Open Source Licenses
Last updated: August 3, 2026 · Applies to Kakuremi for iOS 1.4.0 (build 51)
Kakuremi is built on top of open source software. This page lists every third-party component that we distribute inside the Kakuremi iOS app or serve from kakuremi.com, together with the copyright notices and the full license texts that those licenses require us to reproduce.
Kakuremi itself is not open source. The iOS app and its Rust core are proprietary software owned by SpringHiker Inc. Nothing on this page changes that, and nothing on this page grants you rights in Kakuremi’s own code. What it does is credit the work of others and pass on the rights that their licenses give you in their code.
This page is about attribution and licensing only. It changes nothing about how Kakuremi handles your data — the app still transmits nothing about your vault to us or to anyone else. See the Privacy Policy for that.
How to read this page
What is listed
Three things are listed here: the Rust crates that are compiled into Kakuremi’s core library, the iOS libraries that are linked into the app binary, and the JavaScript, CSS and icon assets that this website serves. Each entry gives the component name, the exact version, the license as the publisher declared it, the copyright notice, and a link to the upstream source.
We list more than we strictly ship
The Rust dependency graph, as enumerated for the shipping target with --edges normal, contains 158 third-party crates. We verified which of them actually survive linking into the shipped binary (see How this list was produced), and the result is: 89 are present in the app, 65 are used only by build-time tooling and are stripped by the linker, and 4 could not be settled with certainty. We list all of them anyway. The In app column records what we found, but an entry marked “Build tooling” is still credited here, because crediting a component we do not ship costs nothing and omitting one we do ship would be a real failure.
The four uncertain crates (serde_json, itoa, memchr, zmij) reach the dependency graph through an optional feature, are not referenced by any code path we call, and leave no symbols in the shipped binary — but a future change to our own code could pull them in. They are credited as though we ship them.
Three further crates — autocfg 1.5.0, version_check 0.9.5 and uniffi_build 0.29.5 — are reachable only as build-script dependencies (--edges build). They run on the build machine, no part of them can reach a distributed artifact, and they are therefore outside the 158 above. We name them here so that the count is reproducible either way.
License election
Many components are offered under a choice of licenses. Where a choice is available, Kakuremi elects MIT if MIT is among the options; otherwise Apache-2.0; otherwise the first permissive option offered. The tables below record the license exactly as the publisher declared it, and group components by the license we elect, so you can see both the full set of terms the publisher offers and the terms under which the component reaches you in Kakuremi.
One exception is deliberate. constant_time_eq is offered as CC0-1.0 OR MIT-0 OR Apache-2.0. MIT is not among the options, and CC0-1.0 expressly withholds any patent license, so for cryptographic code we elect Apache-2.0 and take its express patent grant.
Where a license expression joins terms with AND rather than OR, all of the joined terms apply and we comply with all of them. unicode-ident declares (MIT OR Apache-2.0) AND Unicode-3.0; electing MIT does not avoid the Unicode-3.0 obligations, so it appears in both the MIT and the Unicode-3.0 table below. That is why the group totals add up to one more than the number of distinct components.
Something missing or wrong?
If a component is credited incorrectly, or is not credited at all, please write to support@kakuremi.com and we will correct this page.
Kakuremi’s own code
Two Kakuremi components deserve a plain description, because their status is easy to misread.
kakuremi-core
kakuremi-core is the Rust library that reads and writes KDBX databases, derives keys, generates passwords and computes TOTP codes. It is our own work, it carries an MIT license file internally, and it is not currently published. Please do not read “MIT” here as “open source”: the source is not available to the public today, and until we publish it, the MIT text in the repository has no effect on anyone outside SpringHiker Inc. If we publish it, we will say so here.
keepass-rs (fork)
Kakuremi’s KDBX parsing builds on keepass-rs by Stefan Seemayer, which is MIT-licensed. We use a modified fork of it. Our fork is based on upstream v0.7.0 and adds bug fixes to KDBX reading and writing (HMAC block-stream framing, KeyFile v2.0 handling, tag parsing, attachment round-tripping, AES-256 padding). The fork is not currently published. The MIT license does not require us to publish modifications, but it does require the original copyright notice to travel with the code, so:
keepass-rs — MIT License — Copyright (c) 2019 Stefan Seemayer — https://github.com/sseemayer/keepass-rs
The full MIT text is in Full license texts. Kakuremi is a KDBX-compatible application; it is not affiliated with, endorsed by, or derived from the KeePass project itself.
Mozilla Public License 2.0 components
Kakuremi uses UniFFI to generate the bridge between the Rust core and Swift. UniFFI is licensed under the Mozilla Public License, v. 2.0 (“MPL-2.0”), and its runtime is compiled into the shipped app. MPL-2.0 is the one license on this page that asks for something beyond attribution, so it gets its own section.
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
uniffi |
0.29.5 | MPL-2.0 | Yes | No LICENSE file in the published crate. | crates.io |
uniffi_bindgen |
0.29.5 | MPL-2.0 | Build tooling | No LICENSE file in the published crate. | crates.io |
uniffi_core |
0.29.5 | MPL-2.0 | Yes | No LICENSE file in the published crate. | crates.io |
uniffi_internal_macros |
0.29.5 | MPL-2.0 | Build tooling | No LICENSE file in the published crate. | crates.io |
uniffi_macros |
0.29.5 | MPL-2.0 | Build tooling | No LICENSE file in the published crate. | crates.io |
uniffi_meta |
0.29.5 | MPL-2.0 | Build tooling | No LICENSE file in the published crate. | crates.io |
uniffi_pipeline |
0.29.5 | MPL-2.0 | Build tooling | No LICENSE file in the published crate. | crates.io |
uniffi_udl |
0.29.5 | MPL-2.0 | Build tooling | No LICENSE file in the published crate. | crates.io |
Of these, uniffi and uniffi_core are linked into the shipped app binary; the remaining six run only at build time and are stripped by the linker. We list all eight, since they are the same project at the same version.
Portions of the Swift binding layer that ships inside Kakuremi (KakuremiCoreBindings.swift) are generated by uniffi_bindgen from its MPL-2.0 templates. We treat that generated code as covered by MPL-2.0 as well.
