@2.0.0
function-bind@1.1.2
functional-red-black-tree@1.0.1
generate-function@2.3.1
get-intrinsic@1.3.0
get-port-please@3.2.0
get-proto@1.0.1
giget@2.0.0
gopd@1.2.0
grammex@3.1.12
graphmatch@1.1.1
gtoken@7.1.0
has-symbols@1.1.0
has-tostringtag@1.0.2
hasown@2.0.3
helmet@8.2.0
hono@4.12.18
html-entities@2.6.0
http-errors@2.0.1
http-parser-js@0.5.10
http-proxy-agent@5.0.0
http-status-codes@2.3.0
http_ece@1.2.0
https-proxy-agent@5.0.1
https-proxy-agent@7.0.6
iconv-lite@0.7.2
ioredis@5.10.1
ip-address@10.2.0
ipaddr.js@1.9.1
is-fullwidth-code-point@3.0.0
is-promise@4.0.0
is-property@1.0.2
is-stream@2.0.1
isarray@1.0.0
jiti@2.7.0
jose@4.15.9
js-tokens@4.0.0
json-bigint@1.0.0
json-schema-traverse@1.0.0
jsonwebtoken@9.0.3
jwa@2.0.1
jwks-rsa@3.2.2
jws@4.0.1
lazystream@1.0.1
limiter@1.1.5
lodash.camelcase@4.3.0
lodash.clonedeep@4.5.0
lodash.defaults@4.2.0
lodash.includes@4.3.0
lodash.isarguments@3.1.0
lodash.isboolean@3.0.3
lodash.isinteger@4.0.4
lodash.isnumber@3.0.3
lodash.isplainobject@4.0.6
lodash.isstring@4.0.1
lodash.once@4.1.1
lodash@4.18.1
loose-envify@1.4.0
lru-memoizer@2.3.0
lru.min@1.1.4
magicast@0.3.5
math-intrinsics@1.1.0
media-typer@1.1.0
merge-descriptors@2.0.0
mime-db@1.52.0
mime-db@1.54.0
mime-types@2.1.35
mime-types@3.0.2
mime@3.0.0
minimist@1.2.8
ms@2.1.3
mysql2@3.15.3
named-placeholders@1.1.6
negotiator@0.6.3
negotiator@1.0.0
node-domexception@1.0.0
node-fetch-native@1.6.7
node-fetch@2.7.0
node-fetch@3.3.2
normalize-path@3.0.0
nypm@0.6.6
object-assign@4.1.1
object-hash@3.0.0
object-inspect@1.13.4
ohash@2.0.11
on-finished@2.4.1
p-limit@3.1.0
parseurl@1.3.3
path-expression-matcher@1.5.0
path-key@3.1.1
path-to-regexp@8.4.2
pathe@2.0.3
perfect-debounce@1.0.0
pg-cloudflare@1.4.0
pg-connection-string@2.13.0
pg-pool@3.14.0
pg-protocol@1.14.0
pg-types@2.2.0
pg@8.21.0
pgpass@1.0.5
pkg-types@2.3.1
postgres-array@2.0.0
postgres-array@3.0.4
postgres-bytea@1.0.1
postgres-date@1.0.7
postgres-interval@1.2.0
process-nextick-args@2.0.1
proper-lockfile@4.1.2
proxy-addr@2.0.7
pure-rand@6.1.0
range-parser@1.2.1
rate-limit-redis@4.3.1
raw-body@3.0.2
rc9@2.1.2
react-dom@18.3.1
react@18.3.1
readable-stream@2.3.8
readable-stream@3.6.2
readdirp@4.1.2
redis-errors@1.2.0
redis-parser@3.0.0
remeda@2.33.4
require-directory@2.1.1
require-from-string@2.0.2
retry-request@7.0.2
retry@0.12.0
retry@0.13.1
router@2.2.0
safe-buffer@5.1.2
safe-buffer@5.2.1
safer-buffer@2.1.2
scheduler@0.23.2
send@1.2.1
serve-static@2.2.1
shebang-command@2.0.0
shebang-regex@3.0.0
side-channel-list@1.0.1
side-channel-map@1.0.1
side-channel-weakmap@1.0.2
side-channel@1.1.0
socket.io-adapter@2.5.7
socket.io-parser@4.2.6
socket.io@4.8.3
sqlstring@2.3.3
standard-as-callback@2.1.0
statuses@2.0.2
std-env@3.10.0
stream-events@1.0.5
stream-shift@1.0.3
streamx@2.25.0
string-width@4.2.3
string_decoder@1.1.1
string_decoder@1.3.0
strip-ansi@6.0.1
strnum@2.3.0
stubs@3.0.0
tar-stream@3.2.0
tdigest@0.1.2
teex@1.0.1
tinyexec@1.2.2
toidentifier@1.0.1
tr46@0.0.3
type-is@2.1.0
undici-types@7.24.6
unpipe@1.0.0
util-deprecate@1.0.2
uuid@11.1.1
valibot@1.2.0
vary@1.1.2
web-streams-polyfill@3.3.3
whatwg-url@5.0.0
wrap-ansi@7.0.0
ws@8.21.0
xml-naming@0.1.0
xtend@4.0.2
yargs@17.7.2
yocto-queue@0.1.0
zeptomatch@2.1.0
zip-stream@5.0.2
zod@3.25.76

