Third-Party & Open-Source Components
Last reviewed: 2026-05-12
The components below are included in Colourlab Ai 4 under their respective licenses. This page is the Notices and Open Source Licenses document referenced by Section 11 of the End User License Agreement.
Application framework
| Component | Version | License | Use |
|---|---|---|---|
| Tauri (opens in a new tab) | 2.x | MIT / Apache-2.0 | Desktop app shell, IPC, packaging |
| React (opens in a new tab) | 19.1 | MIT | UI framework |
| Vite (opens in a new tab) | 7.0 | MIT | Frontend dev server + bundler |
| TypeScript (opens in a new tab) | 5.8 | Apache-2.0 | Type system |
React UI ecosystem
| Component | License | Use |
|---|---|---|
Radix UI Primitives (opens in a new tab) — accordion, alert-dialog, aspect-ratio, checkbox, collapsible, context-menu, dialog, dropdown-menu, hover-card, label, menubar, navigation-menu, popover, progress, radio-group, scroll-area, select, separator, slider, slot, switch, tabs, toggle, toggle-group, tooltip, plus the meta radix-ui package | MIT | Accessible component primitives |
| lucide-react (opens in a new tab) | ISC | Icon set |
HugeIcons (opens in a new tab) — @hugeicons/core-free-icons, @hugeicons/react | MIT | Additional icon set |
| Iconify React (opens in a new tab) | MIT | Icon framework |
shadcn/ui-style class utilities (opens in a new tab) — class-variance-authority | Apache-2.0 | Variant-based class composition |
| clsx (opens in a new tab) | MIT | Class name joining |
| tailwind-merge (opens in a new tab) | MIT | Tailwind class merging |
Tailwind CSS (opens in a new tab) + @tailwindcss/vite + @tailwindcss/typography + tailwindcss-animate | MIT | Styling |
| @hello-pangea/dnd (opens in a new tab) | Apache-2.0 | Drag-and-drop |
react-hook-form (opens in a new tab) + @hookform/resolvers | MIT | Form state |
| react-resizable-panels (opens in a new tab) | MIT | Resizable split panels |
| react-window (opens in a new tab) | MIT | Virtualised lists |
| react-markdown (opens in a new tab) | MIT | Markdown rendering (agent chat) |
| sonner (opens in a new tab) | MIT | Toast notifications |
| Motion (motion.dev) (opens in a new tab) | MIT | Animations |
| zustand (opens in a new tab) | MIT | State management |
| zod (opens in a new tab) | MIT | Runtime schema validation |
| eventemitter3 (opens in a new tab) | MIT | Event emitter |
| use-deep-compare-effect (opens in a new tab) | MIT | Deep-compare effect hook |
| nanoid (opens in a new tab) | MIT | Short unique ids |
| dayjs (opens in a new tab) | MIT | Date utilities |
| culori (opens in a new tab) | MIT | Color space conversions |
| fflate (opens in a new tab) | MIT | ZIP read/write (.clproj archives) |
Audio / video / models in the renderer
| Component | License | Use |
|---|---|---|
FFmpeg.wasm (opens in a new tab) — @ffmpeg/ffmpeg, @ffmpeg/core, @ffmpeg/util | LGPL-2.1+ (wasm) / GPL terms for codecs | In-browser media probe + decode utilities |
| mediabunny (opens in a new tab) | MIT | Browser-side video utilities |
| wavesurfer.js (opens in a new tab) | BSD-3-Clause | Audio waveform rendering |
| @huggingface/transformers (opens in a new tab) | Apache-2.0 | In-browser ML inference (planned use) |
Tauri plugins
| Component | License | Use |
|---|---|---|
@tauri-apps/api | MIT / Apache-2.0 | Renderer ↔ Rust IPC |
@tauri-apps/plugin-dialog | MIT / Apache-2.0 | Native file dialogs |
@tauri-apps/plugin-fs | MIT / Apache-2.0 | Filesystem access |
@tauri-apps/plugin-opener | MIT / Apache-2.0 | Open URLs / files externally |
tauri-plugin-deep-link (release-dist only) | MIT / Apache-2.0 | OAuth loopback callback |
Rust backend (src-tauri/Cargo.toml direct deps)
| Crate | License | Use |
|---|---|---|
tauri, tauri-build | MIT / Apache-2.0 | Tauri framework |
serde, serde_json | MIT / Apache-2.0 | Serialization |
axum | MIT | Local HTTP server for the agent process |
tokio | MIT | Async runtime |
tower-http | MIT | HTTP middleware (CORS) |
uuid | MIT / Apache-2.0 | UUID generation |
