mirror of
https://github.com/Heretek-AI/Prog-Prober.git
synced 2026-10-11 21:19:57 +00:00
BillyOutlast
a197e50988
- docs/architecture.md: full architecture spec (safety contract, topology, Tool API, data model, phasing). - docs/adr/0001-0011: decision records for the grilling outcomes. - Repo skeleton: Cargo workspace (crates/core), pnpm workspace (apps/desktop, packages/ui), Python workers package, OCI runtime placeholder, graph JSON Schema. - AGENTS.md, CONTEXT.md, THIRD_PARTY.md, README.md, LICENSE (AGPL-3.0). - GitHub issues #1-#14: phase epics plus Phase 1 tickets.
2.1 KiB
2.1 KiB
Third-Party Components
Prog-Prober's own code is licensed AGPL-3.0-or-later (see LICENSE). The
project depends on or bundles the components below. This file records their
licenses and any compatibility notes. Keep it current when dependencies change.
Analysis toolchain (bundled in progprober-runtime)
| Component | License | Notes |
|---|---|---|
| Ghidra | Apache-2.0 | Static engine. Bundles a JDK (GPLv2+CE) — record the exact JDK license in the image. |
| PyGhidra | Apache-2.0 | Python bindings for Ghidra. |
| capa | Apache-2.0 | Capability detection. Rule files are Apache-2.0. |
| FLOSS | Apache-2.0 | Obfuscated string extraction. |
| LIEF | Apache-2.0 | Binary format parsing. |
| Speakeasy | MIT | Primary emulator. |
| Qiling | GPL-2.0-or-later | Optional emulator. AGPL-3.0-compatible; run process-separated. |
| mitmproxy | MIT | Inline TLS/HTTP interception. |
| INetSim | GPL-2.0 | Network service simulation. GPL-compatible with AGPL-3.0. |
| FakeNet-NG | Apache-2.0 | Network simulation listeners. Verify exact license at pin time. |
Storage and runtime
| Component | License | Notes |
|---|---|---|
| LadybugDB (Kuzu successor) | MIT | Embedded graph, vector and full-text indices. |
| SQLite | Public domain | Case metadata. |
| Podman | Apache-2.0 | Container runtime interface (external dependency). |
Desktop and UI
| Component | License | Notes |
|---|---|---|
| Electron | MIT | Desktop shell. |
| React | MIT | Renderer UI. |
@cosmos.gl/graph |
MIT | GPU graph rendering. |
| graphology | MIT | In-memory graph model. |
rmcp (Rust MCP SDK) |
MIT/Apache-2.0 | MCP adapter. |
Explicitly not used
| Component | License | Reason |
|---|---|---|
| Cosmograph branded packages | CC-BY-NC-4.0 | Non-commercial; incompatible with an OSS core. Use @cosmos.gl/graph. |
| KuzuDB (upstream) | MIT | Archived October 2025; superseded by LadybugDB. |
| CAPE sandbox | GPL-3.0 | Considered for dynamic analysis; not v1. |
| DRAKVUF | GPL-2.0 | Future Runner backend; not v1. |
Verify every license against the pinned version when it is added to the OCI image or a manifest. "Verify at pin time" entries are intentionally marked.