Apache-2.0 113 packages

@aws-crypto/crc32@5.2.0
@aws-crypto/crc32c@5.2.0
@aws-crypto/sha1-browser@5.2.0
@aws-crypto/sha256-browser@5.2.0
@aws-crypto/sha256-js@5.2.0
@aws-crypto/supports-web-crypto@5.2.0
@aws-crypto/util@5.2.0
@aws-sdk/client-s3@3.1053.0
@aws-sdk/core@3.974.13
@aws-sdk/crc64-nvme@3.972.9
@aws-sdk/credential-provider-env@3.972.39
@aws-sdk/credential-provider-http@3.972.41
@aws-sdk/credential-provider-ini@3.972.43
@aws-sdk/credential-provider-login@3.972.43
@aws-sdk/credential-provider-node@3.972.44
@aws-sdk/credential-provider-process@3.972.39
@aws-sdk/credential-provider-sso@3.972.43
@aws-sdk/credential-provider-web-identity@3.972.43
@aws-sdk/middleware-bucket-endpoint@3.972.15
@aws-sdk/middleware-expect-continue@3.972.13
@aws-sdk/middleware-flexible-checksums@3.974.21
@aws-sdk/middleware-location-constraint@3.972.11
@aws-sdk/middleware-sdk-s3@3.972.42
@aws-sdk/middleware-ssec@3.972.11
@aws-sdk/nested-clients@3.997.11
@aws-sdk/s3-request-presigner@3.1053.0
@aws-sdk/signature-v4-multi-region@3.996.28
@aws-sdk/token-providers@3.1052.0
@aws-sdk/types@3.973.9
@aws-sdk/util-locate-window@3.965.5
@aws-sdk/xml-builder@3.972.25
@aws/lambda-invoke-store@0.2.4
@electric-sql/pglite-socket@0.1.1
@electric-sql/pglite-tools@0.3.1
@electric-sql/pglite@0.4.1
@firebase/app-check-interop-types@0.3.4
@firebase/app-types@0.9.5
@firebase/auth-interop-types@0.2.5
@firebase/component@0.7.3
@firebase/database-compat@2.1.4
@firebase/database-types@1.0.20
@firebase/database@1.1.3
@firebase/logger@0.5.1
@firebase/util@1.15.1
@google-cloud/firestore@7.11.6
@google-cloud/paginator@5.0.2
@google-cloud/projectify@4.0.0
@google-cloud/promisify@4.0.0
@google-cloud/storage@7.19.0
@grpc/grpc-js@1.14.4
@grpc/proto-loader@0.7.15
@grpc/proto-loader@0.8.1
@opentelemetry/api@1.9.1
@prisma/adapter-pg@7.6.0
@prisma/client-runtime-utils@7.6.0
@prisma/client@7.6.0
@prisma/config@7.6.0
@prisma/debug@7.2.0
@prisma/debug@7.6.0
@prisma/driver-adapter-utils@7.6.0
@prisma/engines-version@7.6.0-1.75cbdc1eb7150937890ad5465d861175c6624711
@prisma/engines@7.6.0
@prisma/fetch-engine@7.6.0
@prisma/get-platform@7.2.0
@prisma/get-platform@7.6.0
@prisma/query-plan-executor@7.2.0
@prisma/streams-local@0.1.2
@prisma/studio-core@0.27.3
@smithy/core@3.24.4
@smithy/credential-provider-imds@4.3.4
@smithy/fetch-http-handler@5.4.4
@smithy/is-array-buffer@2.2.0
@smithy/node-http-handler@4.7.4
@smithy/signature-v4@5.4.4
@smithy/types@4.14.2
@smithy/util-buffer-from@2.2.0
@smithy/util-utf8@2.3.0
b4a@1.8.1
bare-events@2.8.3
bare-fs@4.7.1
bare-os@3.9.1
bare-path@3.0.0
bare-stream@2.13.1
bare-url@2.4.3
cluster-key-slot@1.1.2
crc-32@1.2.2
denque@2.1.0
ecdsa-sig-formatter@1.0.11
events-universal@1.0.1
faye-websocket@0.11.4
firebase-admin@13.10.0
gaxios@6.7.1
gaxios@7.1.4
gcp-metadata@6.1.1
gcp-metadata@8.1.2
google-auth-library@10.6.2
google-auth-library@9.15.1
google-gax@4.6.1
google-logging-utils@0.0.2
google-logging-utils@1.1.3
googleapis-common@7.2.0
googleapis@144.0.0
long@5.3.2
prisma@7.6.0
prom-client@15.1.3
proto3-json-serializer@2.0.2
readdir-glob@1.1.3
swagger-ui-dist@5.32.8
teeny-request@9.0.0
text-decoder@1.2.7
typescript@5.9.3
websocket-driver@0.7.4
websocket-extensions@0.1.4

