Open Source Licenses

Last updated: August 3, 2026 · Applies to Kakuremi for iOS 1.4.0 (build 51)

Kakuremi is built on top of open source software. This page lists every third-party component that we distribute inside the Kakuremi iOS app or serve from kakuremi.com, together with the copyright notices and the full license texts that those licenses require us to reproduce.

Kakuremi itself is not open source. The iOS app and its Rust core are proprietary software owned by SpringHiker Inc. Nothing on this page changes that, and nothing on this page grants you rights in Kakuremi’s own code. What it does is credit the work of others and pass on the rights that their licenses give you in their code.

This page is about attribution and licensing only. It changes nothing about how Kakuremi handles your data — the app still transmits nothing about your vault to us or to anyone else. See the Privacy Policy for that.


How to read this page

What is listed

Three things are listed here: the Rust crates that are compiled into Kakuremi’s core library, the iOS libraries that are linked into the app binary, and the JavaScript, CSS and icon assets that this website serves. Each entry gives the component name, the exact version, the license as the publisher declared it, the copyright notice, and a link to the upstream source.

We list more than we strictly ship

The Rust dependency graph, as enumerated for the shipping target with --edges normal, contains 158 third-party crates. We verified which of them actually survive linking into the shipped binary (see How this list was produced), and the result is: 89 are present in the app, 65 are used only by build-time tooling and are stripped by the linker, and 4 could not be settled with certainty. We list all of them anyway. The In app column records what we found, but an entry marked “Build tooling” is still credited here, because crediting a component we do not ship costs nothing and omitting one we do ship would be a real failure.

The four uncertain crates (serde_json, itoa, memchr, zmij) reach the dependency graph through an optional feature, are not referenced by any code path we call, and leave no symbols in the shipped binary — but a future change to our own code could pull them in. They are credited as though we ship them.

Three further crates — autocfg 1.5.0, version_check 0.9.5 and uniffi_build 0.29.5 — are reachable only as build-script dependencies (--edges build). They run on the build machine, no part of them can reach a distributed artifact, and they are therefore outside the 158 above. We name them here so that the count is reproducible either way.

License election

Many components are offered under a choice of licenses. Where a choice is available, Kakuremi elects MIT if MIT is among the options; otherwise Apache-2.0; otherwise the first permissive option offered. The tables below record the license exactly as the publisher declared it, and group components by the license we elect, so you can see both the full set of terms the publisher offers and the terms under which the component reaches you in Kakuremi.

One exception is deliberate. constant_time_eq is offered as CC0-1.0 OR MIT-0 OR Apache-2.0. MIT is not among the options, and CC0-1.0 expressly withholds any patent license, so for cryptographic code we elect Apache-2.0 and take its express patent grant.

Where a license expression joins terms with AND rather than OR, all of the joined terms apply and we comply with all of them. unicode-ident declares (MIT OR Apache-2.0) AND Unicode-3.0; electing MIT does not avoid the Unicode-3.0 obligations, so it appears in both the MIT and the Unicode-3.0 table below. That is why the group totals add up to one more than the number of distinct components.

Something missing or wrong?

If a component is credited incorrectly, or is not credited at all, please write to support@kakuremi.com and we will correct this page.


Kakuremi’s own code

Two Kakuremi components deserve a plain description, because their status is easy to misread.

kakuremi-core

kakuremi-core is the Rust library that reads and writes KDBX databases, derives keys, generates passwords and computes TOTP codes. It is our own work, it carries an MIT license file internally, and it is not currently published. Please do not read “MIT” here as “open source”: the source is not available to the public today, and until we publish it, the MIT text in the repository has no effect on anyone outside SpringHiker Inc. If we publish it, we will say so here.

keepass-rs (fork)

Kakuremi’s KDBX parsing builds on keepass-rs by Stefan Seemayer, which is MIT-licensed. We use a modified fork of it. Our fork is based on upstream v0.7.0 and adds bug fixes to KDBX reading and writing (HMAC block-stream framing, KeyFile v2.0 handling, tag parsing, attachment round-tripping, AES-256 padding). The fork is not currently published. The MIT license does not require us to publish modifications, but it does require the original copyright notice to travel with the code, so:

keepass-rs — MIT License — Copyright (c) 2019 Stefan Seemayer — https://github.com/sseemayer/keepass-rs

The full MIT text is in Full license texts. Kakuremi is a KDBX-compatible application; it is not affiliated with, endorsed by, or derived from the KeePass project itself.


Mozilla Public License 2.0 components

Kakuremi uses UniFFI to generate the bridge between the Rust core and Swift. UniFFI is licensed under the Mozilla Public License, v. 2.0 (“MPL-2.0”), and its runtime is compiled into the shipped app. MPL-2.0 is the one license on this page that asks for something beyond attribution, so it gets its own section.

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
uniffi 0.29.5 MPL-2.0 Yes No LICENSE file in the published crate. crates.io
uniffi_bindgen 0.29.5 MPL-2.0 Build tooling No LICENSE file in the published crate. crates.io
uniffi_core 0.29.5 MPL-2.0 Yes No LICENSE file in the published crate. crates.io
uniffi_internal_macros 0.29.5 MPL-2.0 Build tooling No LICENSE file in the published crate. crates.io
uniffi_macros 0.29.5 MPL-2.0 Build tooling No LICENSE file in the published crate. crates.io
uniffi_meta 0.29.5 MPL-2.0 Build tooling No LICENSE file in the published crate. crates.io
uniffi_pipeline 0.29.5 MPL-2.0 Build tooling No LICENSE file in the published crate. crates.io
uniffi_udl 0.29.5 MPL-2.0 Build tooling No LICENSE file in the published crate. crates.io

Of these, uniffi and uniffi_core are linked into the shipped app binary; the remaining six run only at build time and are stripped by the linker. We list all eight, since they are the same project at the same version.

Portions of the Swift binding layer that ships inside Kakuremi (KakuremiCoreBindings.swift) are generated by uniffi_bindgen from its MPL-2.0 templates. We treat that generated code as covered by MPL-2.0 as well.

We have not modified these components

Kakuremi uses the crates.io releases of the exact versions listed above, byte for byte, with no patches applied.

How to obtain the source code

The complete Source Code Form for every version listed above is publicly available at github.com/mozilla/uniffi-rs (tag v0.29.5) and from the crates.io registry, for example crates.io/crates/uniffi/0.29.5. In addition, and as required by MPL-2.0 §3.2(a), we will provide a copy of the Source Code Form for any MPL-2.0 component distributed in a Kakuremi build to any recipient of that build, by a reasonable means and at no more than the cost of distribution. Write to support@kakuremi.com with the app version shown in Settings, under the About section.

Scope of the license

MPL-2.0 applies file by file. It expressly permits the covered files to be combined with, and distributed as part of, a Larger Work under different terms (MPL-2.0 §3.3), so the license of these components does not extend to Kakuremi’s own code. Kakuremi is proprietary software; the license terms of the Kakuremi application do not and cannot limit or alter any recipient’s rights in the Source Code Form of the MPL-2.0 components listed above (MPL-2.0 §3.2(b)). If the two ever conflict as to those components, MPL-2.0 prevails.

The full text of the Mozilla Public License, v. 2.0 is reproduced in Full license texts, and is also available at mozilla.org/MPL/2.0/.


iOS application components

Besides the Rust core, the iOS app links one third-party Swift/Objective-C package. It has no package dependencies of its own, but it does vendor two components written by other authors, and both are compiled into the shipped binary.

