Open-Source Licenses

1. About this page

The Autoentic Service incorporates open-source software made available under permissive licenses. This page lists the direct runtime open-source components used in the Autoentic Android app, the autoentic.com website, and the api.autoentic.com backend, together with their license identifiers. Each component remains governed by its own license, and nothing in our Terms of Service overrides those rights. Complete license texts are bundled inside the Autoentic Android app at Settings → Open-Source Notices and are available from each project's upstream repository.

2. Mobile app (autoentic-app)

Direct runtime dependencies of the Autoentic Android app, sourced from its package manifest. Build-time tooling is covered separately in Section 5.

• react, react-dom, react-native — MIT — UI library and React Native mobile runtime.
• expo — MIT — React Native runtime, CLI, and the Expo Modules API that backs every expo-* module below.
• expo-router — MIT — File-based routing for the app/ directory.
• expo-blur, expo-constants, expo-crypto, expo-dev-client, expo-image-picker, expo-linking, expo-location, expo-speech, expo-splash-screen, expo-status-bar, expo-system-ui, expo-web-browser — MIT — Expo SDK runtime modules used across the inspection flow (camera and VIN OCR, deep links, location capture, splash, system UI).
• react-native-ble-plx — Apache-2.0 — Bluetooth Low Energy GATT communication with DeFelsko PosiTector probes. As an Apache-2.0 component this carries a NOTICE-file requirement under section 4 of the license; the NOTICE text ships inside the app.
• react-native-reanimated, react-native-worklets — MIT — Animation engine and worklet runtime.
• react-native-gesture-handler — MIT — Touch and pan gesture handling.
• react-native-safe-area-context — MIT — Safe-area inset handling for tablet and phone layouts.
• react-native-screens — MIT — Native navigation containers under React Navigation.
• react-native-svg, react-native-svg-transformer — MIT — SVG rendering and build-time SVG-to-component transform.
• react-native-web — MIT — React Native primitives compiled for web targets.
• @react-navigation/native — MIT — Navigation primitives consumed by Expo Router.
• @react-native-async-storage/async-storage — MIT — Offline-first persistence of inspection sessions on device.
• @react-native-community/netinfo — MIT — Network reachability detection during BLE and submission flows.
• @rn-primitives/dialog, @rn-primitives/portal, @rn-primitives/progress, @rn-primitives/separator, @rn-primitives/slot, @rn-primitives/tabs — MIT — Headless UI primitives used across the measurement screens.
• @sentry/react-native — MIT — Crash and error reporting from the device.
• nativewind — MIT — Tailwind utility classes compiled to React Native StyleSheet.
• class-variance-authority — Apache-2.0 — Typed variant API for component composition.
• clsx — MIT — Conditional className composition.
• tailwind-merge — MIT — Tailwind class de-duplication.
• lucide-react-native — ISC — Icon set.
• libphonenumber-js — MIT — Phone-number parsing and formatting for OTP entry.
• zustand — MIT — Client state store.

3. Website (autoentic-www)

Direct runtime dependencies of the autoentic.com Next.js application. The shadcn/ui component layer used by the site is vendored as source under src/components/ui/ rather than installed as an npm package; its source files are made available under the MIT license by the shadcn project.

