Open Source License Notice

GateLLM software uses a number of open-source software components in its build. This page declares the open-source dependencies included in the GateLLM distribution and their license types, to satisfy the attribution and notice requirements of open-source licenses.

The license for GateLLM itself (per memory capacity) is detailed in the Terms of Service. This page covers only the third-party open-source components used by GateLLM.

One disclosure unrelated to open-source licensing, but belonging to the same "where this page's content comes from" obligation: hero illustrations on the blog are AI-generated decorative artwork. They carry no information not already stated in the article text and make no claim about product capability or performance; facts and figures in the body come from the product implementation and verifiable sources. Such images are always rendered with an empty alt (decorative), so screen readers skip them.

Below are the open-source components included in the GateLLM distribution and their license types (grouped by category). The selection criterion is the dependency declaration rather than the critical rendering path: every runtime direct dependency (the dependencies block of package.json) is listed, plus the build-time tool Tailwind CSS — the only build-time tool listed on its own, because the stylesheet shipped in the distribution is compiled by it — so the list may include components that no source file currently imports but that are installed as direct dependencies.

• Next.js (MIT License) — full-stack framework, App Router / static export
• React & ReactDOM (MIT License) — UI runtime
• HeroUI / @heroui/react (MIT License) — component library
• HeroUI Pro / @heroui-pro/react (commercial license, Fluxon LLC holds a compliant license) — Pro components
• Tailwind CSS (MIT License) & tailwind-merge / tailwind-variants — styling system
• @supabase/supabase-js (MIT License) — Supabase client SDK (accounts & licensing)
• @sentry/nextjs (MIT License) — error monitoring SDK
• TipTap (@tiptap/*, MIT License) — rich text editing
• Recharts (MIT License) — charts
• Motion (MIT License) — animation
• Shiki (MIT License) — syntax highlighting
• ogl (Unlicense) — WebGL rendering (homepage hero ambient layer)
• React Bits (MIT + Commons Clause License, Copyright (c) 2026 David Haz) — homepage hero ambient component (Aurora). Note: this is inlined component source (components/motion/Aurora.tsx), not a package.json dependency, so it falls outside the "direct dependency" criterion above; it is listed here to satisfy its license attribution requirement.
• Marked / react-markdown / remark-parse / remark-gfm / remark-breaks / rehype-slug / unified (MIT License) — Markdown rendering
• streamdown (Apache-2.0 License) — streaming Markdown rendering
• Iconify icon data (@iconify-json/gravity-ui, MIT License / Yandex LLC; @iconify-json/simple-icons, CC0-1.0) — icons. Inlined as SVG at build time and not distributed as a package, so it falls outside the "direct dependency" criterion above; listed here to satisfy its attribution requirement. The simple-icons SVG data is CC0 public domain, but the brand marks themselves remain the trademarks of their respective owners; our use of vendor marks is nominative (stating interoperability/compatibility).
• Embla Carousel (MIT License) — carousel
• React Aria Components (Apache-2.0 License) — accessibility components
• @number-flow/react (MIT License) — animated number transitions
• react-resizable-panels (MIT License) — resizable panel layouts
• @heroui/styles (MIT License) — HeroUI style utilities

The open-source components used by GateLLM are primarily under the following permissive licenses:

• MIT License: permits free use, modification, and distribution, requiring retention of copyright and license notices. Most of GateLLM's dependencies use this license.
• Apache-2.0 License: similar to MIT, with additional patent grant terms.
• Commercial License: a small number of components such as HeroUI Pro use a commercial license; Fluxon LLC has purchased a compliant license and has the right to use and distribute them within GateLLM.

GateLLM connects to downstream model providers via BYOK. The licenses for provider SDKs and client libraries (if any) are provided and governed by each provider, and are not included within the scope of GateLLM's license notice.

When you configure a provider's API key in your self-hosted GateLLM instance, the license and usage terms between you and that provider are governed by the provider's terms of service. GateLLM acts only as a request-routing gateway and does not redistribute provider SDKs or model weights.

Sub-processor List

Each GateLLM release is accompanied by a Software Bill of Materials (SBOM) that fully lists all direct and transitive dependencies and their versions. Dependencies are regularly scanned for known vulnerabilities (CVEs); security patches are released per the vulnerability disclosure policy timeline and annotated with CVE IDs in the changelog.

Enterprise customers may request the current version's SBOM and dependency vulnerability scan report from support@gatellm.io or security@gatellm.io for procurement security assessment.

Vulnerability Disclosure Policy

GateLLM sincerely thanks the above open-source projects and their contributors. These open-source components are the foundation upon which GateLLM is built. The full copyright and license notices for each component are available in the NOTICE file provided with each release.

If you find this notice incomplete or incorrect, please contact support@gatellm.io so we can promptly correct and complete the attribution.

Terms of Service · Security & Compliance