ComponentVersionDeclared license (SPDX)In appCopyright noticeSource
yubikit-ios4.7.0Apache-2.0YesCopyright 2018–2025 Yubico ABGitHub
GZIP (NSData+GZIP)
vendored inside yubikit-ios · created by Nick Lockwood
1.3.0MITYesCopyright (C) 2012 Charcoal DesignGitHub
MF_Base32Additions
vendored inside yubikit-ios
Public domain (declared in file header)YesDave Poirier, 2012 — released into the public domainGitHub

The GZIP and Base32 files live in YubiKit/YubiKit/ThirdParties/ inside the yubikit-ios package. They do not appear in any package manifest, so tooling that reads only dependency metadata will miss them. We verified that both are compiled into the release binary. Describing yubikit-ios as “Apache-2.0 only” would therefore be inaccurate.

Apache-2.0 NOTICE files

Apache-2.0 §4(d) requires a redistributor to reproduce the attribution notices from a NOTICE file, if the work includes one. We checked every Apache-2.0 component we ship — yubikit-ios 4.7.0, rpassword 7.4.0, rtoolbox 0.0.3 and constant_time_eq 0.3.1 / 0.4.2 — and none of them contains a NOTICE file (for yubikit-ios we also confirmed that no NOTICE file has ever existed in its git history). There are therefore no additional attribution notices to reproduce under §4(d). Their copyright attributions appear in the tables on this page, and the full Apache-2.0 text is reproduced below as §4(a) requires.

Apple frameworks

Kakuremi uses Apple’s system frameworks, the SF Pro system font and SF Symbols icons through the public iOS APIs. Apple does not require attribution for that use, and Kakuremi does not redistribute any Apple asset. The app bundles no custom fonts. NSData+GZIP links against the system zlib at /usr/lib/libz.1.dylib; that library is supplied by iOS and is not redistributed by us.


Rust core components

These are the crates in the dependency graph of Kakuremi’s Rust core, resolved for the aarch64-apple-ios target, grouped by the license we elect. The Declared license column reproduces the publisher’s own SPDX expression; the In app column records whether we found the crate in the shipped binary.

MIT License — 125 components

License we elect: MIT. Full text in Full license texts. A few crates ship the MIT text without a copyright line; for those we name the publisher instead, as recorded in the crate’s own metadata.