• next — MIT — App Router web framework.
• react, react-dom — MIT — UI library and DOM renderer.
• @base-ui/react — MIT — Headless accessible component primitives that back the project's vendored shadcn/ui components.
• shadcn/ui (vendored) — MIT — Component source under src/components/ui/ copied from the shadcn registry; not a published npm package.
• better-auth — MIT — Email-OTP authentication for partner and admin login.
• pg — MIT — PostgreSQL driver and connection pool used by Better Auth and admin queries.
• resend — MIT — Transactional email (login OTP, partner approval messages).
• @tanstack/react-query — MIT — Async data fetching and cache.
• react-hook-form, @hookform/resolvers — MIT — Form state and validation adapters.
• zod — MIT — Runtime schema validation.
• @t3-oss/env-nextjs — MIT — Validated environment-variable loader for server and client.
• @sentry/nextjs — MIT — Crash and error reporting from the website.
• plausible-tracker — MIT — Privacy-friendly analytics tracker.
• next-themes — MIT — Dark and light theme toggle.
• lucide-react — ISC — Icon set.
• motion — MIT — Animation library (formerly Framer Motion).
• tw-animate-css — MIT — Animation utility classes for Tailwind.
• class-variance-authority — Apache-2.0 — Typed variant API.
• clsx — MIT — Conditional className composition.
• tailwind-merge — MIT — Tailwind class de-duplication.
• cmdk — MIT — Command palette.
• sonner — MIT — Toast notifications.
• input-otp — MIT — One-time-passcode input component.
• react-day-picker — MIT — Date picker.
• recharts — MIT — Charts on partner and admin dashboards.
• date-fns, @date-fns/tz — MIT — Date utilities and timezone helpers.
• country-flag-icons — MIT — Flag SVGs for country pickers.
• libphonenumber-js — MIT — Phone-number parsing for OTP entry.
• zipcodes — MIT — United States ZIP-code lookup.
• @react-three/fiber, @react-three/drei, three, leva, simplex-noise — MIT — 3D scene rendering and supporting utilities for marketing visuals.
• @mdx-js/loader, @mdx-js/react, @next/mdx — MIT — MDX compilation and rendering for the documentation site.
• shiki — MIT — Syntax highlighting for MDX code blocks.
• rehype-autolink-headings, rehype-pretty-code, rehype-slug — MIT — MDX and rehype processing pipeline.
• stripe, @stripe/stripe-js, @stripe/react-stripe-js — MIT — Stripe Node SDK and React Elements for booking checkout.

4. Backend (autoentic-api)

Direct runtime dependencies of the FastAPI service that ships in the deployed backend image. Test- and lint-only packages (Pytest, Ruff, Freezegun) are excluded and covered in Section 5.

• fastapi — MIT — Async web framework.
• uvicorn — BSD-3-Clause — ASGI server.
• sqlalchemy — MIT — ORM and core query layer.
• alembic — MIT — Database schema migrations.
• asyncpg — Apache-2.0 — Async PostgreSQL driver.
• psycopg2-binary — LGPL-3.0-with-exceptions — Synchronous PostgreSQL driver used by Alembic and migration tooling. Corresponding Source is available unmodified upstream at github.com/psycopg/psycopg2.
• pgvector — PostgreSQL License — Vector-column bindings for SQLAlchemy.
• pydantic-settings — MIT — Environment-driven typed configuration.
• email-validator — CC0-1.0 — Email address syntax validation.
• python-multipart — Apache-2.0 — Multipart form parsing for file uploads.
• python-jose — MIT — JSON Web Token signing and verification.
• passlib (bcrypt) — BSD-2-Clause — Password hashing utilities.
• scipy — BSD-3-Clause — Numerical routines used by the FOCS uncertainty-budget scoring engine.
• httpx — BSD-3-Clause — HTTP client.
• slowapi — MIT — Rate limiting on OTP and write endpoints.
• twilio — MIT — SMS delivery for technician one-time passcodes.
• phonenumbers — Apache-2.0 — Phone-number parsing and formatting.
• sentry-sdk — MIT — Crash and error reporting from the backend.
• apscheduler — MIT — Background job scheduling.
• structlog — MIT or Apache-2.0 (dual-licensed) — Structured logging.
• stripe — MIT — Stripe Python SDK.
• resend — MIT — Transactional email Python SDK.

5. Build and tooling

In addition to the runtime components above, Autoentic uses build-time and developer tooling under their respective open-source licenses, including TypeScript, Tailwind CSS, ESLint, Prettier, Jest, Ruff, and Pytest. These tools are used to develop and ship the Service but are not redistributed as part of the deployed Service.

6. Third-party trademarks

The mention of any project name on this page is for attribution only and does not imply endorsement by, or affiliation with, the project or its maintainers. All trademarks, service marks, and trade names referenced on this page belong to their respective owners. In particular, DeFelsko® and PosiTector® are registered trademarks of DeFelsko Corporation; Autoentic is not affiliated with, sponsored by, or endorsed by DeFelsko Corporation.

7. How to request the full license text

The full text of every license referenced on this page is bundled inside the Autoentic Android app and inside the deployed website Docker image, and is also available from each project's upstream repository. To request a written copy of the license text for any component listed above, email [email protected].

8. Contact

For questions about this page or about open-source attribution, email [email protected].