Third-Party Notices (namoo.bookself)
This document provides license notices for third-party open source components referenced by namoo.bookself and related Namoo libraries.
For terms governing the software itself, see LICENSE.
Review date: 2026-05-28
NuGet aggregation: dotnet list Namoo.Bookself.csproj package --include-transitive
npm aggregation: Web/package.json (runtime and build direct dependencies)
1. Review Summary (Commercial Use · Closed Source)
| Category | Result | Notes |
|---|---|---|
| MIT / Apache-2.0 / PostgreSQL family | Allowed | Maintain copyright and license notices; Apache-2.0 may require a NOTICE file |
| MySqlConnector (MariaDB/MySQL) | Allowed | MIT — used instead of GPL MySql.Data |
| Npgsql (PostgreSQL) | Allowed | PostgreSQL License (BSD-like; commercial and closed-source use allowed) |
SQLite (Microsoft.Data.Sqlite, SQLitePCLRaw, SourceGear.sqlite3) | Allowed | SQLite engine is public domain; .NET wrappers are Apache-2.0/MIT |
| SixLabors.ImageSharp 3.x | Conditional | Six Labors Split License — see §3 below |
| Obfuscar (build tool) | Allowed | MIT; used only on the build server during Release publish and not included in distribution |
| npm frontend (React, Vite, etc.) | Allowed | MIT/Apache-2.0/BSD family — bundled in build output (Web/dist) |
Removed · not used (GPL/commercial caution): Oracle client, MySql.Data (GPL) — not referenced in this project.
2. Direct NuGet Package References
Namoo.Bookself.csproj
| Package | Version | License | Commercial · Closed Source |
|---|---|---|---|
| log4net | 3.3.1 | Apache-2.0 | Allowed (notice required) |
| Microsoft.Extensions.Hosting | 10.0.8 | MIT | Allowed |
| Microsoft.Extensions.Hosting.WindowsServices | 10.0.8 | MIT | Allowed |
| Newtonsoft.Json | 13.0.4 | MIT | Allowed |
| SharpCompress | 0.48.0 | MIT | Allowed |
| SixLabors.ImageSharp | 3.1.12 | Six Labors Split License | Conditional (§3) |
| SQLitePCLRaw.bundle_e_sqlite3 | 3.0.3 | Apache-2.0 | Allowed |
| Watson | 7.0.14 | MIT | Allowed |
namoo.frame
| Package | Version | License | Commercial · Closed Source |
|---|---|---|---|
| Handlebars.Net | 2.1.6 | MIT | Allowed |
| Isopoh.Cryptography.Argon2 | 2.0.0 | MIT | Allowed |
| log4net | 3.3.1 | Apache-2.0 | Allowed |
| Newtonsoft.Json | 13.0.4 | MIT | Allowed |
| System.Drawing.Common | 10.0.8 | MIT | Allowed |
| System.Management | 9.0.0 | MIT | Allowed |
namoo.database
| Package | Version | License | Commercial · Closed Source |
|---|---|---|---|
| Microsoft.Data.SqlClient | 7.0.1 | MIT | Allowed |
| Microsoft.Data.Sqlite | 10.0.8 | MIT | Allowed |
| MySqlConnector | 2.4.0 | MIT | Allowed |
| Newtonsoft.Json | 13.0.4 | MIT | Allowed |
| Npgsql | 10.0.2 | PostgreSQL | Allowed |
namoo.server
| Package | Version | License | Commercial · Closed Source |
|---|---|---|---|
| Cronos | 0.13.0 | MIT | Allowed |
| IpMatcher | 1.0.5 | MIT | Allowed |
| Microsoft.Extensions.Configuration | 10.0.8 | MIT | Allowed |
| Watson | 7.0.14 | MIT | Allowed |
namoo.worker
| Package | Version | License | Commercial · Closed Source |
|---|---|---|---|
| Newtonsoft.Json | 13.0.4 | MIT | Allowed |
3. Caution: Six Labors ImageSharp 3.x
Package: SixLabors.ImageSharp 3.1.12 (Namoo.Bookself direct reference)
License: Six Labors Split License
Free use under Apache-2.0 conditions is allowed when (summary):
- Used under an open source or Source Available license
- Used only as a transitive dependency
- Direct reference in closed-source, for-profit software with annual revenue under USD 1M
- Non-profit or registered charitable organizations
A commercial license may be required when:
- Direct PackageReference in closed-source, for-profit software with for-profit annual revenue of USD 1M or more → purchase Six Labors Commercial License
This project directly references ImageSharp, so the distributor must verify based on revenue scale and usage.