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
adler2 2.0.1 0BSD OR MIT OR Apache-2.0 Yes Copyright (C) Jonas Schievink <jonasschievink@gmail.com>
from the crate’s LICENSE-0BSD; its MIT file carries no notice
crates.io
aes 0.8.4 MIT OR Apache-2.0 Yes Copyright (c) 2018 Artyom Pavlov crates.io
anstream 1.0.0 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
anstyle 1.0.14 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
anstyle-parse 1.0.0 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
anstyle-query 1.1.5 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
anyhow 1.0.102 MIT OR Apache-2.0 Yes No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
arrayvec 0.7.6 MIT OR Apache-2.0 Yes Copyright (c) Ulrik Sverdrup "bluss" 2015-2023 crates.io
askama 0.13.1 MIT OR Apache-2.0 Build tooling Copyright (c) 2017-2020 Dirkjan Ochtman crates.io
askama_derive 0.13.1 MIT OR Apache-2.0 Build tooling Copyright (c) 2017-2020 Dirkjan Ochtman crates.io
askama_parser 0.13.0 MIT OR Apache-2.0 Build tooling Copyright (c) 2017-2020 Dirkjan Ochtman crates.io
base32 0.4.0 MIT OR Apache-2.0 Yes Copyright (c) 2015 The base32 Developers crates.io
base64 0.21.7 MIT OR Apache-2.0 Yes Copyright (c) 2015 Alice Maz crates.io
basic-toml 0.1.10 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Alex Crichton, David Tolnay. crates.io
bitflags 2.11.0 MIT OR Apache-2.0 Build tooling Copyright (c) 2014 The Rust Project Developers crates.io
blake2b_simd 1.0.4 MIT Yes No LICENSE file in the published crate; published by Jack O'Connor. crates.io
block-buffer 0.10.4 MIT OR Apache-2.0 Yes Copyright (c) 2018-2019 The RustCrypto Project Developers crates.io
block-modes 0.9.1 MIT OR Apache-2.0 Yes No LICENSE file in the published crate; published by RustCrypto Developers. crates.io
block-padding 0.3.3 MIT OR Apache-2.0 Yes Copyright (c) 2018-2019 The RustCrypto Project Developers crates.io
byteorder 1.5.0 Unlicense OR MIT Yes Copyright (c) 2015 Andrew Gallant crates.io
bytes 1.11.1 MIT Yes Copyright (c) 2018 Carl Lerche crates.io
camino 1.2.2 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Without Boats, Ashley Williams. crates.io
cargo-platform 0.1.9 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file. crates.io
cargo_metadata 0.19.2 MIT Build tooling No copyright line in the crate’s MIT license file; published by Oliver Schneider. crates.io
cbc 0.1.2 MIT OR Apache-2.0 Yes Copyright (c) 2018-2022 RustCrypto Developers / Copyright (c) 2018 Artyom Pavlov crates.io
cfg-if 1.0.4 MIT OR Apache-2.0 Yes Copyright (c) 2014 Alex Crichton crates.io
chacha20 0.9.1 Apache-2.0 OR MIT Yes Copyright (c) 2019-2023 The RustCrypto Project Developers crates.io
chrono 0.4.44 MIT OR Apache-2.0 Yes Copyright (c) 2014--2026, Kang Seonghoon and contributors. / Copyright (c) 2014, Kang Seonghoon. crates.io
cipher 0.4.4 MIT OR Apache-2.0 Yes Copyright (c) 2016-2020 RustCrypto Developers crates.io
clap 4.6.0 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
clap_builder 4.6.0 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
clap_derive 4.6.0 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
clap_lex 1.1.0 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
colorchoice 1.0.5 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
core-foundation-sys 0.8.7 MIT OR Apache-2.0 Yes Copyright (c) 2012-2013 Mozilla Foundation crates.io
cpufeatures 0.2.17 MIT OR Apache-2.0 Yes Copyright (c) 2020-2025 The RustCrypto Project Developers crates.io
crc32fast 1.5.0 MIT OR Apache-2.0 Yes Copyright (c) 2018 Sam Rijs, Alex Crichton and contributors crates.io
crypto-common 0.1.7 MIT OR Apache-2.0 Yes Copyright (c) 2021 RustCrypto Developers crates.io
digest 0.10.7 MIT OR Apache-2.0 Yes Copyright (c) 2017 Artyom Pavlov crates.io
displaydoc 0.2.5 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Jane Lusby. crates.io
equivalent 1.0.2 Apache-2.0 OR MIT Build tooling Copyright (c) 2016--2023 crates.io
errno 0.3.14 MIT OR Apache-2.0 Build tooling Copyright (c) 2014 Chris Wong crates.io
fastrand 2.4.1 Apache-2.0 OR MIT Build tooling No copyright line in the crate’s MIT license file; published by Stjepan Glavina. crates.io
flate2 1.1.9 MIT OR Apache-2.0 Yes Copyright (c) 2014-2026 Alex Crichton crates.io
form_urlencoded 1.2.2 MIT OR Apache-2.0 Yes Copyright (c) 2013-2016 The rust-url developers crates.io
fs-err 2.11.0 MIT/Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Andrew Hickman. crates.io
generic-array 0.14.7 MIT Yes Copyright (c) 2015 Bartłomiej Kamiński crates.io
getrandom 0.2.17 MIT OR Apache-2.0 Yes Copyright (c) 2018-2024 The rust-random Project Developers / Copyright (c) 2014 The Rust Project Developers crates.io
getrandom 0.3.4 MIT OR Apache-2.0 Yes Copyright (c) 2018-2025 The rust-random Project Developers / Copyright (c) 2014 The Rust Project Developers crates.io
getrandom 0.4.2 MIT OR Apache-2.0 Yes Copyright (c) 2018-2026 The rust-random Project Developers / Copyright (c) 2014 The Rust Project Developers crates.io
glob 0.3.3 MIT OR Apache-2.0 Build tooling Copyright (c) 2014 The Rust Project Developers crates.io
goblin 0.8.2 MIT Build tooling Copyright (c) m4b 2016-2024 crates.io
hashbrown 0.16.1 MIT OR Apache-2.0 Build tooling Copyright (c) 2016 Amanieu d'Antras crates.io
heck 0.5.0 MIT OR Apache-2.0 Build tooling Copyright (c) 2015 The Rust Project Developers crates.io
hex 0.4.3 MIT OR Apache-2.0 Yes Copyright (c) 2013-2014 The Rust Project Developers. / Copyright (c) 2015-2020 The rust-hex Developers crates.io
hex-literal 0.4.1 MIT OR Apache-2.0 Yes Copyright (c) 2018 Artyom Pavlov / Copyright (c) 2018 The RustCrypto Project Developers crates.io
hmac 0.12.1 MIT OR Apache-2.0 Yes Copyright (c) 2017 Artyom Pavlov crates.io
iana-time-zone 0.1.65 MIT OR Apache-2.0 Yes Copyright (c) 2020 Andrew D. Straw crates.io
idna 1.1.0 MIT OR Apache-2.0 Yes Copyright (c) 2013-2025 The rust-url developers crates.io
idna_adapter 1.2.1 Apache-2.0 OR MIT Yes Copyright (c) The rust-url developers crates.io
indexmap 2.13.1 Apache-2.0 OR MIT Build tooling Copyright (c) 2016--2017 crates.io
inout 0.1.4 MIT OR Apache-2.0 Yes Copyright (c) 2022 The RustCrypto Project Developers / Copyright (c) 2022 Artyom Pavlov crates.io
is_terminal_polyfill 1.70.2 MIT OR Apache-2.0 Build tooling Copyright (c) Individual contributors crates.io
itoa 1.0.18 MIT OR Apache-2.0 Uncertain No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
keepass fork of upstream v0.7.0 MIT Yes Copyright (c) 2019 Stefan Seemayer sseemayer/keepass-rs
libc 0.2.184 MIT OR Apache-2.0 Yes Copyright (c) The Rust Project Developers crates.io
log 0.4.29 MIT OR Apache-2.0 Build tooling Copyright (c) 2014 The Rust Project Developers crates.io
memchr 2.8.0 Unlicense OR MIT Uncertain Copyright (c) 2015 Andrew Gallant crates.io
minimal-lexical 0.2.1 MIT/Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Alex Huszagh.
portions Copyright (c) 2009 The Go Authors, All rights reserved — BSD-3-Clause, LICENSE.md
crates.io
miniz_oxide 0.8.9 MIT OR Zlib OR Apache-2.0 Yes Copyright 2013-2014 RAD Game Tools and Valve Software / Copyright 2010-2014 Rich Geldreich and Tenacious Software LLC / Copyright (c) 2017 Frommi / Copyright (c) 2017-2024 oyvindln crates.io
nom 7.1.3 MIT Build tooling Copyright (c) 2014-2019 Geoffroy Couprie crates.io
num-traits 0.2.19 MIT OR Apache-2.0 Yes Copyright (c) 2014 The Rust Project Developers crates.io
once_cell 1.21.4 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Aleksey Kladov. crates.io
percent-encoding 2.3.2 MIT OR Apache-2.0 Yes Copyright (c) 2013-2025 The rust-url developers crates.io
plain 0.2.3 MIT/Apache-2.0 Build tooling Copyright (c) 2017 Plain contributors crates.io
ppv-lite86 0.2.21 MIT OR Apache-2.0 Yes Copyright (c) 2019 The CryptoCorrosion Contributors crates.io
proc-macro2 1.0.106 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay, Alex Crichton. crates.io
quote 1.0.45 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
rand 0.9.2 MIT OR Apache-2.0 Yes Copyright 2018 Developers of the Rand project / Copyright (c) 2014 The Rust Project Developers crates.io
rand_chacha 0.9.0 MIT OR Apache-2.0 Yes Copyright 2018 Developers of the Rand project / Copyright (c) 2014 The Rust Project Developers crates.io
rand_core 0.9.5 MIT OR Apache-2.0 Yes Copyright 2018 Developers of the Rand project / Copyright (c) 2014 The Rust Project Developers crates.io
rust-argon2 2.1.0 MIT/Apache-2.0 Yes Copyright (c) 2017 Martijn Rijkeboer <mrr@sru-systems.com> crates.io
rustc-hash 2.1.2 Apache-2.0 OR MIT Build tooling No copyright line in the crate’s MIT license file; published by The Rust Project Developers. crates.io
rustix 1.1.4 Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT Build tooling No copyright line in the crate’s MIT license file; published by Dan Gohman, Jakub Konka. crates.io
salsa20 0.10.2 MIT OR Apache-2.0 Yes Copyright (c) 2019 Eric McCorkle crates.io
scroll 0.12.0 MIT Build tooling Copyright (c) m4b 2016 crates.io
scroll_derive 0.12.1 MIT Build tooling Copyright (c) 2017 crates.io
semver 1.0.28 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
serde 1.0.228 MIT OR Apache-2.0 Yes No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. crates.io
serde_core 1.0.228 MIT OR Apache-2.0 Yes No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. crates.io
serde_derive 1.0.228 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. crates.io
serde_json 1.0.149 MIT OR Apache-2.0 Uncertain No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. crates.io
sha1 0.10.6 MIT OR Apache-2.0 Yes Copyright (c) 2006-2009 Graydon Hoare / Copyright (c) 2009-2013 Mozilla Foundation / Copyright (c) 2016 Artyom Pavlov crates.io
sha2 0.10.9 MIT OR Apache-2.0 Yes Copyright (c) 2006-2009 Graydon Hoare / Copyright (c) 2009-2013 Mozilla Foundation / Copyright (c) 2016 Artyom Pavlov crates.io
simd-adler32 0.3.9 MIT Yes Copyright (c) [2021] [Marvin Countryman] crates.io
siphasher 0.3.11 MIT/Apache-2.0 Build tooling Copyright 2012-2016 The Rust Project Developers. / Copyright 2016-2023 Frank Denis. crates.io
smallvec 1.15.1 MIT OR Apache-2.0 Yes Copyright (c) 2018 The Servo Project Developers crates.io
smawk 0.3.2 MIT Build tooling Copyright (c) 2017 Martin Geisler crates.io
stable_deref_trait 1.2.1 MIT OR Apache-2.0 Yes Copyright (c) 2017 Robert Grosse crates.io
static_assertions 1.1.0 MIT OR Apache-2.0 Yes Copyright (c) 2017 Nikolai Vazquez crates.io
strsim 0.11.1 MIT Build tooling Copyright (c) 2015 Danny Guo / Copyright (c) 2016 Titus Wormer <tituswormer@gmail.com> / Copyright (c) 2018 Akash Kurdekar crates.io
syn 2.0.117 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
synstructure 0.13.2 MIT Build tooling Copyright 2016 Nika Layzell crates.io
tempfile 3.27.0 MIT OR Apache-2.0 Build tooling Copyright (c) 2015 Steven Allen crates.io
textwrap 0.16.2 MIT Build tooling Copyright (c) 2016 Martin Geisler crates.io
thiserror 1.0.69 MIT OR Apache-2.0 Yes No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
thiserror 2.0.18 MIT OR Apache-2.0 Yes No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
thiserror-impl 1.0.69 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
thiserror-impl 2.0.18 MIT OR Apache-2.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io
toml 0.5.11 MIT/Apache-2.0 Build tooling Copyright (c) 2014 Alex Crichton crates.io
totp-lite 2.0.1 MIT Yes Copyright (c) 2020 - 2021 Colin Woodbury crates.io
twofish 0.7.1 MIT OR Apache-2.0 Yes Copyright (c) 2017 Alexander Krotov crates.io
typenum 1.19.0 MIT OR Apache-2.0 Yes Copyright (c) 2014 Paho Lurie-Gregg crates.io
unicode-ident 1.0.24 (MIT OR Apache-2.0) AND Unicode-3.0 Build tooling No copyright line in the crate’s MIT license file; published by David Tolnay.
its Unicode-3.0 notice is in the Unicode table below
crates.io
url 2.5.8 MIT OR Apache-2.0 Yes Copyright (c) 2013-2025 The rust-url developers crates.io
utf8_iter 1.0.4 Apache-2.0 OR MIT Yes Copyright Mozilla Foundation crates.io
utf8parse 0.2.2 Apache-2.0 OR MIT Build tooling Copyright (c) 2016 Joe Wilm crates.io
uuid 1.23.0 Apache-2.0 OR MIT Yes Copyright (c) 2014 The Rust Project Developers / Copyright (c) 2018 Ashley Mannix, Christopher Armstrong, Dylan DPC, Hunar Roop Kahlon crates.io
weedle2 5.0.0 MIT Build tooling Copyright 2018-Present Sharad Chand / Copyright 2022 Jan-Erik Rediger crates.io
winnow 0.7.15 MIT Build tooling No copyright line in the crate’s MIT license file. crates.io
xml-rs 0.8.28 MIT Yes Copyright (c) 2014 Vladimir Matveev crates.io
zerocopy 0.8.48 BSD-2-Clause OR Apache-2.0 OR MIT Yes Copyright 2023 The Fuchsia Authors crates.io
zeroize 1.8.2 Apache-2.0 OR MIT Yes Copyright (c) 2018-2021 The RustCrypto Project Developers crates.io
zeroize_derive 1.4.3 Apache-2.0 OR MIT Build tooling Copyright (c) 2019-2023 The RustCrypto Project Developers crates.io
zmij 1.0.21 MIT Uncertain No copyright line in the crate’s MIT license file; published by David Tolnay. crates.io

