MindMapVault Credits and Licenses
Last updated: April 26, 2026
Huge thanks to all people, communities, companies, maintainers, and contributors whose work made this project possible.
MindMapVault is built on top of a large body of shared engineering work. This page is a practical thank-you and a licensing summary for the main software components used in the product, the public website, the desktop host, and the backend stack.
This file is informational and is not legal advice. When packaging, redistributing, or deploying third-party software, always review the upstream LICENSE files and official documentation for the exact version you ship.
How to read this page
Component: the project, library, framework, runtime, or service.What it is for: the role it plays in MindMapVault.Used for here: the concrete way this repository uses it.License: the upstream license identifier commonly published by that project.What it usually requires: a short operational summary, not a substitute for the full license text.
Main product and website stack
| Component | What it is for | Used for here | License | What it usually requires |
|---|---|---|---|---|
| React | UI library | Main app UI, marketing UI, shared interactive surfaces | MIT | Keep copyright and license notice in redistributions. |
| React DOM | Browser renderer for React | Browser rendering and hydration for site/app views | MIT | Keep copyright and license notice in redistributions. |
| React Router DOM | Routing | App and landing navigation flows | MIT | Keep copyright and license notice in redistributions. |
| Zustand | State management | Theme and UI state management in app surfaces | MIT | Keep copyright and license notice in redistributions. |
| @xyflow/react (React Flow) | Graph canvas and node/edge interaction framework | Mind-map editor viewport, node graph interaction, keyboard-driven editing backbone | MIT | Keep copyright and license notice in redistributions. |
| DOMPurify | HTML sanitization | Sanitizing markdown-rendered public content before rendering | MPL-2.0 OR Apache-2.0 | Apache path requires preserving notices; MPL path has file-level copyleft obligations on modified covered files. |
| marked | Markdown parser | Rendering public markdown documents and builder blog posts | MIT | Keep copyright and license notice in redistributions. |
| lucide-react | Icon library | Product and landing page icons | ISC | Keep copyright and license notice in redistributions. |
| Tailwind CSS | Utility-first CSS framework | Styling for website and app surfaces | MIT | Keep copyright and license notice in redistributions. |
| Vite | Frontend bundler and dev server | Building frontend_app and frontend_www |
MIT | Keep copyright and license notice in redistributions. |
| TypeScript | Type system and compiler tooling | Type-checked frontend codebase | Apache-2.0 | Preserve notices and license text in redistributions. |
Cryptography and content-processing libraries
| Component | What it is for | Used for here | License | What it usually requires |
|---|---|---|---|---|
| @noble/curves | Elliptic-curve cryptography primitives | Client-side crypto helpers in the app | MIT | Keep copyright and license notice in redistributions. |
| @noble/hashes | Hashing primitives | Client-side hashing and key-derivation helpers | MIT | Keep copyright and license notice in redistributions. |
| @noble/post-quantum | Post-quantum cryptography primitives | Experimental or future-facing crypto support in the app stack | MIT | Keep copyright and license notice in redistributions. |
| hash-wasm | High-performance hashing in WebAssembly | Browser-side hashing support | MIT | Keep copyright and license notice in redistributions. |
Desktop host stack
| Component | What it is for | Used for here | License | What it usually requires |
|---|---|---|---|---|
| Tauri | Desktop application framework | Windows and Linux desktop shell for the local-first edition | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| @tauri-apps/api | JS bindings for desktop features | Frontend bridge into the desktop host | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| @tauri-apps/cli | Build and packaging CLI | Local desktop development and packaging | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| tauri-plugin-fs | Filesystem access plugin | Local vault file operations in desktop mode | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| tauri-plugin-dialog | Native dialog plugin | File dialogs and related desktop flows | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| tauri-plugin-shell | Shell/plugin utilities | Desktop command and external-open support where enabled | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| rfd | Native file dialog library | Cross-platform file-picker integration for desktop builds | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
Backend and server-side Rust stack
| Component | What it is for | Used for here | License | What it usually requires |
|---|---|---|---|---|
| Rust | Systems language and toolchain | Backend services, desktop host, internal tools | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| Tokio | Async runtime | Backend async execution and IO | MIT | Keep copyright and license notice in redistributions. |
| Axum | Web framework | API routes, auth endpoints, and HTTP handling | MIT | Keep copyright and license notice in redistributions. |
| Tower | Service middleware abstractions | Shared request pipeline and middleware composition | MIT | Keep copyright and license notice in redistributions. |
| tower-http | HTTP middleware helpers | CORS, tracing, limits, and related middleware | MIT | Keep copyright and license notice in redistributions. |
| Serde | Serialization framework | JSON and model serialization across backend and desktop | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
| serde_json | JSON support | JSON parsing and encoding | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
| uuid | Identifiers | Stable IDs for entities and payloads | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
| chrono | Date/time handling | Timestamps and formatted time handling | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
| thiserror | Error definitions | Backend and desktop error types | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
| validator | Input validation | Request payload validation | MIT | Keep copyright and license notice in redistributions. |
| jsonwebtoken | JWT handling | Auth token issuance and verification | MIT | Keep copyright and license notice in redistributions. |
| argon2 | Password hashing | Password hashing and verification | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
| aws-sdk-s3 | S3-compatible object storage client | Encrypted blob upload and download paths | Apache-2.0 | Preserve notices and license text in redistributions. |
| reqwest | HTTP client | Health checks and service-to-service requests | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
| tokio-postgres | PostgreSQL driver | PostgreSQL-backed server mode | MIT OR Apache-2.0 | Preserve license and notice text; comply with the chosen license terms. |
Data stores and infrastructure used by the full project
These components matter mainly for the hosted/server edition and local development infrastructure.
| Component | What it is for | Used for here | License | What it usually requires |
|---|---|---|---|---|
| PostgreSQL | Relational database | Hosted SQL persistence path | PostgreSQL License | Preserve copyright and license text in redistributions. |
| MongoDB Community Server | Document database | Original server persistence path | SSPL-1.0 | Strong copyleft obligations apply when offering the software as a service; review carefully before hosted redistribution. |
| MinIO | S3-compatible object storage server | Hosted encrypted blob/object storage deployments | AGPL-3.0-only | Network copyleft obligations apply for modified hosted deployments; review carefully before redistribution or managed service use. |
| Cloudflare Wrangler | Deployment CLI | Website deployment workflow for Cloudflare Pages | Apache-2.0 OR MIT | Preserve license and notice text; comply with the chosen license terms. |
Practical licensing notes
- Most of the direct frontend and Rust application dependencies used here are permissive:
MIT,Apache-2.0,ISC,PostgreSQL, or a dual-license combination ofMIT OR Apache-2.0. DOMPurifyis published asMPL-2.0 OR Apache-2.0. That means the Apache path is usually the simpler operational choice for typical redistribution, while the MPL path matters if you choose to rely on it and modify covered source files.- Infrastructure software deserves extra care.
MongoDB Community ServerandMinIOhave service-oriented copyleft terms that should be reviewed before redistribution, white-label hosting, or managed-service packaging. - This project keeps plaintext mind-map content and decryption keys on the client side by design. That product rule is architectural, not a license term, but it strongly influences which third-party components are used and how they are integrated.
Thanks again
MindMapVault exists because many people decided to publish reusable code, documentation, tooling, research, and APIs instead of keeping them private. This project benefits directly from that decision.
Thank you to the open-source maintainers, standards authors, security researchers, UI framework contributors, package authors, Rust and JavaScript communities, and infrastructure teams whose work made this possible.