# Third-Party Licenses - Leadlantern

Leadlantern is copyright (c) 2026 MIKODES and sold under the Envato Market licence you bought (Regular or Extended). It uses the open-source components below; each remains under its own licence. No GPL, AGPL or LGPL component is used, bundled or shipped.

## Production npm dependencies (installed by `pnpm install`, 4 packages)

| Package | Version | License |
|---|---|---|
| @hono/node-server | 2.1.5 | MIT |
| better-sqlite3 | 13.0.3 | MIT |
| hono | 4.13.14 | MIT |
| node-addon-api | 8.9.2 | MIT |

Checked with `pnpm licenses list --prod`. Each package ships its own licence file in `node_modules` after install.

Optional: `pg` (MIT) is an optional peer dependency of the Admin Kit, loaded only if you choose PostgreSQL storage and install it yourself. It is not installed by default.

## Bundled in the operator console build (`packages/admin-kit/ui/`)

These are compiled into `packages/admin-kit/ui/assets/index-*.js` and `index-*.css`, from `packages/admin-kit/ui-src/package-lock.json`.

| Component | Version | License |
|---|---|---|
| react | 19.3.1 | MIT |
| react-dom | 19.3.1 | MIT |
| scheduler | 0.28.0 | MIT |
| cmdk | 1.1.1 | MIT |
| @radix-ui/react-dialog and its helpers (primitive, compose-refs, context, dismissable-layer, focus-guards, focus-scope, id, portal, presence, primitive, slot, use-callback-ref, use-controllable-state, use-effect-event, use-layout-effect) | 0.0.5 - 2.2.0 | MIT |
| aria-hidden, react-remove-scroll, react-remove-scroll-bar, react-style-singleton, use-callback-ref, use-sidecar, get-nonce, detect-node-es | various | MIT |
| tslib | 2.9.1 | 0BSD |
| lucide-react | 1.70.0 | ISC |
| Geist / Geist Mono variable fonts (@fontsource-variable/geist, geist-mono) | 5.3.0 | SIL Open Font License 1.1 |

The console source is in `packages/admin-kit/ui-src/`. The Geist font licence texts ship next to the fonts: `packages/admin-kit/ui/assets/Geist-OFL.txt` and `GeistMono-OFL.txt`. The same fonts are served to the Leadlantern product pages from that folder.

## Development and build tools (not shipped, not bundled)

Installed only for `pnpm dev`, `pnpm build`, `pnpm test` or for rebuilding the console. None of them is part of the running product.

| Scope | Packages | Licenses |
|---|---|---|
| Product (pnpm, 44 packages incl. transitive) | typescript, tsx, vitest, vite, esbuild, rolldown, postcss, @types/* and their dependencies | MIT 36, Apache-2.0 4, ISC 1, BSD-3-Clause 1, MPL-2.0 2 |
| Console build (`ui-src`, npm) | vite, @vitejs/plugin-react, typescript, prettier, @types/* and their dependencies | MIT, ISC, Apache-2.0, BSD-3-Clause, CC-BY-4.0 (caniuse-lite data) |

MPL-2.0: `lightningcss` 1.33.0 (via vite, dev only), used unmodified as a build tool. CC-BY-4.0: `caniuse-lite` (browser support data used by the console build tooling), not included in the output.

## Services you connect yourself

OpenStreetMap place data (ODbL, attribution shown where results are used), Google Places API, Google PageSpeed Insights API, Resend and any OpenAI-compatible or Anthropic API are optional services under their own terms. No key ships with this code.