Open-source acknowledgements
Effective 13 September 2026
regulation10.ae is built on open-source software, and we would rather say so plainly than leave it implied. This page names the direct production dependencies of the site and the platform it fronts, the licence each one carries and a link to its source. Development and test tooling that never ships to you is not listed, with thanks all the same.
These documents are scaffolds. Final clauses are reviewed by external counsel before commercial launch.
1. The frameworks that carry the site
| Project | Version | Licence | What it does here |
|---|---|---|---|
| Next.js | 15.5.27 | MIT | The application framework for the site and the platform |
| React | 19.2.7 | MIT | The UI runtime, with react-dom for rendering and hydration |
| Tailwind CSS | 3.4.19 | MIT | The styling system beneath the design tokens |
| React Flow (@xyflow/react) | 12.11.5 | MIT | Renders the governance and monitoring flow canvases; its on-canvas attribution mark is left visible by choice |
2. MIT licensed
| Project | Version | Licence | What it does here |
|---|---|---|---|
| @azure/communication-email | 1.1.0 | MIT | Transactional email delivery |
| @azure/cosmos | 4.9.3 | MIT | Client for Azure Cosmos DB, the primary datastore |
| @azure/identity | 4.13.1 | MIT | Managed-identity credential acquisition |
| @azure/storage-blob | 12.33.0 | MIT | Blob storage for evidence artefacts |
| @napi-rs/canvas | 1.0.8 | MIT | Server-side rendering of Open Graph share cards |
| @radix-ui/react-slot | 1.2.4 | MIT | Component composition primitive |
| argon2 | 0.44.0 | MIT | Password and token hashing |
| clsx | 2.1.1 | MIT | Conditional class-name construction |
| driver.js | 1.8.0 | MIT | The in-product guided tour |
| echarts-for-react | 3.0.6 | MIT | React binding for Apache ECharts |
| embla-carousel-react | 8.6.0 | MIT | The proof slider carousel |
| Framer Motion | 11.18.2 | MIT | Page transitions and component motion |
| otplib | 13.4.1 | MIT | TOTP for two-factor authentication |
| PDFKit | 0.15.2 | MIT | PDF generation for exported artefacts |
| node-qrcode | 1.5.4 | MIT | QR codes for authenticator enrolment |
| React Hook Form | 7.75.0 | MIT | Form state and validation |
| react-markdown | 10.1.0 | MIT | Safe rendering of assistant answers |
| Resend (resend-node) | 4.8.0 | MIT | Email delivery for the marketing site |
| stripe-node | 17.7.0 | MIT | Subscription billing and checkout |
| tailwind-merge | 2.6.1 | MIT | Utility class conflict resolution |
| vanilla-cookieconsent | 3.1.0 | MIT | The cookie consent banner |
| Zod | 3.25.76 | MIT | Checks the shape of data at every boundary |
3. Apache-2.0 licensed
| Project | Version | Licence | What it does here |
|---|---|---|---|
| class-variance-authority | 0.7.1 | Apache-2.0 | Type-safe variant definitions for UI primitives |
| Apache ECharts | 6.1.0 | Apache-2.0 | The charting engine behind dashboards and scorecards |
| @vercel/kv | 3.0.0 | Apache-2.0 | Key-value store for the marketing site |
| sharp | 0.35.5 | Apache-2.0 | Image resizing behind the framework's image optimiser |
Apache ECharts ships a NOTICE file, preserved upstream at apache/echarts NOTICE, which this credit links in accordance with section 4(d) of the licence.
4. Other licences
| Project | Version | Licence | What it does here |
|---|---|---|---|
| Lucide | 0.460.0 | ISC | The icon set |
| Auth.js (next-auth) | 5.0.0-beta.32 | ISC | Sessions and authentication |
| JSZip | 3.10.1 | MIT (dual-licensed; MIT elected) | ZIP assembly for evidence exports |
| libvips | 8.18.7 (sharp-libvips 1.3.4) | LGPL-3.0-or-later | Image processing, loaded by sharp as a separate shared library; build scripts at github.com/lovell/sharp-libvips |
JSZip is dual-licensed under MIT or GPL-3.0-or-later; we elect the MIT arm, stated here once so it never has to be rediscovered.
5. Typefaces
- BDO Grotesk (LCTipografi), Geist Mono (Vercel), Inter, Inter Tight and IBM Plex Mono are self-hosted at build time and used under the SIL Open Font License 1.1.
- Sentient (Indian Type Foundry) sets our headings. It is free of charge but it is not open source: it is used under the ITF Free Font License, which grants commercial use and self-hosting while reserving all other rights to the foundry. It is credited here for completeness, not as an open-source component.
- The Dubai typeface (Dubai W23, Dubai Executive Council and Monotype) sets the Arabic text of this site and renders our share-card images. It is a licensed typeface, not open source, and is credited here for completeness.
6. Imagery
The photography on regulation10.ae is AI-generated. Every frame in the hero and the industry cards was made with Midjourney rather than photographed. No person, office or place shown is real, and none of them depicts Exec X AI, its staff or a customer. The WebP encoding that compresses these files for delivery also strips the synthetic-media marker the generator embeds in them. That is why the disclosure is made here in words instead.
7. Corrections
This list is reviewed with each release. If you believe we have used your work without crediting it, or credited it incorrectly, write to humans@regulation10.ae and we will correct the page.