# Third-Party Licenses - KESTREL

This product uses the following open-source packages. Each remains under its own license.

| Ecosystem | Package | Version | License |
|---|---|---|---|
| pub | _flutterfire_internals | 1.3.79 | BSD |
| pub | args | 2.7.0 | BSD |
| pub | async | 2.13.1 | BSD |
| pub | boolean_selector | 2.1.2 | BSD |
| pub | characters | 1.4.1 | BSD |
| pub | clock | 1.1.2 | Apache-2.0 |
| pub | code_assets | 1.2.1 | BSD |
| pub | collection | 1.19.1 | BSD |
| pub | cross_file | 0.3.5+5 | BSD |
| pub | crypto | 3.0.8 | BSD |
| pub | cupertino_icons | 1.0.9 | MIT |
| pub | dio | 5.11.1 | MIT |
| pub | dio_web_adapter | 2.2.2 | MIT |
| pub | equatable | 3.0.0 | MIT |
| pub | fake_async | 1.3.3 | Apache-2.0 |
| pub | ffi | 2.2.0 | BSD |
| pub | ffi_leak_tracker | 0.1.2 | BSD |
| pub | file | 7.0.1 | BSD |
| pub | firebase_core | 5.1.0 | BSD |
| pub | firebase_core_platform_interface | 8.1.1 | BSD |
| pub | firebase_core_web | 4.1.0 | BSD |
| pub | firebase_messaging | 17.0.1 | BSD |
| pub | firebase_messaging_platform_interface | 4.11.1 | BSD |
| pub | firebase_messaging_web | 4.3.1 | BSD |
| pub | fixnum | 1.1.1 | BSD |
| pub | fl_chart | 1.3.0 | MIT |
| pub | flutter_lints | 6.0.0 | BSD |
| pub | flutter_riverpod | 2.6.1 | MIT |
| pub | flutter_secure_storage | 11.2.0 | BSD |
| pub | flutter_secure_storage_darwin | 0.4.3 | BSD |
| pub | flutter_secure_storage_linux | 3.0.3 | BSD |
| pub | flutter_secure_storage_platform_interface | 2.1.1 | BSD |
| pub | flutter_secure_storage_web | 2.1.1 | BSD |
| pub | flutter_secure_storage_windows | 4.2.2 | BSD |
| pub | go_router | 17.5.0 | BSD |
| pub | google_fonts | 8.2.1 | BSD |
| pub | hooks | 2.0.2 | BSD |
| pub | http | 1.6.0 | BSD |
| pub | http_parser | 4.1.2 | BSD |
| pub | intl | 0.20.2 | BSD |
| pub | jni | 1.1.2 | BSD |
| pub | jni_flutter | 1.0.4+1 | BSD |
| pub | jni_util | 1.0.0 | BSD |
| pub | leak_tracker | 11.0.2 | BSD |
| pub | leak_tracker_flutter_testing | 3.0.10 | BSD |
| pub | leak_tracker_testing | 3.0.2 | BSD |
| pub | lints | 6.1.0 | BSD |
| pub | logging | 1.3.0 | BSD |
| pub | matcher | 0.12.19 | BSD |
| pub | material_color_utilities | 0.13.0 | Apache-2.0 |
| pub | meta | 1.17.0 | BSD |
| pub | mime | 2.1.0 | BSD |
| pub | objective_c | 9.5.0 | BSD |
| pub | package_config | 3.0.0 | BSD |
| pub | path | 1.9.1 | BSD |
| pub | path_provider | 2.1.6 | BSD |
| pub | path_provider_android | 2.3.1 | BSD |
| pub | path_provider_foundation | 2.6.0 | BSD |
| pub | path_provider_linux | 2.2.2 | BSD |
| pub | path_provider_platform_interface | 2.1.3 | BSD |
| pub | path_provider_windows | 2.3.0 | BSD |
| pub | platform | 3.1.6 | BSD |
| pub | plugin_platform_interface | 2.1.8 | BSD |