Unicode License v3 — 19 components

These are the ICU4X internationalization crates, which reach us through urlidna for domain-name handling in KDBX entries. We confirmed that the ICU4X normalization code is genuinely linked into the shipped app, so the Unicode-3.0 notice below is required rather than precautionary. Unicode-3.0 requires its copyright and permission notice to appear in the associated documentation, which is what this page is.

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
icu_collections 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
icu_locale_core 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
icu_normalizer 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
icu_normalizer_data 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
icu_properties 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
icu_properties_data 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
icu_provider 2.2.0 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
litemap 0.8.2 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
potential_utf 0.1.5 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
tinystr 0.8.3 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
unicode-ident 1.0.24 (MIT OR Apache-2.0) AND Unicode-3.0 Build tooling Copyright © 1991-2023 Unicode, Inc.
from the crate’s LICENSE-UNICODE
crates.io
writeable 0.6.3 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
yoke 0.8.2 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
yoke-derive 0.8.2 Unicode-3.0 Build tooling Copyright © 2020-2024 Unicode, Inc. crates.io
zerofrom 0.1.7 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
zerofrom-derive 0.1.7 Unicode-3.0 Build tooling Copyright © 2020-2024 Unicode, Inc. crates.io
zerotrie 0.2.4 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
zerovec 0.11.6 Unicode-3.0 Yes Copyright © 2020-2024 Unicode, Inc. crates.io
zerovec-derive 0.11.3 Unicode-3.0 Build tooling Copyright © 2020-2024 Unicode, Inc. crates.io

Apache License 2.0 — 4 components

License we elect: Apache-2.0. rpassword and rtoolbox are offered under Apache-2.0 only. constant_time_eq offers a choice; we elect Apache-2.0 for its express patent grant, as explained above.

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
constant_time_eq 0.3.1 CC0-1.0 OR MIT-0 OR Apache-2.0 Yes No copyright line in the crate’s Apache-2.0 license file; published by Cesar Eduardo Barros. crates.io
constant_time_eq 0.4.2 CC0-1.0 OR MIT-0 OR Apache-2.0 Yes No copyright line in the crate’s Apache-2.0 license file; published by Cesar Eduardo Barros. crates.io
rpassword 7.4.0 Apache-2.0 Yes No copyright line in the crate’s Apache-2.0 license file; published by Conrad Kleinespel. crates.io
rtoolbox 0.0.3 Apache-2.0 Yes No copyright line in the crate’s Apache-2.0 license file; published by Conrad Kleinespel. crates.io

BSD 2-Clause License — 1 component

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
arrayref 0.3.9 BSD-2-Clause Yes Copyright (c) 2015 David Roundy <roundyd@physics.oregonstate.edu> crates.io

BSD 3-Clause License — 1 component

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
subtle 2.6.1 BSD-3-Clause Yes Copyright (c) 2016-2017 Isis Agora Lovecruft, Henry de Valence. All rights reserved. / Copyright (c) 2016-2024 Isis Agora Lovecruft. All rights reserved. crates.io

The Unlicense — 1 component

secstr is dedicated to the public domain and requires no attribution at all. We list it for completeness.

ComponentVersionDeclared license (SPDX) In app Copyright noticeSource
secstr 0.5.1 Unlicense Yes No copyright line in the crate’s Unlicense file; published by Val Packett. crates.io

Mozilla Public License 2.0 — 8 components

Listed in full in the Mozilla Public License components section above, together with the source-availability information that MPL-2.0 requires.


Website components

kakuremi.com is a static site. It serves the following third-party code and assets from our own servers, which makes us a redistributor of them.

ComponentVersionDeclared license (SPDX)Copyright noticeSource
Klaro! (consent manager)0.7.22BSD-3-ClauseCopyright (c) 2019–2020, KIProtect GmbH; and various authorsGitHub
core-js
bundled inside klaro.min.js
3.36.0MITCopyright (c) 2014–2024 Denis PushkarevGitHub
Preact
bundled inside klaro.min.js
10.19.6MITCopyright (c) 2015–present Jason MillerGitHub
Feather Icons
inlined as SVG paths
MITCopyright (c) 2013–2023 Cole BemisGitHub

We self-host klaro.min.js and klaro.min.css rather than loading them from a CDN, so the BSD-3-Clause notice above is reproduced here as the license requires for binary redistribution. core-js and Preact are bundled inside that file by Klaro’s build; they carry no separate license header in the minified output, so we identified them from the copyright banner core-js leaves in place (which states 3.36.0) and from Preact’s compat fingerprints. Preact leaves no version string in the bundle: 10.19.6 is read from Klaro 0.7.22’s own dependency manifest, not from the served file, and only the license and copyright holder are verifiable from the bundle itself. Several icons on this site are inlined Feather SVG paths with no attribution comment in the markup; that is our omission in the markup, corrected here.