We have not modified these components
Kakuremi uses the crates.io releases of the exact versions listed above, byte for byte, with no patches applied.
How to obtain the source code
The complete Source Code Form for every version listed above is publicly available at github.com/mozilla/uniffi-rs (tag v0.29.5) and from the crates.io registry, for example crates.io/crates/uniffi/0.29.5. In addition, and as required by MPL-2.0 §3.2(a), we will provide a copy of the Source Code Form for any MPL-2.0 component distributed in a Kakuremi build to any recipient of that build, by a reasonable means and at no more than the cost of distribution. Write to support@kakuremi.com with the app version shown in Settings, under the About section.
Scope of the license
MPL-2.0 applies file by file. It expressly permits the covered files to be combined with, and distributed as part of, a Larger Work under different terms (MPL-2.0 §3.3), so the license of these components does not extend to Kakuremi’s own code. Kakuremi is proprietary software; the license terms of the Kakuremi application do not and cannot limit or alter any recipient’s rights in the Source Code Form of the MPL-2.0 components listed above (MPL-2.0 §3.2(b)). If the two ever conflict as to those components, MPL-2.0 prevails.
The full text of the Mozilla Public License, v. 2.0 is reproduced in Full license texts, and is also available at mozilla.org/MPL/2.0/.
iOS application components
Besides the Rust core, the iOS app links one third-party Swift/Objective-C package. It has no package dependencies of its own, but it does vendor two components written by other authors, and both are compiled into the shipped binary.
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
yubikit-ios | 4.7.0 | Apache-2.0 | Yes | Copyright 2018–2025 Yubico AB | GitHub |
GZIP (NSData+GZIP)vendored inside yubikit-ios · created by Nick Lockwood | 1.3.0 | MIT | Yes | Copyright (C) 2012 Charcoal Design | GitHub |
MF_Base32Additionsvendored inside yubikit-ios | — | Public domain (declared in file header) | Yes | Dave Poirier, 2012 — released into the public domain | GitHub |
The GZIP and Base32 files live in YubiKit/YubiKit/ThirdParties/ inside the yubikit-ios package. They do not appear in any package manifest, so tooling that reads only dependency metadata will miss them. We verified that both are compiled into the release binary. Describing yubikit-ios as “Apache-2.0 only” would therefore be inaccurate.
Apache-2.0 NOTICE files
Apache-2.0 §4(d) requires a redistributor to reproduce the attribution notices from a NOTICE file, if the work includes one. We checked every Apache-2.0 component we ship — yubikit-ios 4.7.0, rpassword 7.4.0, rtoolbox 0.0.3 and constant_time_eq 0.3.1 / 0.4.2 — and none of them contains a NOTICE file (for yubikit-ios we also confirmed that no NOTICE file has ever existed in its git history). There are therefore no additional attribution notices to reproduce under §4(d). Their copyright attributions appear in the tables on this page, and the full Apache-2.0 text is reproduced below as §4(a) requires.
Apple frameworks
Kakuremi uses Apple’s system frameworks, the SF Pro system font and SF Symbols icons through the public iOS APIs. Apple does not require attribution for that use, and Kakuremi does not redistribute any Apple asset. The app bundles no custom fonts. NSData+GZIP links against the system zlib at /usr/lib/libz.1.dylib; that library is supplied by iOS and is not redistributed by us.
Rust core components
These are the crates in the dependency graph of Kakuremi’s Rust core, resolved for the aarch64-apple-ios target, grouped by the license we elect. The Declared license column reproduces the publisher’s own SPDX expression; the In app column records whether we found the crate in the shipped binary.
MIT License — 125 components
License we elect: MIT. Full text in Full license texts. A few crates ship the MIT text without a copyright line; for those we name the publisher instead, as recorded in the crate’s own metadata.
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
adler2 |
2.0.1 | 0BSD OR MIT OR Apache-2.0 | Yes | Copyright (C) Jonas Schievink <jonasschievink@gmail.com> from the crate’s LICENSE-0BSD; its MIT file carries no notice |
crates.io |
aes |
0.8.4 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018 Artyom Pavlov | crates.io |
anstream |
1.0.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
anstyle |
1.0.14 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
anstyle-parse |
1.0.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
anstyle-query |
1.1.5 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
anyhow |
1.0.102 | MIT OR Apache-2.0 | Yes | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
arrayvec |
0.7.6 | MIT OR Apache-2.0 | Yes | Copyright (c) Ulrik Sverdrup "bluss" 2015-2023 | crates.io |
askama |
0.13.1 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2017-2020 Dirkjan Ochtman | crates.io |
askama_derive |
0.13.1 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2017-2020 Dirkjan Ochtman | crates.io |
askama_parser |
0.13.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2017-2020 Dirkjan Ochtman | crates.io |
base32 |
0.4.0 | MIT OR Apache-2.0 | Yes | Copyright (c) 2015 The base32 Developers | crates.io |
base64 |
0.21.7 | MIT OR Apache-2.0 | Yes | Copyright (c) 2015 Alice Maz | crates.io |
basic-toml |
0.1.10 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Alex Crichton, David Tolnay. | crates.io |
bitflags |
2.11.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2014 The Rust Project Developers | crates.io |
blake2b_simd |
1.0.4 | MIT | Yes | No LICENSE file in the published crate; published by Jack O'Connor. | crates.io |
block-buffer |
0.10.4 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018-2019 The RustCrypto Project Developers | crates.io |
block-modes |
0.9.1 | MIT OR Apache-2.0 | Yes | No LICENSE file in the published crate; published by RustCrypto Developers. | crates.io |
block-padding |
0.3.3 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018-2019 The RustCrypto Project Developers | crates.io |
byteorder |
1.5.0 | Unlicense OR MIT | Yes | Copyright (c) 2015 Andrew Gallant | crates.io |
bytes |
