Does FusionAuth use open source?
-
More particularly, does it use open source and what kind of licenses are components licensed under. I'm particularly worried about the GPL.
-
FusionAuth does use open source components, including mybatis and prime mvc.
The licenses for all components are available as part of the zipfile. To see them, download the zip file.
When you unzip it, there’s a directory called
3rd-party-licenses
. This will be present in every zipfile.Here's the output from the 1.45.1 zip file:
/org/postgresql/postgresql/42.5.1/license-BSD-2-Clause.txt ./org/checkerframework/checker-qual/3.5.0/license-MIT.txt ./org/jboss/spec/javax/interceptor/jboss-interceptors-api_1.1_spec/1.0.0+Beta1/license-LGPL-2.1-only.txt ./org/mybatis/mybatis/3.5.7/license-Apache-2.0.txt ./org/mybatis/mybatis-guice/3.16.0/license-Apache-2.0.txt ./org/slf4j/jcl-over-slf4j/2.0.0-alpha5/license-MIT.txt ./org/slf4j/slf4j-api/2.0.3/license-MIT.txt ./org/testng/testng/7.7.1/license-Apache-2.0.txt ./org/ow2/asm/asm/9.2.0/license-BSD_3_Clause.txt ./org/ow2/asm/asm-util/7.3.1/license-BSD_3_Clause.txt ./org/ow2/asm/asm-tree/7.3.1/license-BSD_3_Clause.txt ./org/ow2/asm/asm-analysis/7.3.1/license-BSD_3_Clause.txt ./org/ow2/asm/asm-commons/7.3.1/license-BSD_3_Clause.txt ./org/freemarker/freemarker/2.3.30/license-Apache-2.0.txt ./org/osgi/org.osgi.core/4.3.0/license-Apache-2.0.txt ./org/lz4/lz4-java/1.7.1/license-Apache-2.0.txt ./org/graalvm/js/js/22.3.1/license-MIT.txt ./org/graalvm/js/js/22.3.1/license-UPL-1.0.txt ./org/graalvm/regex/regex/22.3.1/license-UPL-1.0.txt ./org/graalvm/truffle/truffle-api/22.3.1/license-UPL-1.0.txt ./org/graalvm/sdk/graal-sdk/22.3.1/license-UPL-1.0.txt ./org/glassfish/jaxb/txw2/3.0.2/license-Other.txt ./org/glassfish/jaxb/jaxb-core/3.0.2/license-Other.txt ./org/glassfish/jaxb/jaxb-runtime/3.0.2/license-Other.txt ./org/savantbuild/savant-version/2.0.0-RC.4/license-Apache-2.0.txt ./org/openjdk/nashorn/nashorn-core/15.3.0/license-GPL-2.0-only.txt ./org/xerial/snappy/snappy-java/1.1.8+1/license-Apache-2.0.txt ./org/jsoup/jsoup/1.15.3/license-Other.txt ./org/inversoft/prime/prime.js/1.6.4/license-Apache-2.0.txt ./org/primeframework/prime-email/0.20.0/license-Apache-2.0.txt ./org/primeframework/prime-mvc/4.7.1/license-Apache-2.0.txt ./org/aopalliance/aopalliance/1.0.0/license-NIST-PD.txt ./org/elasticsearch/client/elasticsearch-rest-client/7.17.7/license-Apache-2.0.txt ./org/elasticsearch/client/elasticsearch-rest-client-sniffer/7.17.7/license-Apache-2.0.txt ./org/apache/httpcomponents/httpcore/4.4.15/license-Apache-2.0.txt ./org/apache/httpcomponents/httpclient/4.5.13/license-Apache-2.0.txt ./org/apache/httpcomponents/httpcore-nio/4.4.15/license-Apache-2.0.txt ./org/apache/httpcomponents/httpasyncclient/4.1.5/license-Apache-2.0.txt ./org/apache/commons/commons-codec/1.15.0/license-Apache-2.0.txt ./org/apache/commons/commons-logging/1.2.0/license-Apache-2.0.txt ./org/apache/commons/commons-csv/1.8.0/license-Apache-2.0.txt ./org/apache/directory/apacheds-embedded/1.0.0/license-Apache-2.0.txt ./org/apache/kafka/kafka-clients/2.8.2/license-Apache-2.0.txt ./org/webjars/jquery/3.6.1/license-Other.txt ./ch/qos/logback/logback-classic/1.4.4/license-LGPL-2.1.txt ./ch/qos/logback/logback-classic/1.4.4/license-EPL-1.0.txt ./ch/qos/logback/logback-core/1.4.4/license-LGPL-2.1.txt ./ch/qos/logback/logback-core/1.4.4/license-EPL-1.0.txt ./io/ipinfo/db/0.0.1/license-Commercial.txt ./io/prometheus/simpleclient/0.10.0/license-Apache-2.0.txt ./io/prometheus/simpleclient_dropwizard/0.10.0/license-Apache-2.0.txt ./io/prometheus/simpleclient_common/0.10.0/license-Apache-2.0.txt ./io/dropwizard/metrics/metrics-healthchecks/3.2.6/license-Apache-2.0.txt ./io/dropwizard/metrics/metrics-jvm/3.1.2/license-Apache-2.0.txt ./io/dropwizard/metrics/metrics-core/3.2.6/license-Apache-2.0.txt ./io/fusionauth/fusionauth-style/0.3.55/license-Apache-2.0.txt ./io/fusionauth/fusionauth-jwt/5.1.2/license-Apache-2.0.txt ./io/fusionauth/java-http/0.1.13/license-Apache-2.0.txt ./io/fusionauth/fusionauth-scim/2.2.0/license-Apache-2.0.txt ./io/fusionauth/fusionauth-2fa/2.1.0/license-Apache-2.0.txt ./io/fusionauth/fusionauth-plugin-api/1.45.1/license-Apache-2.0.txt ./io/fusionauth/fusionauth-samlv2/0.8.6/license-Apache-2.0.txt ./jakarta/transaction/jakarta.transaction-api/1.3.2/license-Apache-2.0.txt ./jakarta/inject/jakarta.inject-api/1.0.5/license-Apache-2.0.txt ./jakarta/mail/jakarta.mail-api/2.0.1/license-Other.txt ./jakarta/annotation/jakarta.annotation-api/1.3.5/license-Apache-2.0.txt ./jakarta/xml/bind/jakarta.xml.bind-api/3.0.1/license-Other.txt ./jakarta/ejb/jakarta.ejb-api/3.2.6/license-Apache-2.0.txt ./javax/enterprise/cdi-api/1.0.0-SP4/license-Apache-2.0.txt ./javax/inject/javax.inject/1.0.0/license-Apache-2.0.txt ./javax/annotation/jsr250-api/1.0.0/license-Apache-2.0.txt ./com/sun/mail/jakarta.mail/2.0.1/license-Other.txt ./com/sun/activation/jakarta.activation/2.0.1/license-Other.txt ./com/sun/istack/istack-commons-runtime/4.0.1/license-Other.txt ./com/google/guava/guava/30.1.0-jre/license-Apache-2.0.txt ./com/google/guava/failureaccess/1.0.1/license-Apache-2.0.txt ./com/google/guava/listenablefuture/9999.0.0-empty-to-avoid-conflict-with-guava/license-Apache-2.0.txt ./com/google/inject/guice/5.1.0/license-Apache-2.0.txt ./com/google/code/findbugs/jsr305/3.0.2/license-Apache-2.0.txt ./com/google/j2objc/j2objc-annotations/1.3.0/license-Apache-2.0.txt ./com/google/protobuf/protobuf-java/3.11.4/license-BSD_3_Clause.txt ./com/maxmind/db/maxmind-db/2.0.0/license-Apache-2.0.txt ./com/ibm/icu/icu4j/71.1.0/license-ICU.txt ./com/github/spotbugs/spotbugs-annotations/4.4.2/license-LGPL-2.1-only.txt ./com/github/luben/zstd-jni/1.4.9-1/license-BSD-2-Clause.txt ./com/github/java-json-tools/msg-simple/1.2.0/license-Apache-2.0.txt ./com/github/java-json-tools/jackson-coreutils/2.0.0/license-Apache-2.0.txt ./com/github/java-json-tools/btf/1.3.0/license-Apache-2.0.txt ./com/github/java-json-tools/json-patch/1.13.0/license-Apache-2.0.txt ./com/beust/jcommander/1.82.0/license-Apache-2.0.txt ./com/inversoft/jackson5/3.0.1/license-Apache-2.0.txt ./com/inversoft/inversoft-domain/0.4.0/license-Commercial.txt ./com/inversoft/inversoft-api-authentication/0.25.0/license-Commercial.txt ./com/inversoft/inversoft-executor/0.2.1/license-Commercial.txt ./com/inversoft/inversoft-support/0.13.1/license-Commercial.txt ./com/inversoft/inversoft-maintenance-mode/0.20.3/license-Commercial.txt ./com/inversoft/java-error/2.2.3/license-Apache-2.0.txt ./com/inversoft/inversoft-freemarker/0.2.1/license-Commercial.txt ./com/inversoft/inversoft-scripts/0.1.10/license-Commercial.txt ./com/inversoft/inversoft-scheduler/0.2.4/license-Commercial.txt ./com/inversoft/inversoft-cache/0.5.2/license-Commercial.txt ./com/inversoft/inversoft-tools/0.30.5/license-Commercial.txt ./com/inversoft/inversoft-search-engine/5.1.1/license-Commercial.txt ./com/inversoft/inversoft-validator/0.4.11/license-Commercial.txt ./com/inversoft/inversoft-metrics/0.2.3/license-Commercial.txt ./com/inversoft/restify/4.2.0/license-Apache-2.0.txt ./com/inversoft/inversoft-migrator/0.2.1/license-Commercial.txt ./com/inversoft/inversoft-config/0.9.6/license-Commercial.txt ./com/inversoft/inversoft-database/0.9.1/license-Commercial.txt ./com/inversoft/inversoft-license/4.2.0/license-Commercial.txt ./com/zaxxer/HikariCP/5.0.1/license-Apache-2.0.txt ./com/googlecode/libphonenumber/libphonenumber/8.5.1/license-Apache-2.0.txt ./com/fasterxml/jackson/core/jackson-databind/2.14.0/license-Apache-2.0.txt ./com/fasterxml/jackson/core/jackson-core/2.14.0/license-Apache-2.0.txt ./com/fasterxml/jackson/core/jackson-annotations/2.14.0/license-Apache-2.0.txt ./com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.14.0/license-Apache-2.0.txt
As always, please review the FusionAuth license and the license FAQ for more details about commercial use of FusionAuth.