Web fonts and analytics

The site uses Inter (SIL Open Font License 1.1, © The Inter Project Authors) and Noto Sans JP / Noto Sans SC (SIL Open Font License 1.1, © Google LLC and the Noto Project Authors), loaded from Google Fonts. We do not host or redistribute the font files, so no OFL redistribution obligation arises; we credit them because they are part of what the site delivers to you.

The site also loads Google Analytics 4 (gtag.js) from Google’s servers, gated behind the Klaro consent banner. That is use of a service rather than redistribution of code, so no license obligation attaches; see the Privacy Policy for what it does and how to refuse it. The Kakuremi iOS app contains no analytics of any kind.


Trademarks

Yubico, YubiKey and “Works with YubiKey” are trademarks of Yubico AB. Apple, iPhone, iPad, iCloud, Face ID, Touch ID and App Store are trademarks of Apple Inc. KeePass, KeePassXC, KeePassium and Strongbox are trademarks of their respective owners. Mozilla and Firefox are trademarks of the Mozilla Foundation. Unicode is a trademark of Unicode, Inc. These names are used here only to identify the software and hardware Kakuremi is compatible with, or the components it includes. Their owners have not endorsed, sponsored or reviewed Kakuremi.

The BSD 3-Clause license of subtle and Klaro! forbids using their authors’ names to endorse or promote Kakuremi. Listing them here as dependencies is identification, not endorsement, and we do not present any of the authors named on this page as endorsing Kakuremi.


Full license texts

The licenses we elect require seven distinct texts to be reproduced. Each is given below in full, unaltered except for line wrapping. Licenses that appear in the SPDX expressions above but that we do not elect — 0BSD, Zlib, CC0-1.0, MIT-0, and the Apache-2.0 LLVM exception — are not reproduced, because electing another option means their terms are not the terms under which those components reach you.

MIT License (Expat)

Applies to the 125 components in the MIT table above (which includes the keepass-rs fork), and to GZIP, core-js, Preact and Feather Icons. The text is identical for all of them; the individual copyright notices are in the tables above.

MIT License (Expat) — full text
MIT License

Copyright (c) <the copyright holders named in the tables above>

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all
copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
SOFTWARE.

Apache License, Version 2.0

Applies to yubikit-ios 4.7.0, and to 4 Rust crates.

Apache License, Version 2.0 — full text
                                 Apache License
                           Version 2.0, January 2004
                        http://www.apache.org/licenses/

   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

   1. Definitions.

      "License" shall mean the terms and conditions for use, reproduction,
      and distribution as defined by Sections 1 through 9 of this document.

      "Licensor" shall mean the copyright owner or entity authorized by
      the copyright owner that is granting the License.

      "Legal Entity" shall mean the union of the acting entity and all
      other entities that control, are controlled by, or are under common
      control with that entity. For the purposes of this definition,
      "control" means (i) the power, direct or indirect, to cause the
      direction or management of such entity, whether by contract or
      otherwise, or (ii) ownership of fifty percent (50%) or more of the
      outstanding shares, or (iii) beneficial ownership of such entity.

      "You" (or "Your") shall mean an individual or Legal Entity
      exercising permissions granted by this License.

      "Source" form shall mean the preferred form for making modifications,
      including but not limited to software source code, documentation
      source, and configuration files.

      "Object" form shall mean any form resulting from mechanical
      transformation or translation of a Source form, including but
      not limited to compiled object code, generated documentation,
      and conversions to other media types.

      "Work" shall mean the work of authorship, whether in Source or
      Object form, made available under the License, as indicated by a
      copyright notice that is included in or attached to the work
      (an example is provided in the Appendix below).

      "Derivative Works" shall mean any work, whether in Source or Object
      form, that is based on (or derived from) the Work and for which the
      editorial revisions, annotations, elaborations, or other modifications
      represent, as a whole, an original work of authorship. For the purposes
      of this License, Derivative Works shall not include works that remain
      separable from, or merely link (or bind by name) to the interfaces of,
      the Work and Derivative Works thereof.

      "Contribution" shall mean any work of authorship, including
      the original version of the Work and any modifications or additions
      to that Work or Derivative Works thereof, that is intentionally
      submitted to Licensor for inclusion in the Work by the copyright owner
      or by an individual or Legal Entity authorized to submit on behalf of
      the copyright owner. For the purposes of this definition, "submitted"
      means any form of electronic, verbal, or written communication sent
      to the Licensor or its representatives, including but not limited to
      communication on electronic mailing lists, source code control systems,
      and issue tracking systems that are managed by, or on behalf of, the
      Licensor for the purpose of discussing and improving the Work, but
      excluding communication that is conspicuously marked or otherwise
      designated in writing by the copyright owner as "Not a Contribution."

      "Contributor" shall mean Licensor and any individual or Legal Entity
      on behalf of whom a Contribution has been received by Licensor and
      subsequently incorporated within the Work.

   2. Grant of Copyright License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      copyright license to reproduce, prepare Derivative Works of,
      publicly display, publicly perform, sublicense, and distribute the
      Work and such Derivative Works in Source or Object form.

   3. Grant of Patent License. Subject to the terms and conditions of
      this License, each Contributor hereby grants to You a perpetual,
      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
      (except as stated in this section) patent license to make, have made,
      use, offer to sell, sell, import, and otherwise transfer the Work,
      where such license applies only to those patent claims licensable
      by such Contributor that are necessarily infringed by their
      Contribution(s) alone or by combination of their Contribution(s)
      with the Work to which such Contribution(s) was submitted. If You
      institute patent litigation against any entity (including a
      cross-claim or counterclaim in a lawsuit) alleging that the Work
      or a Contribution incorporated within the Work constitutes direct
      or contributory patent infringement, then any patent licenses
      granted to You under this License for that Work shall terminate
      as of the date such litigation is filed.

   4. Redistribution. You may reproduce and distribute copies of the
      Work or Derivative Works thereof in any medium, with or without
      modifications, and in Source or Object form, provided that You
      meet the following conditions:

      (a) You must give any other recipients of the Work or
          Derivative Works a copy of this License; and

      (b) You must cause any modified files to carry prominent notices
          stating that You changed the files; and

      (c) You must retain, in the Source form of any Derivative Works
          that You distribute, all copyright, patent, trademark, and
          attribution notices from the Source form of the Work,
          excluding those notices that do not pertain to any part of
          the Derivative Works; and

      (d) If the Work includes a "NOTICE" text file as part of its
          distribution, then any Derivative Works that You distribute must
          include a readable copy of the attribution notices contained
          within such NOTICE file, excluding those notices that do not
          pertain to any part of the Derivative Works, in at least one
          of the following places: within a NOTICE text file distributed
          as part of the Derivative Works; within the Source form or
          documentation, if provided along with the Derivative Works; or,
          within a display generated by the Derivative Works, if and
          wherever such third-party notices normally appear. The contents
          of the NOTICE file are for informational purposes only and
          do not modify the License. You may add Your own attribution
          notices within Derivative Works that You distribute, alongside
          or as an addendum to the NOTICE text from the Work, provided
          that such additional attribution notices cannot be construed
          as modifying the License.

      You may add Your own copyright statement to Your modifications and
      may provide additional or different license terms and conditions
      for use, reproduction, or distribution of Your modifications, or
      for any such Derivative Works as a whole, provided Your use,
      reproduction, and distribution of the Work otherwise complies with
      the conditions stated in this License.

   5. Submission of Contributions. Unless You explicitly state otherwise,
      any Contribution intentionally submitted for inclusion in the Work
      by You to the Licensor shall be under the terms and conditions of
      this License, without any additional terms or conditions.
      Notwithstanding the above, nothing herein shall supersede or modify
      the terms of any separate license agreement you may have executed
      with Licensor regarding such Contributions.