1.11.1 | MIT | Yes | Copyright (c) 2018 Carl Lerche | crates.io |
camino |
1.2.2 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Without Boats, Ashley Williams. | crates.io |
cargo-platform |
0.1.9 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file. | crates.io |
cargo_metadata |
0.19.2 | MIT | Build tooling | No copyright line in the crate’s MIT license file; published by Oliver Schneider. | crates.io |
cbc |
0.1.2 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018-2022 RustCrypto Developers / Copyright (c) 2018 Artyom Pavlov | crates.io |
cfg-if |
1.0.4 | MIT OR Apache-2.0 | Yes | Copyright (c) 2014 Alex Crichton | crates.io |
chacha20 |
0.9.1 | Apache-2.0 OR MIT | Yes | Copyright (c) 2019-2023 The RustCrypto Project Developers | crates.io |
chrono |
0.4.44 | MIT OR Apache-2.0 | Yes | Copyright (c) 2014--2026, Kang Seonghoon and contributors. / Copyright (c) 2014, Kang Seonghoon. | crates.io |
cipher |
0.4.4 | MIT OR Apache-2.0 | Yes | Copyright (c) 2016-2020 RustCrypto Developers | crates.io |
clap |
4.6.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
clap_builder |
4.6.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
clap_derive |
4.6.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
clap_lex |
1.1.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
colorchoice |
1.0.5 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
core-foundation-sys |
0.8.7 | MIT OR Apache-2.0 | Yes | Copyright (c) 2012-2013 Mozilla Foundation | crates.io |
cpufeatures |
0.2.17 | MIT OR Apache-2.0 | Yes | Copyright (c) 2020-2025 The RustCrypto Project Developers | crates.io |
crc32fast |
1.5.0 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018 Sam Rijs, Alex Crichton and contributors | crates.io |
crypto-common |
0.1.7 | MIT OR Apache-2.0 | Yes | Copyright (c) 2021 RustCrypto Developers | crates.io |
digest |
0.10.7 | MIT OR Apache-2.0 | Yes | Copyright (c) 2017 Artyom Pavlov | crates.io |
displaydoc |
0.2.5 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Jane Lusby. | crates.io |
equivalent |
1.0.2 | Apache-2.0 OR MIT | Build tooling | Copyright (c) 2016--2023 | crates.io |
errno |
0.3.14 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2014 Chris Wong | crates.io |
fastrand |
2.4.1 | Apache-2.0 OR MIT | Build tooling | No copyright line in the crate’s MIT license file; published by Stjepan Glavina. | crates.io |
flate2 |
1.1.9 | MIT OR Apache-2.0 | Yes | Copyright (c) 2014-2026 Alex Crichton | crates.io |
form_urlencoded |
1.2.2 | MIT OR Apache-2.0 | Yes | Copyright (c) 2013-2016 The rust-url developers | crates.io |
fs-err |
2.11.0 | MIT/Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Andrew Hickman. | crates.io |
generic-array |
0.14.7 | MIT | Yes | Copyright (c) 2015 Bartłomiej Kamiński | crates.io |
getrandom |
0.2.17 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018-2024 The rust-random Project Developers / Copyright (c) 2014 The Rust Project Developers | crates.io |
getrandom |
0.3.4 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018-2025 The rust-random Project Developers / Copyright (c) 2014 The Rust Project Developers | crates.io |
getrandom |
0.4.2 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018-2026 The rust-random Project Developers / Copyright (c) 2014 The Rust Project Developers | crates.io |
glob |
0.3.3 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2014 The Rust Project Developers | crates.io |
goblin |
0.8.2 | MIT | Build tooling | Copyright (c) m4b 2016-2024 | crates.io |
hashbrown |
0.16.1 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2016 Amanieu d'Antras | crates.io |
heck |
0.5.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2015 The Rust Project Developers | crates.io |
hex |
0.4.3 | MIT OR Apache-2.0 | Yes | Copyright (c) 2013-2014 The Rust Project Developers. / Copyright (c) 2015-2020 The rust-hex Developers | crates.io |
hex-literal |
0.4.1 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018 Artyom Pavlov / Copyright (c) 2018 The RustCrypto Project Developers | crates.io |
hmac |
0.12.1 | MIT OR Apache-2.0 | Yes | Copyright (c) 2017 Artyom Pavlov | crates.io |
iana-time-zone |
0.1.65 | MIT OR Apache-2.0 | Yes | Copyright (c) 2020 Andrew D. Straw | crates.io |
idna |
1.1.0 | MIT OR Apache-2.0 | Yes | Copyright (c) 2013-2025 The rust-url developers | crates.io |
idna_adapter |
1.2.1 | Apache-2.0 OR MIT | Yes | Copyright (c) The rust-url developers | crates.io |
indexmap |
2.13.1 | Apache-2.0 OR MIT | Build tooling | Copyright (c) 2016--2017 | crates.io |
inout |
0.1.4 | MIT OR Apache-2.0 | Yes | Copyright (c) 2022 The RustCrypto Project Developers / Copyright (c) 2022 Artyom Pavlov | crates.io |
is_terminal_polyfill |
1.70.2 | MIT OR Apache-2.0 | Build tooling | Copyright (c) Individual contributors | crates.io |
itoa |
1.0.18 | MIT OR Apache-2.0 | Uncertain | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
keepass |
fork of upstream v0.7.0 | MIT | Yes | Copyright (c) 2019 Stefan Seemayer | sseemayer/keepass-rs |
libc |
0.2.184 | MIT OR Apache-2.0 | Yes | Copyright (c) The Rust Project Developers | crates.io |
log |
0.4.29 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2014 The Rust Project Developers | crates.io |
memchr |
2.8.0 | Unlicense OR MIT | Uncertain | Copyright (c) 2015 Andrew Gallant | crates.io |
minimal-lexical |
0.2.1 | MIT/Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Alex Huszagh. portions Copyright (c) 2009 The Go Authors, All rights reserved — BSD-3-Clause, LICENSE.md |
crates.io |
miniz_oxide |
0.8.9 | MIT OR Zlib OR Apache-2.0 | Yes | Copyright 2013-2014 RAD Game Tools and Valve Software / Copyright 2010-2014 Rich Geldreich and Tenacious Software LLC / Copyright (c) 2017 Frommi / Copyright (c) 2017-2024 oyvindln | crates.io |
nom |
7.1.3 | MIT | Build tooling | Copyright (c) 2014-2019 Geoffroy Couprie | crates.io |
num-traits |
0.2.19 | MIT OR Apache-2.0 | Yes | Copyright (c) 2014 The Rust Project Developers | crates.io |
once_cell |
1.21.4 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Aleksey Kladov. | crates.io |
percent-encoding |
2.3.2 | MIT OR Apache-2.0 | Yes | Copyright (c) 2013-2025 The rust-url developers | crates.io |
plain |
0.2.3 | MIT/Apache-2.0 | Build tooling | Copyright (c) 2017 Plain contributors | crates.io |
