Open-source licences

Why we publish licences

theStacc would not exist without open-source software. The dashboard, the marketing site, the article engine, and the integration layer all sit on top of code that other people wrote, licensed openly, and gave away for free.

We publish this page for three reasons. First, every permissive open-source licence we depend on — MIT, Apache 2.0, BSD, CC0 — requires that we keep the original copyright notice and licence text available. This page is how we meet that obligation. Second, transparency builds trust — if you want to know what is running inside theStacc, you should be able to find out in under a minute. Third, we want to thank the maintainers. The list below is a list of people we owe something to.

If you are a maintainer of a project listed below and you want a different attribution, email hello@thestacc.com and we will update it.

How to inspect a build

The build of theStacc that runs in production is a server-side rendered Astro application. Every public route can be inspected directly:

• View source in your browser shows the rendered HTML and the loaded scripts. Every script is served from thestacc.com or from a sub-domain we control.
• Network tab in DevTools lists every asset the page loads, including the bundled JavaScript and CSS. Bundles are minified but not obfuscated.
• npm package list for the marketing site is documented in the package.json at the root of the codebase. We do not publish the dashboard package list publicly but the marketing site list maps closely.

If you need a software bill of materials (SBOM) for a security review, email hello@thestacc.com. We generate an SPDX-format SBOM on every production deploy and can share it under NDA.

Licence list

The list below covers the major open-source libraries that ship with the public-facing marketing site and dashboard. It does not include every transitive dependency — that list runs to several hundred packages and lives in the SBOM. Full licence text is reproduced in the original projects' repositories, which we link to below.

Frameworks

• Astro · MIT licence · github.com/withastro/astro · powers the marketing site at thestacc.com.
• Vite · MIT licence · github.com/vitejs/vite · bundler used by Astro.
• React · MIT licence · github.com/facebook/react · powers the dashboard UI.
• Node.js · MIT licence · github.com/nodejs/node · server runtime for the marketing site and the API.

Styling

• Tailwind CSS · MIT licence · github.com/tailwindlabs/tailwindcss · utility-first CSS framework.
• Geist · SIL Open Font Licence 1.1 · vercel.com/font · the typeface used for headings and body copy.
• Geist Mono · SIL Open Font Licence 1.1 · vercel.com/font · monospace counterpart used for labels and badges.
• Doto · SIL Open Font Licence 1.1 · fonts.google.com/specimen/Doto · the typeface used for the theStacc wordmark.

Icons and assets

• Simple Icons · CC0 1.0 Universal · github.com/simple-icons/simple-icons · brand icons for integration logos.
• Lucide · ISC licence · github.com/lucide-icons/lucide · interface icons in the dashboard.
• Heroicons · MIT licence · github.com/tailwindlabs/heroicons · supplementary icon set.

Tooling and build

• TypeScript · Apache 2.0 licence · github.com/microsoft/TypeScript · typed JavaScript across the codebase.
• ESLint · MIT licence · github.com/eslint/eslint · code linting in CI.
• Prettier · MIT licence · github.com/prettier/prettier · code formatter.
• Vitest · MIT licence · github.com/vitest-dev/vitest · unit-test runner.

Backend libraries

• PostgreSQL · PostgreSQL licence (BSD-style) · postgresql.org/about/licence · the primary database.
• Redis · BSD 3-Clause licence · github.com/redis/redis · session cache and queue.
• Drizzle ORM · Apache 2.0 licence · github.com/drizzle-team/drizzle-orm · type-safe SQL access.

Licence summaries

The licences referenced above are permissive — they let us use the software in a commercial product as long as we keep the original copyright notice and licence text available. Below is the quick summary of each licence we depend on. The full licence text is in each project's repository.

• MIT — permissive, attribution required, no warranty.
• Apache 2.0 — permissive, attribution required, includes an explicit patent grant.
• BSD 3-Clause — permissive, attribution required, prohibits use of the project's name in promotion without permission.
• ISC — functionally equivalent to MIT, shorter text.
• PostgreSQL licence — BSD-style, attribution required.
• SIL Open Font Licence 1.1 — fonts can be used freely, even commercially. They cannot be sold by themselves.
• CC0 1.0 Universal — public domain dedication. No attribution required, no warranty.

Contact for additional disclosure

If you need disclosure beyond what is on this page — a signed SBOM, a security questionnaire response, a specific licence audit — email us:

• Legal · hello@thestacc.com
• Security · hello@thestacc.com
• Postal · theStacc Software Pvt. Ltd., Jaipur, Rajasthan, India

We respond within 24 hours. SBOMs and signed audit packs are shared under NDA, usually within 5 business days.