# Third-party software notices

**Product:** Nepgram (web + backend)  
**Date:** 2026-07-08  
**Purpose:** Diligence summary of major open-source dependencies. Not a substitute for each package’s full licence text (see the linked upstream repos).

Nepgram also credits maps, data, fonts, and media on the public [Attribution](/legal/attribution) page.

---

## Web (`web/package.json`)

| Package | Licence (typical) | Upstream |
|---|---|---|
| Next.js | MIT | https://github.com/vercel/next.js |
| React / React DOM | MIT | https://github.com/facebook/react |
| maplibre-gl | BSD-3-Clause | https://github.com/maplibre/maplibre-gl-js |
| pmtiles | BSD-3-Clause | https://github.com/protomaps/PMTiles |
| lucide-react | ISC | https://github.com/lucide-icons/lucide |
| @tanstack/react-query | MIT | https://github.com/TanStack/query |
| @sentry/nextjs | MIT | https://github.com/getsentry/sentry-javascript |
| @mdx-js/* / @next/mdx | MIT | https://github.com/mdx-js/mdx |
| html-to-image | MIT | https://github.com/bubkoo/html-to-image |
| html5-qrcode | Apache-2.0 | https://github.com/mebjas/html5-qrcode |
| react-qr-code | MIT | https://github.com/zpao/qrcode.react |

Dev tooling (TypeScript, ESLint, Vitest, etc.) is MIT/Apache-2.0 unless noted in that package’s `LICENSE`.

---

## Backend (selected runtime deps)

| Package | Licence (typical) | Notes |
|---|---|---|
| Django | BSD-3-Clause | https://github.com/django/django |
| Django REST framework | BSD-3-Clause | https://github.com/encode/django-rest-framework |
| Celery | BSD-3-Clause | https://github.com/celery/celery |
| channels / channels-redis | BSD-3-Clause | Django Channels |
| redis-py / django-redis | MIT / BSD | Caching |
| boto3 | Apache-2.0 | R2 / S3 uploads |
| Pillow | HPND | Image processing |
| gunicorn / uvicorn | MIT | ASGI/WSGI servers (deploy) |

Full pinned versions live in `backend/requirements.txt` / lockfiles. Regenerate this notice when adding a dependency with a copyleft or unusual licence (GPL, AGPL, SSPL, etc.).

---

## Fonts & map assets (not npm)

Documented on `/legal/attribution` and in `docs/legal/THIRD_PARTY_CONTENT_PLAYBOOK.md`:

- Google Fonts (Inter, Fraunces, Noto Sans Devanagari) — SIL OFL  
- OpenStreetMap data — ODbL  
- OpenMapTiles schema — CC-BY  
- MapLibre, Protomaps glyphs, Mapzen/AWS terrain, Esri satellite — see attribution page  

---

*This file is a convenience summary for investors and app-store review. Licence obligations are satisfied by the upstream licence texts and the public attribution page.*