ISC 22 packages

@prisma/dev@0.24.3
cliui@8.0.1
foreground-child@3.3.1
get-caller-file@2.0.5
graceful-fs@4.2.11
inherits@2.0.4
isexe@2.0.0
lru-cache@6.0.0
lucide-react@0.562.0
minimalistic-assert@1.0.1
once@1.4.0
pg-int8@1.0.1
semver@7.8.1
setprototypeof@1.2.0
signal-exit@3.0.7
signal-exit@4.1.0
split2@4.2.0
which@2.0.2
wrappy@1.0.2
y18n@5.0.8
yallist@4.0.0
yargs-parser@21.1.1

BlueOak-1.0.0 8 packages

@isaacs/cliui@9.0.0
glob@11.1.0
jackspeak@4.2.3
lru-cache@11.5.0
minimatch@10.2.5
minipass@7.1.3
package-json-from-dist@1.0.1
path-scurry@2.0.2

BSD-3-Clause 7 packages

buffer-equal-constant-time@1.0.1
deepmerge-ts@7.1.5
fast-uri@3.1.2
protobufjs@8.4.2
qs@6.15.2
rrule@2.8.1
source-map-js@1.2.1

BSD-2-Clause 2 packages

dotenv@16.6.1
webidl-conversions@3.0.1

MIT-0 1 package

nodemailer@9.0.1

Unlicense 1 package

postgres@3.4.7

MIT* 1 package

seq-queue@0.0.5

0BSD 1 package

tslib@2.8.1

BSD* 1 package

url-template@2.0.8

MPL-2.0 1 package

web-push@3.6.7

Bundled Fonts

The following typefaces are bundled with or served by TapTidy under their listed licenses. Each remains the property of its original authors.

Satoshi — ITF Free Font License. Primary authenticated UI typeface, bundled for offline use on web and Android from the official Fontshare distribution. Retrieved August 1, 2026. Source · License
Plus Jakarta Sans — SIL Open Font License 1.1. Bundled legacy/public compatibility typeface. Source & license
Instrument Serif — SIL Open Font License 1.1. Serif accent typeface for greetings, bundled with the app. Source & license
OpenDyslexic — SIL Open Font License 1.1. Bundled accessibility typeface for the dyslexia-friendly text option. Source & license

If you believe any license attribution is missing or incorrect, please contact us at support@taptidy.app.