   6. Trademarks. This License does not grant permission to use the trade
      names, trademarks, service marks, or product names of the Licensor,
      except as required for reasonable and customary use in describing the
      origin of the Work and reproducing the content of the NOTICE file.

   7. Disclaimer of Warranty. Unless required by applicable law or
      agreed to in writing, Licensor provides the Work (and each
      Contributor provides its Contributions) on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
      implied, including, without limitation, any warranties or conditions
      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
      PARTICULAR PURPOSE. You are solely responsible for determining the
      appropriateness of using or redistributing the Work and assume any
      risks associated with Your exercise of permissions under this License.

   8. Limitation of Liability. In no event and under no legal theory,
      whether in tort (including negligence), contract, or otherwise,
      unless required by applicable law (such as deliberate and grossly
      negligent acts) or agreed to in writing, shall any Contributor be
      liable to You for damages, including any direct, indirect, special,
      incidental, or consequential damages of any character arising as a
      result of this License or out of the use or inability to use the
      Work (including but not limited to damages for loss of goodwill,
      work stoppage, computer failure or malfunction, or any and all
      other commercial damages or losses), even if such Contributor
      has been advised of the possibility of such damages.

   9. Accepting Warranty or Additional Liability. While redistributing
      the Work or Derivative Works thereof, You may choose to offer,
      and charge a fee for, acceptance of support, warranty, indemnity,
      or other liability obligations and/or rights consistent with this
      License. However, in accepting such obligations, You may act only
      on Your own behalf and on Your sole responsibility, not on behalf
      of any other Contributor, and only if You agree to indemnify,
      defend, and hold each Contributor harmless for any liability
      incurred by, or claims asserted against, such Contributor by reason
      of your accepting any such warranty or additional liability.

   END OF TERMS AND CONDITIONS

Mozilla Public License, Version 2.0

Applies to the 8 UniFFI crates and to the generated Swift bindings. See Mozilla Public License components for source-availability information.

Mozilla Public License, Version 2.0 — full text
Mozilla Public License Version 2.0
==================================

1. Definitions
--------------

1.1. "Contributor"
    means each individual or legal entity that creates, contributes to
    the creation of, or owns Covered Software.

1.2. "Contributor Version"
    means the combination of the Contributions of others (if any) used
    by a Contributor and that particular Contributor's Contribution.

1.3. "Contribution"
    means Covered Software of a particular Contributor.

1.4. "Covered Software"
    means Source Code Form to which the initial Contributor has attached
    the notice in Exhibit A, the Executable Form of such Source Code
    Form, and Modifications of such Source Code Form, in each case
    including portions thereof.

1.5. "Incompatible With Secondary Licenses"
    means

    (a) that the initial Contributor has attached the notice described
        in Exhibit B to the Covered Software; or

    (b) that the Covered Software was made available under the terms of
        version 1.1 or earlier of the License, but not also under the
        terms of a Secondary License.

1.6. "Executable Form"
    means any form of the work other than Source Code Form.

1.7. "Larger Work"
    means a work that combines Covered Software with other material, in
    a separate file or files, that is not Covered Software.

1.8. "License"
    means this document.

1.9. "Licensable"
    means having the right to grant, to the maximum extent possible,
    whether at the time of the initial grant or subsequently, any and
    all of the rights conveyed by this License.

1.10. "Modifications"
    means any of the following:

    (a) any file in Source Code Form that results from an addition to,
        deletion from, or modification of the contents of Covered
        Software; or

    (b) any new file in Source Code Form that contains any Covered
        Software.

1.11. "Patent Claims" of a Contributor
    means any patent claim(s), including without limitation, method,
    process, and apparatus claims, in any patent Licensable by such
    Contributor that would be infringed, but for the grant of the
    License, by the making, using, selling, offering for sale, having
    made, import, or transfer of either its Contributions or its
    Contributor Version.

1.12. "Secondary License"
    means either the GNU General Public License, Version 2.0, the GNU
    Lesser General Public License, Version 2.1, the GNU Affero General
    Public License, Version 3.0, or any later versions of those
    licenses.

1.13. "Source Code Form"
    means the form of the work preferred for making modifications.

1.14. "You" (or "Your")
    means an individual or a legal entity exercising rights under this
    License. For legal entities, "You" includes any entity that
    controls, is controlled by, or is under common control with You. For
    purposes of this definition, "control" means (a) the power, direct
    or indirect, to cause the direction or management of such entity,
    whether by contract or otherwise, or (b) ownership of more than
    fifty percent (50%) of the outstanding shares or beneficial
    ownership of such entity.

2. License Grants and Conditions
--------------------------------

2.1. Grants

Each Contributor hereby grants You a world-wide, royalty-free,
non-exclusive license:

(a) under intellectual property rights (other than patent or trademark)
    Licensable by such Contributor to use, reproduce, make available,
    modify, display, perform, distribute, and otherwise exploit its
    Contributions, either on an unmodified basis, with Modifications, or
    as part of a Larger Work; and

(b) under Patent Claims of such Contributor to make, use, sell, offer
    for sale, have made, import, and otherwise transfer either its
    Contributions or its Contributor Version.

2.2. Effective Date

The licenses granted in Section 2.1 with respect to any Contribution
become effective for each Contribution on the date the Contributor first
distributes such Contribution.

2.3. Limitations on Grant Scope

The licenses granted in this Section 2 are the only rights granted under
this License. No additional rights or licenses will be implied from the
distribution or licensing of Covered Software under this License.
Notwithstanding Section 2.1(b) above, no patent license is granted by a
Contributor:

(a) for any code that a Contributor has removed from Covered Software;
    or

(b) for infringements caused by: (i) Your and any other third party's
    modifications of Covered Software, or (ii) the combination of its
    Contributions with other software (except as part of its Contributor
    Version); or

(c) under Patent Claims infringed by Covered Software in the absence of
    its Contributions.

This License does not grant any rights in the trademarks, service marks,
or logos of any Contributor (except as may be necessary to comply with
the notice requirements in Section 3.4).

2.4. Subsequent Licenses

No Contributor makes additional grants as a result of Your choice to
distribute the Covered Software under a subsequent version of this
License (see Section 10.2) or under the terms of a Secondary License (if
permitted under the terms of Section 3.3).

2.5. Representation

Each Contributor represents that the Contributor believes its
Contributions are its original creation(s) or it has sufficient rights
to grant the rights to its Contributions conveyed by this License.

2.6. Fair Use

This License is not intended to limit any rights You have under
applicable copyright doctrines of fair use, fair dealing, or other
equivalents.

2.7. Conditions

Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
in Section 2.1.

3. Responsibilities
-------------------

3.1. Distribution of Source Form

All distribution of Covered Software in Source Code Form, including any
Modifications that You create or to which You contribute, must be under
the terms of this License. You must inform recipients that the Source
Code Form of the Covered Software is governed by the terms of this
License, and how they can obtain a copy of this License. You may not
attempt to alter or restrict the recipients' rights in the Source Code
Form.

3.2. Distribution of Executable Form

If You distribute Covered Software in Executable Form then:

(a) such Covered Software must also be made available in Source Code
    Form, as described in Section 3.1, and You must inform recipients of
    the Executable Form how they can obtain a copy of such Source Code
    Form by reasonable means in a timely manner, at a charge no more
    than the cost of distribution to the recipient; and

(b) You may distribute such Executable Form under the terms of this
    License, or sublicense it under different terms, provided that the
    license for the Executable Form does not attempt to limit or alter
    the recipients' rights in the Source Code Form under this License.

