Attribution

Open Source and Third-Party Notices

Reviewed: June 20, 2026

Coventra is built with open-source software and one separately licensed commercial component. This page identifies principal runtime components; each component remains governed by its own license. This notice does not place Coventra’s original code under those licenses or represent that Coventra itself is open source.

Frontend runtime

MIT

React, React DOM, React Router, TanStack Query and Table, Mantine, Radix UI, Zustand, Axios, Recharts, React Icons, react-resizable, clsx, cmdk, tailwind-merge, and the Supabase JavaScript client.

MIT license text

Apache-2.0

Mozilla PDF.js, class-variance-authority, web-vitals, and SheetJS Community Edition.

Apache License 2.0

Backend and statistical runtime

Permissive Python and R components

FastAPI, Uvicorn, Supabase Python, HTTPX, pdfplumber, NumPy, SciPy, scikit-learn, Pint, openpyxl, python-docx, Redis client, Plumber, jsonlite, and dplyr are used under their respective MIT, BSD, Apache, or other permissive licenses and bundled notices.

FastAPI project

GNU GPL statistical packages

R, meta, netmeta, and metafor are used as separately installed statistical runtime components under their applicable GNU General Public License terms. The installed meta, netmeta, and metafor packages declare GPL version 2 or later; package-specific LICENSE files remain controlling.

GNU GPL v2

Separately licensed software

The Syncfusion EJ2 React PDF Viewer and related packages are not open-source components in this product. They are used under the applicable Syncfusion Community or commercial license. Syncfusion’s terms, not an open-source license, govern that software.

Syncfusion Community License

Hosted services are not software licenses

Cloudflare, Axiom, transactional email delivery, and any configured external model provider are hosted services governed by their own service terms and privacy policies. Self-hosted Supabase components and Redis server software are governed by the licenses of the deployed versions; they are not represented by the frontend client-license list above.

Corrections and complete notices

Transitive dependencies may add notices beyond this summary. Installed package manifests and license files are controlling. To report a missing or incorrect attribution, email support@coventra.app with the package name and version.