Chuyển tới nội dung chính

Third-Party Licenses Overview

This document provides a comprehensive overview of all third-party software licenses used in the UIP - Urban Intelligence Platform project.

License Compliance Status​

┌─────────────────────────────────────────────────────────────────┐
│                    LICENSE COMPLIANCE REPORT                     │
├─────────────────────────────────────────────────────────────────┤
│  Last Updated:          December 2025                           │
│  Total Dependencies:    1,464 packages                          │
│  Compliance Status:     ✅ 100% MIT-Compatible                  │
│  SPDX Identifier:       MIT                                     │
│  OSI Approved:          Yes                                     │
└─────────────────────────────────────────────────────────────────┘

Quick Summary​

MetricValue
Total Packages Audited1,464
Python Dependencies168
NPM Backend Dependencies772
NPM Frontend Dependencies524
MIT-Compatible100%
Copyleft Licenses0 (in production)

License Distribution​

pie title License Distribution (1,464 packages)
    "MIT" : 1132
    "ISC" : 111
    "BSD" : 106
    "Apache-2.0" : 68
    "Other Permissive" : 47

License Type Breakdown​

License TypePythonNPM BackendNPM FrontendTotal%
MIT716404211,13277.5%
ISC156541117.6%
BSD (2/3-Clause)4541201067.3%
Apache-2.0401810684.7%
CC0-1.0/Unlicense264120.8%
CC-BY (3.0/4.0)03360.4%
PSF/Python-2.031150.3%
BlueOak-1.0.000330.2%
MPL-2.020020.1%
0BSD01120.1%
Other Permissive445130.9%
Total1687705201,458100%

Migration Note (2025-12): EPL/EDL packages (@turf/jsts, jsts) and Hippocratic-2.1 packages (react-leaflet) have been removed and replaced with MIT-compatible alternatives.

License Compatibility Matrix​

All licenses used in this project are compatible with the MIT License:

LicenseMIT CompatibleCommercial UseModificationDistributionPatent Grant
MIT✅ Yes✅ Yes✅ Yes✅ Yes❌ No
Apache-2.0✅ Yes✅ Yes✅ Yes✅ Yes✅ Yes
BSD-2-Clause✅ Yes✅ Yes✅ Yes✅ Yes❌ No
BSD-3-Clause✅ Yes✅ Yes✅ Yes✅ Yes❌ No
ISC✅ Yes✅ Yes✅ Yes✅ Yes❌ No
MPL-2.0✅ Yes✅ Yes✅ Yes✅ Yes✅ Yes
PSF-2.0✅ Yes✅ Yes✅ Yes✅ Yes❌ No
Unlicense✅ Yes✅ Yes✅ Yes✅ Yes❌ No
CC0-1.0✅ Yes✅ Yes✅ Yes✅ Yes❌ No
0BSD✅ Yes✅ Yes✅ Yes✅ Yes❌ No
BlueOak-1.0.0✅ Yes✅ Yes✅ Yes✅ Yes✅ Yes
CC-BY-3.0/4.0✅ Yes✅ Yes✅ Yes✅ Yes❌ No

Note: All non-MIT licenses (EPL/EDL, Hippocratic-2.1) have been removed in December 2025 migration.

SPDX License Identifiers​

This project uses SPDX License Identifiers for clear license documentation:

SPDX-License-Identifier: MIT

All source files include SPDX headers:

/*
 * SPDX-License-Identifier: MIT
 * Copyright (c) 2025 UIP Team
 */

Documentation Structure​

DocumentDescription
OverviewThis document - license summary
Python DependenciesPython package licenses
NPM DependenciesNode.js package licenses
License TextsFull license texts
Special NotesSpecial license considerations

Compliance Verification​

Automated Tools Used​

ToolPurposeStatus
pip-licensesPython license detection✅ Passed
license-checkerNPM license detection✅ Passed
FOSSALicense compliance✅ Passed
SnykSecurity & license audit✅ Passed

Manual Audit​

  • ✅ All licenses reviewed manually
  • ✅ No copyleft licenses in production code
  • ✅ Attribution requirements documented
  • ✅ Special license terms identified and complied with

External References​