3.3. Distribution of a Larger Work

You may create and distribute a Larger Work under terms of Your choice,
provided that You also comply with the requirements of this License for
the Covered Software. If the Larger Work is a combination of Covered
Software with a work governed by one or more Secondary Licenses, and the
Covered Software is not Incompatible With Secondary Licenses, this
License permits You to additionally distribute such Covered Software
under the terms of such Secondary License(s), so that the recipient of
the Larger Work may, at their option, further distribute the Covered
Software under the terms of either this License or such Secondary
License(s).

3.4. Notices

You may not remove or alter the substance of any license notices
(including copyright notices, patent notices, disclaimers of warranty,
or limitations of liability) contained within the Source Code Form of
the Covered Software, except that You may alter any license notices to
the extent required to remedy known factual inaccuracies.

3.5. Application of Additional Terms

You may choose to offer, and to charge a fee for, warranty, support,
indemnity or liability obligations to one or more recipients of Covered
Software. However, You may do so only on Your own behalf, and not on
behalf of any Contributor. You must make it absolutely clear that any
such warranty, support, indemnity, or liability obligation is offered by
You alone, and You hereby agree to indemnify every Contributor for any
liability incurred by such Contributor as a result of warranty, support,
indemnity or liability terms You offer. You may include additional
disclaimers of warranty and limitations of liability specific to any
jurisdiction.

4. Inability to Comply Due to Statute or Regulation
---------------------------------------------------

If it is impossible for You to comply with any of the terms of this
License with respect to some or all of the Covered Software due to
statute, judicial order, or regulation then You must: (a) comply with
the terms of this License to the maximum extent possible; and (b)
describe the limitations and the code they affect. Such description must
be placed in a text file included with all distributions of the Covered
Software under this License. Except to the extent prohibited by statute
or regulation, such description must be sufficiently detailed for a
recipient of ordinary skill to be able to understand it.

5. Termination
--------------

5.1. The rights granted under this License will terminate automatically
if You fail to comply with any of its terms. However, if You become
compliant, then the rights granted under this License from a particular
Contributor are reinstated (a) provisionally, unless and until such
Contributor explicitly and finally terminates Your grants, and (b) on an
ongoing basis, if such Contributor fails to notify You of the
non-compliance by some reasonable means prior to 60 days after You have
come back into compliance. Moreover, Your grants from a particular
Contributor are reinstated on an ongoing basis if such Contributor
notifies You of the non-compliance by some reasonable means, this is the
first time You have received notice of non-compliance with this License
from such Contributor, and You become compliant prior to 30 days after
Your receipt of the notice.

5.2. If You initiate litigation against any entity by asserting a patent
infringement claim (excluding declaratory judgment actions,
counter-claims, and cross-claims) alleging that a Contributor Version
directly or indirectly infringes any patent, then the rights granted to
You by any and all Contributors for the Covered Software under Section
2.1 of this License shall terminate.

5.3. In the event of termination under Sections 5.1 or 5.2 above, all
end user license agreements (excluding distributors and resellers) which
have been validly granted by You or Your distributors under this License
prior to termination shall survive termination.

************************************************************************
*                                                                      *
*  6. Disclaimer of Warranty                                           *
*  -------------------------                                           *
*                                                                      *
*  Covered Software is provided under this License on an "as is"       *
*  basis, without warranty of any kind, either expressed, implied, or  *
*  statutory, including, without limitation, warranties that the       *
*  Covered Software is free of defects, merchantable, fit for a        *
*  particular purpose or non-infringing. The entire risk as to the     *
*  quality and performance of the Covered Software is with You.        *
*  Should any Covered Software prove defective in any respect, You     *
*  (not any Contributor) assume the cost of any necessary servicing,   *
*  repair, or correction. This disclaimer of warranty constitutes an   *
*  essential part of this License. No use of any Covered Software is   *
*  authorized under this License except under this disclaimer.         *
*                                                                      *
************************************************************************

************************************************************************
*                                                                      *
*  7. Limitation of Liability                                          *
*  --------------------------                                          *
*                                                                      *
*  Under no circumstances and under no legal theory, whether tort      *
*  (including negligence), contract, or otherwise, shall any           *
*  Contributor, or anyone who distributes Covered Software as          *
*  permitted above, be liable to You for any direct, indirect,         *
*  special, incidental, or consequential damages of any character      *
*  including, without limitation, damages for lost profits, loss of    *
*  goodwill, work stoppage, computer failure or malfunction, or any    *
*  and all other commercial damages or losses, even if such party      *
*  shall have been informed of the possibility of such damages. This   *
*  limitation of liability shall not apply to liability for death or   *
*  personal injury resulting from such party's negligence to the       *
*  extent applicable law prohibits such limitation. Some               *
*  jurisdictions do not allow the exclusion or limitation of           *
*  incidental or consequential damages, so this exclusion and          *
*  limitation may not apply to You.                                    *
*                                                                      *
************************************************************************

8. Litigation
-------------

Any litigation relating to this License may be brought only in the
courts of a jurisdiction where the defendant maintains its principal
place of business and such litigation shall be governed by laws of that
jurisdiction, without reference to its conflict-of-law provisions.
Nothing in this Section shall prevent a party's ability to bring
cross-claims or counter-claims.

9. Miscellaneous
----------------

This License represents the complete agreement concerning the subject
matter hereof. If any provision of this License is held to be
unenforceable, such provision shall be reformed only to the extent
necessary to make it enforceable. Any law or regulation which provides
that the language of a contract shall be construed against the drafter
shall not be used to construe this License against a Contributor.

10. Versions of the License
---------------------------

10.1. New Versions

Mozilla Foundation is the license steward. Except as provided in Section
10.3, no one other than the license steward has the right to modify or
publish new versions of this License. Each version will be given a
distinguishing version number.

10.2. Effect of New Versions

You may distribute the Covered Software under the terms of the version
of the License under which You originally received the Covered Software,
or under the terms of any subsequent version published by the license
steward.

10.3. Modified Versions

If you create software not governed by this License, and you want to
create a new license for such software, you may create and use a
modified version of this License if you rename the license and remove
any references to the name of the license steward (except to note that
such modified license differs from this License).

10.4. Distributing Source Code Form that is Incompatible With Secondary
Licenses

If You choose to distribute Source Code Form that is Incompatible With
Secondary Licenses under the terms of this version of the License, the
notice described in Exhibit B of this License must be attached.

Exhibit A - Source Code Form License Notice
-------------------------------------------

  This Source Code Form is subject to the terms of the Mozilla Public
  License, v. 2.0. If a copy of the MPL was not distributed with this
  file, You can obtain one at http://mozilla.org/MPL/2.0/.

If it is not possible or desirable to put the notice in a particular
file, then You may include the notice in a location (such as a LICENSE
file in a relevant directory) where a recipient would be likely to look
for such a notice.

You may add additional accurate notices of copyright ownership.

Exhibit B - "Incompatible With Secondary Licenses" Notice
---------------------------------------------------------

  This Source Code Form is "Incompatible With Secondary Licenses", as
  defined by the Mozilla Public License, v. 2.0.

Unicode License v3

Applies to 19 Rust crates. The text reproduced below is the copy shipped by the 18 ICU4X crates, which carries Copyright © 2020-2024 Unicode, Inc.; unicode-ident ships the same license text under Copyright © 1991-2023 Unicode, Inc. Both notices are reproduced in the table above, as the license requires.

Unicode License v3 — full text
UNICODE LICENSE V3

COPYRIGHT AND PERMISSION NOTICE

Copyright © 2020-2024 Unicode, Inc.