4. Major Transitive NuGet Packages
| Package | Version | License | Notes |
|---|---|---|---|
| Microsoft.Extensions.* (multiple) | 10.0.8 / 9.0.13 | MIT | Hosting, Logging, Configuration, etc. |
| Microsoft.IdentityModel.* | 8.16.0 | MIT | SqlClient authentication |
| Microsoft.Data.SqlClient.SNI.runtime | 6.0.2 | MIT | SQL Server native driver |
| SQLitePCLRaw.* | 3.0.3 | Apache-2.0 | SQLite P/Invoke |
| SourceGear.sqlite3 | 3.50.4.5 | MIT | SQLite native binary bundle |
| Isopoh.Cryptography.Blake2b | 2.0.0 | MIT | Argon2 dependency |
| Isopoh.Cryptography.SecureArray | 2.0.0 | MIT | Argon2 dependency |
| RegexMatcher | 1.0.9 | MIT | Watson dependency |
| UrlMatcher | 3.0.2 | MIT | Watson dependency |
| Timestamps | 1.0.12 | MIT | Watson dependency |
| Microsoft.Bcl.Cryptography | 9.0.13 | MIT | SqlClient dependency |
| System.Drawing.Common | 10.0.8 | MIT | Frame |
| System.Management | 9.0.0 | MIT | Frame |
| System.CodeDom | 9.0.0 | MIT | WMI, etc. |
Most Microsoft.* and System.* runtime packages are MIT and may be distributed commercially and in closed source with the .NET runtime.
5. Build-Only Tools (Not Included in Runtime Distribution)
| Tool | Version | License | Purpose |
|---|---|---|---|
| Obfuscar.GlobalTool | 2.2.40 | MIT | IL obfuscation during Release publish (Jenkins/Docker build) |
| Vite / @vitejs/* | 8.x | MIT | Web frontend build (devDependencies) |
6. Web Frontend npm (Direct Dependencies)
Runtime dependencies:
| Package | Version | License |
|---|---|---|
| react | ^18.3.1 | MIT |
| react-dom | ^18.3.1 | MIT |
| react-router-dom | ^6.30.3 | MIT |
| react-easy-crop | ^5.5.7 | MIT |
| codemirror | ^6.0.2 | MIT |
| @codemirror/lang-sql | ^6.10.0 | MIT |
| @codemirror/lang-xml | ^6.1.0 | MIT |
| @codemirror/state | ^6.6.0 | MIT |
| @codemirror/view | ^6.41.0 | MIT |
| @lezer/highlight | ^1.2.3 | MIT |
| @uiw/react-codemirror | ^4.25.9 | MIT |
| @uiw/codemirror-extensions-basic-setup | ^4.25.9 | MIT |
| @uiw/codemirror-themes | ^4.25.9 | MIT |
| jszip | ^3.10.1 | MIT / GPL-3.0 dual (this project uses under MIT terms) |
Build devDependencies:
| Package | Version | License |
|---|---|---|
| vite | ^8.0.8 | MIT |
| @vitejs/plugin-react | ^6.0.1 | MIT |
| @vitejs/plugin-basic-ssl | ^2.3.0 | MIT |
Most transitive npm packages for CodeMirror, Lezer, Rolldown, etc. are MIT, Apache-2.0, or BSD.
Regenerate and verify the full dependency tree withWeb/package-lock.jsonandnpm ls --all.
7. Full License Text Links
- MIT: https://opensource.org/licenses/MIT
- Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0
- PostgreSQL License: https://opensource.org/licenses/PostgreSQL
- Six Labors Split License: https://github.com/SixLabors/ImageSharp/blob/main/LICENSE
- MySqlConnector: https://github.com/mysql-net/MySqlConnector (MIT)
- Npgsql: https://github.com/npgsql/npgsql (PostgreSQL License)
8. Notice Obligations (Apache-2.0 / MIT)
When distributing Apache-2.0 and MIT licensed packages, include copyright notices and, for Apache-2.0, a copy of NOTICE as required by each license.
Including this file (THIRD-PARTY-NOTICES) in the distribution package is recommended.