ppv-lite86 |
0.2.21 | MIT OR Apache-2.0 | Yes | Copyright (c) 2019 The CryptoCorrosion Contributors | crates.io |
proc-macro2 |
1.0.106 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay, Alex Crichton. | crates.io |
quote |
1.0.45 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
rand |
0.9.2 | MIT OR Apache-2.0 | Yes | Copyright 2018 Developers of the Rand project / Copyright (c) 2014 The Rust Project Developers | crates.io |
rand_chacha |
0.9.0 | MIT OR Apache-2.0 | Yes | Copyright 2018 Developers of the Rand project / Copyright (c) 2014 The Rust Project Developers | crates.io |
rand_core |
0.9.5 | MIT OR Apache-2.0 | Yes | Copyright 2018 Developers of the Rand project / Copyright (c) 2014 The Rust Project Developers | crates.io |
rust-argon2 |
2.1.0 | MIT/Apache-2.0 | Yes | Copyright (c) 2017 Martijn Rijkeboer <mrr@sru-systems.com> | crates.io |
rustc-hash |
2.1.2 | Apache-2.0 OR MIT | Build tooling | No copyright line in the crate’s MIT license file; published by The Rust Project Developers. | crates.io |
rustix |
1.1.4 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | Build tooling | No copyright line in the crate’s MIT license file; published by Dan Gohman, Jakub Konka. | crates.io |
salsa20 |
0.10.2 | MIT OR Apache-2.0 | Yes | Copyright (c) 2019 Eric McCorkle | crates.io |
scroll |
0.12.0 | MIT | Build tooling | Copyright (c) m4b 2016 | crates.io |
scroll_derive |
0.12.1 | MIT | Build tooling | Copyright (c) 2017 | crates.io |
semver |
1.0.28 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
serde |
1.0.228 | MIT OR Apache-2.0 | Yes | No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. | crates.io |
serde_core |
1.0.228 | MIT OR Apache-2.0 | Yes | No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. | crates.io |
serde_derive |
1.0.228 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. | crates.io |
serde_json |
1.0.149 | MIT OR Apache-2.0 | Uncertain | No copyright line in the crate’s MIT license file; published by Erick Tryzelaar, David Tolnay. | crates.io |
sha1 |
0.10.6 | MIT OR Apache-2.0 | Yes | Copyright (c) 2006-2009 Graydon Hoare / Copyright (c) 2009-2013 Mozilla Foundation / Copyright (c) 2016 Artyom Pavlov | crates.io |
sha2 |
0.10.9 | MIT OR Apache-2.0 | Yes | Copyright (c) 2006-2009 Graydon Hoare / Copyright (c) 2009-2013 Mozilla Foundation / Copyright (c) 2016 Artyom Pavlov | crates.io |
simd-adler32 |
0.3.9 | MIT | Yes | Copyright (c) [2021] [Marvin Countryman] | crates.io |
siphasher |
0.3.11 | MIT/Apache-2.0 | Build tooling | Copyright 2012-2016 The Rust Project Developers. / Copyright 2016-2023 Frank Denis. | crates.io |
smallvec |
1.15.1 | MIT OR Apache-2.0 | Yes | Copyright (c) 2018 The Servo Project Developers | crates.io |
smawk |
0.3.2 | MIT | Build tooling | Copyright (c) 2017 Martin Geisler | crates.io |
stable_deref_trait |
1.2.1 | MIT OR Apache-2.0 | Yes | Copyright (c) 2017 Robert Grosse | crates.io |
static_assertions |
1.1.0 | MIT OR Apache-2.0 | Yes | Copyright (c) 2017 Nikolai Vazquez | crates.io |
strsim |
0.11.1 | MIT | Build tooling | Copyright (c) 2015 Danny Guo / Copyright (c) 2016 Titus Wormer <tituswormer@gmail.com> / Copyright (c) 2018 Akash Kurdekar | crates.io |
syn |
2.0.117 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
synstructure |
0.13.2 | MIT | Build tooling | Copyright 2016 Nika Layzell | crates.io |
tempfile |
3.27.0 | MIT OR Apache-2.0 | Build tooling | Copyright (c) 2015 Steven Allen | crates.io |
textwrap |
0.16.2 | MIT | Build tooling | Copyright (c) 2016 Martin Geisler | crates.io |
thiserror |
1.0.69 | MIT OR Apache-2.0 | Yes | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
thiserror |
2.0.18 | MIT OR Apache-2.0 | Yes | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
thiserror-impl |
1.0.69 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
thiserror-impl |
2.0.18 | MIT OR Apache-2.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
toml |
0.5.11 | MIT/Apache-2.0 | Build tooling | Copyright (c) 2014 Alex Crichton | crates.io |
totp-lite |
2.0.1 | MIT | Yes | Copyright (c) 2020 - 2021 Colin Woodbury | crates.io |
twofish |
0.7.1 | MIT OR Apache-2.0 | Yes | Copyright (c) 2017 Alexander Krotov | crates.io |
typenum |
1.19.0 | MIT OR Apache-2.0 | Yes | Copyright (c) 2014 Paho Lurie-Gregg | crates.io |
unicode-ident |
1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | Build tooling | No copyright line in the crate’s MIT license file; published by David Tolnay. its Unicode-3.0 notice is in the Unicode table below |
crates.io |
url |
2.5.8 | MIT OR Apache-2.0 | Yes | Copyright (c) 2013-2025 The rust-url developers | crates.io |
utf8_iter |
1.0.4 | Apache-2.0 OR MIT | Yes | Copyright Mozilla Foundation | crates.io |
utf8parse |
0.2.2 | Apache-2.0 OR MIT | Build tooling | Copyright (c) 2016 Joe Wilm | crates.io |
uuid |
1.23.0 | Apache-2.0 OR MIT | Yes | Copyright (c) 2014 The Rust Project Developers / Copyright (c) 2018 Ashley Mannix, Christopher Armstrong, Dylan DPC, Hunar Roop Kahlon | crates.io |
weedle2 |
5.0.0 | MIT | Build tooling | Copyright 2018-Present Sharad Chand / Copyright 2022 Jan-Erik Rediger | crates.io |
winnow |
0.7.15 | MIT | Build tooling | No copyright line in the crate’s MIT license file. | crates.io |
xml-rs |
0.8.28 | MIT | Yes | Copyright (c) 2014 Vladimir Matveev | crates.io |
zerocopy |
0.8.48 | BSD-2-Clause OR Apache-2.0 OR MIT | Yes | Copyright 2023 The Fuchsia Authors | crates.io |
zeroize |
1.8.2 | Apache-2.0 OR MIT | Yes | Copyright (c) 2018-2021 The RustCrypto Project Developers | crates.io |
zeroize_derive |
1.4.3 | Apache-2.0 OR MIT | Build tooling | Copyright (c) 2019-2023 The RustCrypto Project Developers | crates.io |
zmij |
1.0.21 | MIT | Uncertain | No copyright line in the crate’s MIT license file; published by David Tolnay. | crates.io |
Unicode License v3 — 19 components
These are the ICU4X internationalization crates, which reach us through url → idna for domain-name handling in KDBX entries. We confirmed that the ICU4X normalization code is genuinely linked into the shipped app, so the Unicode-3.0 notice below is required rather than precautionary. Unicode-3.0 requires its copyright and permission notice to appear in the associated documentation, which is what this page is.