NOTICE TO USER: Carefully read the following legal agreement. BY
DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR
SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE
TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT
DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE.

Permission is hereby granted, free of charge, to any person obtaining a
copy of data files and any associated documentation (the "Data Files") or
software and any associated documentation (the "Software") to deal in the
Data Files or Software without restriction, including without limitation
the rights to use, copy, modify, merge, publish, distribute, and/or sell
copies of the Data Files or Software, and to permit persons to whom the
Data Files or Software are furnished to do so, provided that either (a)
this copyright and permission notice appear with all copies of the Data
Files or Software, or (b) this copyright and permission notice appear in
associated Documentation.

THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY
KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF
THIRD PARTY RIGHTS.

IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE
BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES,
OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA
FILES OR SOFTWARE.

Except as contained in this notice, the name of a copyright holder shall
not be used in advertising or otherwise to promote the sale, use or other
dealings in these Data Files or Software without prior written
authorization of the copyright holder.

SPDX-License-Identifier: Unicode-3.0

—

Portions of ICU4X may have been adapted from ICU4C and/or ICU4J.
ICU 1.8.1 to ICU 57.1 © 1995-2016 International Business Machines Corporation and others.

BSD 2-Clause License

Applies to arrayref.

BSD 2-Clause License (arrayref) — full text
Copyright (c) 2015 David Roundy <roundyd@physics.oregonstate.edu>
All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and/or other materials provided with the
   distribution.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

BSD 3-Clause License

Applies to subtle and to Klaro! — different copyright holders, so both notices are reproduced.

BSD 3-Clause License (subtle) — full text
Copyright (c) 2016-2017 Isis Agora Lovecruft, Henry de Valence. All rights reserved.
Copyright (c) 2016-2024 Isis Agora Lovecruft. All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:

1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.

2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.

3. Neither the name of the copyright holder nor the names of its
contributors may be used to endorse or promote products derived from
this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 
BSD 3-Clause License (Klaro!) — full text
BSD 3-Clause License

Copyright (c) 2019-2020, KIProtect GmbH
Copyright (c) various authors obtainable by running `git shortlog -nse` or
visiting https://github.com/KIProtect/klaro/graphs/contributors
All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:

* Redistributions of source code must retain the above copyright notice, this
  list of conditions and the following disclaimer.

* Redistributions in binary form must reproduce the above copyright notice,
  this list of conditions and the following disclaimer in the documentation
  and/or other materials provided with the distribution.

* Neither the name of the copyright holder nor the names of its
  contributors may be used to endorse or promote products derived from
  this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

The Unlicense

Applies to secstr. No attribution is required; reproduced for completeness.

The Unlicense (secstr) — full text
This is free and unencumbered software released into the public domain.

Anyone is free to copy, modify, publish, use, compile, sell, or
distribute this software, either in source code form or as a compiled
binary, for any purpose, commercial or non-commercial, and by any
means.

In jurisdictions that recognize copyright laws, the author or authors
of this software dedicate any and all copyright interest in the
software to the public domain. We make this dedication for the benefit
of the public at large and to the detriment of our heirs and
successors. We intend this dedication to be an overt act of
relinquishment in perpetuity of all present and future rights to this
software under copyright law.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
OTHER DEALINGS IN THE SOFTWARE.

For more information, please refer to <http://unlicense.org/>

How this list was produced

We would rather this page be checkable than merely confident. Here is exactly how it was built, so that you or we can reproduce it.

1. Enumerate the Rust dependency graph for the shipping target

cd kakuremi-core
cargo tree -p kakuremi-core --edges normal --target aarch64-apple-ios -f '{p}' --prefix none | sed 's/ (\*)$//' | sort -u  # 159
cargo metadata --format-version 1 --filter-platform aarch64-apple-ios

cargo tree yields the 159 entries of the graph, including kakuremi-core itself. The sed step removes the (*) marker cargo appends to de-duplicated repeat subtrees; without it sort -u keeps foo v1.0 and foo v1.0 (*) as two distinct lines and the command reports 197. cargo metadata supplies each crate’s declared SPDX expression and repository. Copyright notices were read from every LICENSE*, COPYRIGHT, COPYING and NOTICE file each crate ships in the local registry — not from Cargo.toml authors, because authors and copyright holders are not the same thing, and not from the elected license file alone, because several crates carry their notice only in a sibling file. Notices without a year (for example Copyright Mozilla Foundation) are matched, and where a license file names several holders all of them are reproduced.

2. Separate what is shipped from what is only built with

A Rust static library contains object files for build-time tooling that the linker then discards, so inspecting the .a archive over-reports. We therefore inspected the linked binaries instead:

ar t libkakuremi_core.a | wc -l  # 774 archive members — over-inclusive
nm Kakuremi.app/Kakuremi.debug.dylib  # symbols that actually survived linking
nm Kakuremi.app/PlugIns/AutoFillExtension.appex/AutoFillExtension.debug.dylib
strings <binary> | grep -E 'uniffi-bindgen|clap_builder|askama|goblin'  # 0 hits in shipped binaries

Symbols were attributed to crates by their first mangled path element, and cross-checked between the main app and the AutoFill extension, which agreed. Generic-only crates legitimately leave no symbols of their own because they are monomorphized into their callers, so we classify those as shipped rather than as absent. Symbol evidence was taken from a debug build; the linker’s archive-member selection is the same in release, which additionally dead-strips, so this method can over-report but not under-report.

3. Enumerate the iOS and website components

Package.resolved  # one pin: yubikit-ios 4.7.0, revision 2c4206263763743a2f1ca3309b87432588be637f
find <yubikit checkout> -iname 'NOTICE*' -not -path '*/.git/*'  # 0 results
git -C <yubikit checkout> log --all -- NOTICE  # 0 results
find ~/.cargo/registry/src/*/ -maxdepth 2 -iname 'NOTICE*'  # 0 results
strings Kakuremi.xcarchive/.../Kakuremi | grep -E 'gzippedData|MF_Base32Codec'  # both present

Website components were identified from the served files themselves: the jsDelivr banner and version string in klaro.min.js, the core-js copyright banner it preserves, Preact’s compat fingerprints, and byte-for-byte comparison of inline SVG path data against the Feather Icons set.

4. Known limits of this method

Symbol inspection identifies code that reaches the binary; it cannot prove the absence of a component that leaves no symbols and is fully inlined. That is why we resolve every uncertainty by listing the component rather than omitting it. Vendored code inside a dependency — such as the two files inside yubikit-ios — appears in no package manifest and can only be found by reading the dependency’s source, which is a step that automated license tooling does not take. We re-run these checks, including the NOTICE searches, at each release.


Where these notices appear

This page lists the third-party components included in the Kakuremi iOS application and served by this website, together with their copyright notices and the full text of their licenses. It is maintained per release and applies to the app version stated at the top.

Since Kakuremi for iOS 1.4.0 (build 51), the app itself links to this page: in Settings, under the About section, an “Open Source Licenses” row opens this page in the browser. Every copy of the app from that version onward therefore carries a direct route to these notices, rather than leaving them to be found on the web. The notices are not reproduced a second time inside the app; this page is what that row opens, and it remains the complete and authoritative listing.

Changes to this page

We update this page for each App Store release. Entries for previous releases are kept rather than replaced, because notices and source-availability commitments continue to apply to copies that have already been distributed.


Contact

For attribution corrections, license questions, or a request for the source code of any MPL-2.0 component in a Kakuremi build:

SpringHiker Inc.
Email: support@kakuremi.com