rusqlite (bundled SQLite) | MIT (rusqlite) / Public Domain (SQLite) | SQLite client |
chrono | MIT / Apache-2.0 | Date / time |
image crate (opens in a new tab) | MIT / Apache-2.0 | Image decode (PNG/JPEG/TIFF) |
base64 | MIT / Apache-2.0 | Base64 encode/decode |
keyring | MIT / Apache-2.0 | Anthropic key storage (Keychain on macOS) |
sha2, hmac | MIT / Apache-2.0 | HMAC-SHA256 for credit codes + licensing |
rand | MIT / Apache-2.0 | Random nonce generation |
quick-xml | MIT | XML preferences file |
tracing, tracing-subscriber | MIT | Structured logging |
libc | MIT / Apache-2.0 | Process info (RSS measurement) |
Rust crates compiled only into release-dist (licensing feature)
| Crate | License | Use |
|---|---|---|
reqwest (rustls-tls) | MIT / Apache-2.0 | HTTPS client for Cognito + activation |
urlencoding | MIT | URL encoding |
thiserror | MIT / Apache-2.0 | Error types |
ed25519-dalek | BSD-3-Clause | Verifying signed entitlement payloads |
Rust macOS-only bindings
| Crate | License | Use |
|---|---|---|
objc2, objc2-core-foundation, objc2-foundation, objc2-app-kit, objc2-quartz-core, objc2-metal | MIT / Apache-2.0 | Native AppKit / Metal / Core Foundation bindings for the Metal overlay |
Native C/C++ libraries linked into the binary
These are linked via src-tauri/build.rs and src-tauri/media-engine/CMakeLists.txt. They are bundled into Contents/Frameworks/ of the distributed .app for portable release builds.
| Library | License | Use |
|---|---|---|
ONNX Runtime (opens in a new tab) (libonnxruntime.dylib) | MIT | Runs the V2x style-tensor and CLIP models inside libclai |
FFmpeg (opens in a new tab) — libavformat, libavcodec, libavutil | LGPL-2.1+ / GPL components excluded | Video decode (in-repo media-engine) |
| libcurl (opens in a new tab) | curl license (MIT-style) | HTTPS client inside libclai's OpenAI cinematography path |
| libzip (opens in a new tab) | BSD-3-Clause | X03 ZIP archive read/write |
| zlib (opens in a new tab) | zlib license | ZIP compression |
| SQLite (opens in a new tab) | Public Domain | Embedded database engine (bundled by rusqlite) |
| sqlite-vec (opens in a new tab) | Apache-2.0 / MIT | Vector similarity extension for SQLite (used by libclai's CLIP search) |
| stb_image (opens in a new tab) | Public Domain / MIT | Image decoder used by clai_save_x03_import |
Bundled AI models
Model weight files under src-tauri/resources/clai-assets/ (~594 MB, tracked via Git LFS).
| Model | Approx. size | Origin | License (verify) |
|---|---|---|---|
clai4-matcher.onnx | 15 MB | Colourlab Ai (proprietary) | Proprietary — Colourlab Ai |
clip_vision.onnx (CLIP ViT-B/32 vision encoder) | 335 MB | OpenCLIP (opens in a new tab) | MIT (OpenCLIP) |
clip_text.onnx (CLIP text encoder) | 243 MB | OpenCLIP | MIT (OpenCLIP) |
clip_text_embeddings.bin | 18 KB | Generated from OpenCLIP classes | MIT |
bpe_vocab.txt.gz (BPE vocab) | 1.4 MB | OpenAI CLIP / OpenCLIP | MIT |
Code-level lineage
| Component | License | Note |
|---|---|---|
| OpenCut (opens in a new tab) | MIT | The editor UI under src/components/editor/ started as a fork of OpenCut. Stripped, adapted, and integrated into Tauri. Original copyright retained per MIT terms. |
License families summary
For a license-page footer, the families represented by the components above are:
- MIT — vast majority of npm and Rust crates.
- Apache-2.0 — TypeScript, several Rust crates,
class-variance-authority, sqlite-vec. - MIT OR Apache-2.0 — Rust ecosystem convention; either license applies at the user's choice.
- BSD-3-Clause — wavesurfer.js, libzip, ed25519-dalek.
- ISC — lucide-react.
- zlib license — zlib.
- LGPL-2.1+ — FFmpeg (we link dynamically against shared libraries; GPL-licensed FFmpeg modules are not enabled at build time).
- curl license — libcurl (MIT-style, BSD-style attribution clause).
- Public Domain — SQLite (linked statically via rusqlite's
bundledfeature), stb_image. - Proprietary — Colourlab Ai's V2xCoreEncoder model + the app source.