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
icu_collections |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
icu_locale_core |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
icu_normalizer |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
icu_normalizer_data |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
icu_properties |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
icu_properties_data |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
icu_provider |
2.2.0 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
litemap |
0.8.2 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
potential_utf |
0.1.5 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
tinystr |
0.8.3 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
unicode-ident |
1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | Build tooling | Copyright © 1991-2023 Unicode, Inc. from the crate’s LICENSE-UNICODE |
crates.io |
writeable |
0.6.3 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
yoke |
0.8.2 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
yoke-derive |
0.8.2 | Unicode-3.0 | Build tooling | Copyright © 2020-2024 Unicode, Inc. | crates.io |
zerofrom |
0.1.7 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
zerofrom-derive |
0.1.7 | Unicode-3.0 | Build tooling | Copyright © 2020-2024 Unicode, Inc. | crates.io |
zerotrie |
0.2.4 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
zerovec |
0.11.6 | Unicode-3.0 | Yes | Copyright © 2020-2024 Unicode, Inc. | crates.io |
zerovec-derive |
0.11.3 | Unicode-3.0 | Build tooling | Copyright © 2020-2024 Unicode, Inc. | crates.io |
Apache License 2.0 — 4 components
License we elect: Apache-2.0. rpassword and rtoolbox are offered under Apache-2.0 only. constant_time_eq offers a choice; we elect Apache-2.0 for its express patent grant, as explained above.
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
constant_time_eq |
0.3.1 | CC0-1.0 OR MIT-0 OR Apache-2.0 | Yes | No copyright line in the crate’s Apache-2.0 license file; published by Cesar Eduardo Barros. | crates.io |
constant_time_eq |
0.4.2 | CC0-1.0 OR MIT-0 OR Apache-2.0 | Yes | No copyright line in the crate’s Apache-2.0 license file; published by Cesar Eduardo Barros. | crates.io |
rpassword |
7.4.0 | Apache-2.0 | Yes | No copyright line in the crate’s Apache-2.0 license file; published by Conrad Kleinespel. | crates.io |
rtoolbox |
0.0.3 | Apache-2.0 | Yes | No copyright line in the crate’s Apache-2.0 license file; published by Conrad Kleinespel. | crates.io |
BSD 2-Clause License — 1 component
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
arrayref |
0.3.9 | BSD-2-Clause | Yes | Copyright (c) 2015 David Roundy <roundyd@physics.oregonstate.edu> | crates.io |
BSD 3-Clause License — 1 component
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
subtle |
2.6.1 | BSD-3-Clause | Yes | Copyright (c) 2016-2017 Isis Agora Lovecruft, Henry de Valence. All rights reserved. / Copyright (c) 2016-2024 Isis Agora Lovecruft. All rights reserved. | crates.io |
The Unlicense — 1 component
secstr is dedicated to the public domain and requires no attribution at all. We list it for completeness.
| Component | Version | Declared license (SPDX) | In app | Copyright notice | Source |
|---|---|---|---|---|---|
secstr |
0.5.1 | Unlicense | Yes | No copyright line in the crate’s Unlicense file; published by Val Packett. | crates.io |
Mozilla Public License 2.0 — 8 components
Listed in full in the Mozilla Public License components section above, together with the source-availability information that MPL-2.0 requires.
Website components
kakuremi.com is a static site. It serves the following third-party code and assets from our own servers, which makes us a redistributor of them.
| Component | Version | Declared license (SPDX) | Copyright notice | Source |
|---|---|---|---|---|
Klaro! (consent manager) | 0.7.22 | BSD-3-Clause | Copyright (c) 2019–2020, KIProtect GmbH; and various authors | GitHub |
core-jsbundled inside klaro.min.js | 3.36.0 | MIT | Copyright (c) 2014–2024 Denis Pushkarev | GitHub |
Preactbundled inside klaro.min.js | 10.19.6 | MIT | Copyright (c) 2015–present Jason Miller | GitHub |
Feather Iconsinlined as SVG paths | — | MIT | Copyright (c) 2013–2023 Cole Bemis | GitHub |
We self-host klaro.min.js and klaro.min.css rather than loading them from a CDN, so the BSD-3-Clause notice above is reproduced here as the license requires for binary redistribution. core-js and Preact are bundled inside that file by Klaro’s build; they carry no separate license header in the minified output, so we identified them from the copyright banner core-js leaves in place (which states 3.36.0) and from Preact’s compat fingerprints. Preact leaves no version string in the bundle: 10.19.6 is read from Klaro 0.7.22’s own dependency manifest, not from the served file, and only the license and copyright holder are verifiable from the bundle itself. Several icons on this site are inlined Feather SVG paths with no attribution comment in the markup; that is our omission in the markup, corrected here.