| pub | pub_semver | 2.2.1 | BSD |
| pub | record_use | 0.6.0 | BSD |
| pub | riverpod | 2.6.1 | MIT |
| pub | share_plus | 13.3.1 | BSD |
| pub | share_plus_platform_interface | 7.2.0 | BSD |
| pub | shared_preferences | 2.5.6 | BSD |
| pub | shared_preferences_android | 2.4.23 | BSD |
| pub | shared_preferences_foundation | 2.5.7 | BSD |
| pub | shared_preferences_linux | 2.4.1 | BSD |
| pub | shared_preferences_platform_interface | 2.4.2 | BSD |
| pub | shared_preferences_web | 2.4.3 | BSD |
| pub | shared_preferences_windows | 2.4.1 | BSD |
| pub | source_span | 1.10.2 | BSD |
| pub | stack_trace | 1.12.1 | BSD |
| pub | state_notifier | 1.0.0 | MIT |
| pub | stream_channel | 2.1.4 | BSD |
| pub | string_scanner | 1.4.1 | BSD |
| pub | term_glyph | 1.2.2 | BSD |
| pub | test_api | 0.7.10 | BSD |
| pub | typed_data | 1.4.0 | BSD |
| pub | url_launcher_linux | 3.2.3 | BSD |
| pub | url_launcher_platform_interface | 2.3.2 | BSD |
| pub | url_launcher_web | 2.4.3 | BSD |
| pub | url_launcher_windows | 3.1.6 | BSD |
| pub | uuid | 4.6.0 | MIT |
| pub | vector_math | 2.2.0 | BSD |
| pub | vm_service | 15.4.0 | BSD |
| pub | web | 1.1.1 | BSD |
| pub | web_socket | 1.0.1 | BSD |
| pub | web_socket_channel | 3.0.3 | BSD |
| pub | win32 | 6.4.0 | BSD |
| pub | xdg_directories | 1.1.0 | BSD |
| pub | yaml | 3.1.4 | MIT |
| npm | @hono/node-server | 2.1.6 | MIT |
| npm | @noble/curves | 2.2.0 | MIT |
| npm | @noble/hashes | 2.2.0 | MIT |
| npm | @scure/base | 2.2.0 | MIT |
| npm | @scure/starknet | 2.2.0 | MIT |
| npm | better-sqlite3 | 13.0.3 | MIT |
| npm | bufferutil | 4.1.0 | MIT |
| npm | ccxt | 4.5.92 | MIT |
| npm | decimal.js | 10.6.0 | MIT |
| npm | fflate | 0.8.3 | MIT |
| npm | hono | 4.13.17 | MIT |
| npm | kysely | 0.29.8 | MIT |
| npm | node-addon-api | 8.9.2 | MIT |
| npm | node-gyp-build | 4.8.4 | MIT |
| npm | pg | 8.23.1 | MIT |
| npm | pg-cloudflare | 1.4.1 | MIT |
| npm | pg-connection-string | 2.14.1 | MIT |
| npm | pg-int8 | 1.0.1 | ISC |
| npm | pg-pool | 3.14.0 | MIT |
| npm | pg-protocol | 1.16.1 | MIT |
| npm | pg-types | 2.2.0 | MIT |
| npm | pgpass | 1.0.5 | MIT |
| npm | postgres-array | 2.0.0 | MIT |
| npm | postgres-bytea | 1.0.1 | MIT |
| npm | postgres-date | 1.0.7 | MIT |
| npm | postgres-interval | 1.2.0 | MIT |
| npm | split2 | 4.2.0 | ISC |
| npm | undici | 7.29.1 | MIT |
| npm | ws | 8.21.0 | MIT |
| npm | ws | 8.22.2 | MIT |
| npm | xtend | 4.0.2 | MIT |
| npm | zod | 4.6.7 | MIT |

The server packages (npm) are the production dependencies from `server/pnpm-lock.yaml` (`pnpm licenses list --prod`). The app packages (pub) are from `app/pubspec.lock`. Development-only tools are not listed because they are not part of the running product.