Web fonts and analytics
The site uses Inter (SIL Open Font License 1.1, © The Inter Project Authors) and Noto Sans JP / Noto Sans SC (SIL Open Font License 1.1, © Google LLC and the Noto Project Authors), loaded from Google Fonts. We do not host or redistribute the font files, so no OFL redistribution obligation arises; we credit them because they are part of what the site delivers to you.
The site also loads Google Analytics 4 (gtag.js) from Google’s servers, gated behind the Klaro consent banner. That is use of a service rather than redistribution of code, so no license obligation attaches; see the Privacy Policy for what it does and how to refuse it. The Kakuremi iOS app contains no analytics of any kind.
Trademarks
Yubico, YubiKey and “Works with YubiKey” are trademarks of Yubico AB. Apple, iPhone, iPad, iCloud, Face ID, Touch ID and App Store are trademarks of Apple Inc. KeePass, KeePassXC, KeePassium and Strongbox are trademarks of their respective owners. Mozilla and Firefox are trademarks of the Mozilla Foundation. Unicode is a trademark of Unicode, Inc. These names are used here only to identify the software and hardware Kakuremi is compatible with, or the components it includes. Their owners have not endorsed, sponsored or reviewed Kakuremi.
The BSD 3-Clause license of subtle and Klaro! forbids using their authors’ names to endorse or promote Kakuremi. Listing them here as dependencies is identification, not endorsement, and we do not present any of the authors named on this page as endorsing Kakuremi.
Full license texts
The licenses we elect require seven distinct texts to be reproduced. Each is given below in full, unaltered except for line wrapping. Licenses that appear in the SPDX expressions above but that we do not elect — 0BSD, Zlib, CC0-1.0, MIT-0, and the Apache-2.0 LLVM exception — are not reproduced, because electing another option means their terms are not the terms under which those components reach you.
MIT License (Expat)
Applies to the 125 components in the MIT table above (which includes the keepass-rs fork), and to GZIP, core-js, Preact and Feather Icons. The text is identical for all of them; the individual copyright notices are in the tables above.
MIT License (Expat) — full text
MIT License Copyright (c) <the copyright holders named in the tables above> Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Apache License, Version 2.0
Applies to yubikit-ios 4.7.0, and to 4 Rust crates.
Apache License, Version 2.0 — full text
Apache License
Version 2.0, January 2004
http://www.apache.org/licenses/
TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
1. Definitions.
"License" shall mean the terms and conditions for use, reproduction,
and distribution as defined by Sections 1 through 9 of this document.
"Licensor" shall mean the copyright owner or entity authorized by
the copyright owner that is granting the License.
"Legal Entity" shall mean the union of the acting entity and all
other entities that control, are controlled by, or are under common
control with that entity. For the purposes of this definition,
"control" means (i) the power, direct or indirect, to cause the
direction or management of such entity, whether by contract or
otherwise, or (ii) ownership of fifty percent (50%) or more of the
outstanding shares, or (iii) beneficial ownership of such entity.
"You" (or "Your") shall mean an individual or Legal Entity
exercising permissions granted by this License.
"Source" form shall mean the preferred form for making modifications,
including but not limited to software source code, documentation
source, and configuration files.
"Object" form shall mean any form resulting from mechanical
transformation or translation of a Source form, including but
not limited to compiled object code, generated documentation,
and conversions to other media types.
"Work" shall mean the work of authorship, whether in Source or
Object form, made available under the License, as indicated by a
copyright notice that is included in or attached to the work
(an example is provided in the Appendix below).
"Derivative Works" shall mean any work, whether in Source or Object
form, that is based on (or derived from) the Work and for which the
editorial revisions, annotations, elaborations, or other modifications
represent, as a whole, an original work of authorship. For the purposes
of this License, Derivative Works shall not include works that remain
separable from, or merely link (or bind by name) to the interfaces of,
the Work and Derivative Works thereof.
"Contribution" shall mean any work of authorship, including
the original version of the Work and any modifications or additions
to that Work or Derivative Works thereof, that is intentionally
submitted to Licensor for inclusion in the Work by the copyright owner
or by an individual or Legal Entity authorized to submit on behalf of
the copyright owner. For the purposes of this definition, "submitted"
means any form of electronic, verbal, or written communication sent
to the Licensor or its representatives, including but not limited to
communication on electronic mailing lists, source code control systems,
and issue tracking systems that are managed by, or on behalf of, the
Licensor for the purpose of discussing and improving the Work, but
excluding communication that is conspicuously marked or otherwise
designated in writing by the copyright owner as "Not a Contribution."
"Contributor" shall mean Licensor and any individual or Legal Entity
on behalf of whom a Contribution has been received by Licensor and
subsequently incorporated within the Work.
2. Grant of Copyright License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
copyright license to reproduce, prepare Derivative Works of,
publicly display, publicly perform, sublicense, and distribute the
Work and such Derivative Works in Source or Object form.
3. Grant of Patent License. Subject to the terms and conditions of
this License, each Contributor hereby grants to You a perpetual,
worldwide, non-exclusive, no-charge, royalty-free, irrevocable
(except as stated in this section) patent license to make, have made,
use, offer to sell, sell, import, and otherwise transfer the Work,
where such license applies only to those patent claims licensable
by such Contributor that are necessarily infringed by their
Contribution(s) alone or by combination of their Contribution(s)
with the Work to which such Contribution(s) was submitted. If You
institute patent litigation against any entity (including a
cross-claim or counterclaim in a lawsuit) alleging that the Work
or a Contribution incorporated within the Work constitutes direct
or contributory patent infringement, then any patent licenses
granted to You under this License for that Work shall terminate
as of the date such litigation is filed.
4. Redistribution. You may reproduce and distribute copies of the
Work or Derivative Works thereof in any medium, with or without
modifications, and in Source or Object form, provided that You
meet the following conditions:
(a) You must give any other recipients of the Work or
Derivative Works a copy of this License; and
(b) You must cause any modified files to carry prominent notices
stating that You changed the files; and
(c) You must retain, in the Source form of any Derivative Works
that You distribute, all copyright, patent, trademark, and
attribution notices from the Source form of the Work,
excluding those notices that do not pertain to any part of
the Derivative Works; and
(d) If the Work includes a "NOTICE" text file as part of its
distribution, then any Derivative Works that You distribute must
include a readable copy of the attribution notices contained
within such NOTICE file, excluding those notices that do not
pertain to any part of the Derivative Works, in at least one
of the following places: within a NOTICE text file distributed
as part of the Derivative Works; within the Source form or
documentation, if provided along with the Derivative Works; or,
within a display generated by the Derivative Works, if and
wherever such third-party notices normally appear. The contents
of the NOTICE file are for informational purposes only and
do not modify the License. You may add Your own attribution
notices within Derivative Works that You distribute, alongside
or as an addendum to the NOTICE text from the Work, provided
that such additional attribution notices cannot be construed
as modifying the License.
You may add Your own copyright statement to Your modifications and
may provide additional or different license terms and conditions
for use, reproduction, or distribution of Your modifications, or
for any such Derivative Works as a whole, provided Your use,
reproduction, and distribution of the Work otherwise complies with
the conditions stated in this License.
5. Submission of Contributions. Unless You explicitly state otherwise,
any Contribution intentionally submitted for inclusion in the Work
by You to the Licensor shall be under the terms and conditions of
this License, without any additional terms or conditions.
Notwithstanding the above, nothing herein shall supersede or modify
the terms of any separate license agreement you may have executed
with Licensor regarding such Contributions.
6. Trademarks. This License does not grant permission to use the trade
names, trademarks, service marks, or product names of the Licensor,
except as required for reasonable and customary use in describing the
origin of the Work and reproducing the content of the NOTICE file.
7. Disclaimer of Warranty. Unless required by applicable law or
agreed to in writing, Licensor provides the Work (and each
Contributor provides its Contributions) on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied, including, without limitation, any warranties or conditions
of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
PARTICULAR PURPOSE. You are solely responsible for determining the
appropriateness of using or redistributing the Work and assume any
risks associated with Your exercise of permissions under this License.
8. Limitation of Liability. In no event and under no legal theory,
whether in tort (including negligence), contract, or otherwise,
unless required by applicable law (such as deliberate and grossly
negligent acts) or agreed to in writing, shall any Contributor be
liable to You for damages, including any direct, indirect, special,
incidental, or consequential damages of any character arising as a
result of this License or out of the use or inability to use the
Work (including but not limited to damages for loss of goodwill,
work stoppage, computer failure or malfunction, or any and all
other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.
9. Accepting Warranty or Additional Liability. While redistributing
the Work or Derivative Works thereof, You may choose to offer,
and charge a fee for, acceptance of support, warranty, indemnity,
or other liability obligations and/or rights consistent with this
License. However, in accepting such obligations, You may act only
on Your own behalf and on Your sole responsibility, not on behalf
of any other Contributor, and only if You agree to indemnify,
defend, and hold each Contributor harmless for any liability
incurred by, or claims asserted against, such Contributor by reason
of your accepting any such warranty or additional liability.
END OF TERMS AND CONDITIONSMozilla Public License, Version 2.0
Applies to the 8 UniFFI crates and to the generated Swift bindings. See Mozilla Public License components for source-availability information.
Mozilla Public License, Version 2.0 — full text
Mozilla Public License Version 2.0
==================================
1. Definitions
--------------
1.1. "Contributor"
means each individual or legal entity that creates, contributes to
the creation of, or owns Covered Software.
1.2. "Contributor Version"
means the combination of the Contributions of others (if any) used
by a Contributor and that particular Contributor's Contribution.
1.3. "Contribution"
means Covered Software of a particular Contributor.
1.4. "Covered Software"
means Source Code Form to which the initial Contributor has attached
the notice in Exhibit A, the Executable Form of such Source Code
Form, and Modifications of such Source Code Form, in each case
including portions thereof.
1.5. "Incompatible With Secondary Licenses"
means
(a) that the initial Contributor has attached the notice described
in Exhibit B to the Covered Software; or
(b) that the Covered Software was made available under the terms of
version 1.1 or earlier of the License, but not also under the
terms of a Secondary License.
1.6. "Executable Form"
means any form of the work other than Source Code Form.
1.7. "Larger Work"
means a work that combines Covered Software with other material, in
a separate file or files, that is not Covered Software.
1.8. "License"
means this document.
1.9. "Licensable"
means having the right to grant, to the maximum extent possible,
whether at the time of the initial grant or subsequently, any and
all of the rights conveyed by this License.
1.10. "Modifications"
means any of the following:
(a) any file in Source Code Form that results from an addition to,
deletion from, or modification of the contents of Covered
Software; or
(b) any new file in Source Code Form that contains any Covered
Software.
1.11. "Patent Claims" of a Contributor
means any patent claim(s), including without limitation, method,
process, and apparatus claims, in any patent Licensable by such
Contributor that would be infringed, but for the grant of the
License, by the making, using, selling, offering for sale, having
made, import, or transfer of either its Contributions or its
Contributor Version.
1.12. "Secondary License"
means either the GNU General Public License, Version 2.0, the GNU
Lesser General Public License, Version 2.1, the GNU Affero General
Public License, Version 3.0, or any later versions of those
licenses.
1.13. "Source Code Form"
means the form of the work preferred for making modifications.
1.14. "You" (or "Your")
means an individual or a legal entity exercising rights under this
License. For legal entities, "You" includes any entity that
controls, is controlled by, or is under common control with You. For
purposes of this definition, "control" means (a) the power, direct
or indirect, to cause the direction or management of such entity,
whether by contract or otherwise, or (b) ownership of more than
fifty percent (50%) of the outstanding shares or beneficial
ownership of such entity.
2. License Grants and Conditions
--------------------------------
2.1. Grants
Each Contributor hereby grants You a world-wide, royalty-free,
non-exclusive license:
(a) under intellectual property rights (other than patent or trademark)
Licensable by such Contributor to use, reproduce, make available,
modify, display, perform, distribute, and otherwise exploit its
Contributions, either on an unmodified basis, with Modifications, or
as part of a Larger Work; and
(b) under Patent Claims of such Contributor to make, use, sell, offer
for sale, have made, import, and otherwise transfer either its
Contributions or its Contributor Version.
2.2. Effective Date
The licenses granted in Section 2.1 with respect to any Contribution
become effective for each Contribution on the date the Contributor first
distributes such Contribution.
2.3. Limitations on Grant Scope
The licenses granted in this Section 2 are the only rights granted under
this License. No additional rights or licenses will be implied from the
distribution or licensing of Covered Software under this License.
Notwithstanding Section 2.1(b) above, no patent license is granted by a
Contributor:
(a) for any code that a Contributor has removed from Covered Software;
or
(b) for infringements caused by: (i) Your and any other third party's
modifications of Covered Software, or (ii) the combination of its
Contributions with other software (except as part of its Contributor
Version); or
(c) under Patent Claims infringed by Covered Software in the absence of
its Contributions.
This License does not grant any rights in the trademarks, service marks,
or logos of any Contributor (except as may be necessary to comply with
the notice requirements in Section 3.4).
2.4. Subsequent Licenses
No Contributor makes additional grants as a result of Your choice to
distribute the Covered Software under a subsequent version of this
License (see Section 10.2) or under the terms of a Secondary License (if
permitted under the terms of Section 3.3).
2.5. Representation
Each Contributor represents that the Contributor believes its
Contributions are its original creation(s) or it has sufficient rights
to grant the rights to its Contributions conveyed by this License.
2.6. Fair Use
This License is not intended to limit any rights You have under
applicable copyright doctrines of fair use, fair dealing, or other
equivalents.
2.7. Conditions
Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted
in Section 2.1.
3. Responsibilities
-------------------
3.1. Distribution of Source Form
All distribution of Covered Software in Source Code Form, including any
Modifications that You create or to which You contribute, must be under
the terms of this License. You must inform recipients that the Source
Code Form of the Covered Software is governed by the terms of this
License, and how they can obtain a copy of this License. You may not
attempt to alter or restrict the recipients' rights in the Source Code
Form.
3.2. Distribution of Executable Form
If You distribute Covered Software in Executable Form then:
(a) such Covered Software must also be made available in Source Code
Form, as described in Section 3.1, and You must inform recipients of
the Executable Form how they can obtain a copy of such Source Code
Form by reasonable means in a timely manner, at a charge no more
than the cost of distribution to the recipient; and
(b) You may distribute such Executable Form under the terms of this
License, or sublicense it under different terms, provided that the
license for the Executable Form does not attempt to limit or alter
the recipients' rights in the Source Code Form under this License.
3.3. Distribution of a Larger Work
You may create and distribute a Larger Work under terms of Your choice,
provided that You also comply with the requirements of this License for
the Covered Software. If the Larger Work is a combination of Covered
Software with a work governed by one or more Secondary Licenses, and the
Covered Software is not Incompatible With Secondary Licenses, this
License permits You to additionally distribute such Covered Software
under the terms of such Secondary License(s), so that the recipient of
the Larger Work may, at their option, further distribute the Covered
Software under the terms of either this License or such Secondary
License(s).
3.4. Notices
You may not remove or alter the substance of any license notices
(including copyright notices, patent notices, disclaimers of warranty,
or limitations of liability) contained within the Source Code Form of
the Covered Software, except that You may alter any license notices to
the extent required to remedy known factual inaccuracies.
3.5. Application of Additional Terms
You may choose to offer, and to charge a fee for, warranty, support,
indemnity or liability obligations to one or more recipients of Covered
Software. However, You may do so only on Your own behalf, and not on
behalf of any Contributor. You must make it absolutely clear that any
such warranty, support, indemnity, or liability obligation is offered by
You alone, and You hereby agree to indemnify every Contributor for any
liability incurred by such Contributor as a result of warranty, support,
indemnity or liability terms You offer. You may include additional
disclaimers of warranty and limitations of liability specific to any
jurisdiction.
4. Inability to Comply Due to Statute or Regulation
---------------------------------------------------
If it is impossible for You to comply with any of the terms of this
License with respect to some or all of the Covered Software due to
statute, judicial order, or regulation then You must: (a) comply with
the terms of this License to the maximum extent possible; and (b)
describe the limitations and the code they affect. Such description must
be placed in a text file included with all distributions of the Covered
Software under this License. Except to the extent prohibited by statute
or regulation, such description must be sufficiently detailed for a
recipient of ordinary skill to be able to understand it.
5. Termination
--------------
5.1. The rights granted under this License will terminate automatically
if You fail to comply with any of its terms. However, if You become
compliant, then the rights granted under this License from a particular
Contributor are reinstated (a) provisionally, unless and until such
Contributor explicitly and finally terminates Your grants, and (b) on an
ongoing basis, if such Contributor fails to notify You of the
non-compliance by some reasonable means prior to 60 days after You have
come back into compliance. Moreover, Your grants from a particular
Contributor are reinstated on an ongoing basis if such Contributor
notifies You of the non-compliance by some reasonable means, this is the
first time You have received notice of non-compliance with this License
from such Contributor, and You become compliant prior to 30 days after
Your receipt of the notice.
5.2. If You initiate litigation against any entity by asserting a patent
infringement claim (excluding declaratory judgment actions,
counter-claims, and cross-claims) alleging that a Contributor Version
directly or indirectly infringes any patent, then the rights granted to
You by any and all Contributors for the Covered Software under Section
2.1 of this License shall terminate.
5.3. In the event of termination under Sections 5.1 or 5.2 above, all
end user license agreements (excluding distributors and resellers) which
have been validly granted by You or Your distributors under this License
prior to termination shall survive termination.
************************************************************************
* *
* 6. Disclaimer of Warranty *
* ------------------------- *
* *
* Covered Software is provided under this License on an "as is" *
* basis, without warranty of any kind, either expressed, implied, or *
* statutory, including, without limitation, warranties that the *
* Covered Software is free of defects, merchantable, fit for a *
* particular purpose or non-infringing. The entire risk as to the *
* quality and performance of the Covered Software is with You. *
* Should any Covered Software prove defective in any respect, You *
* (not any Contributor) assume the cost of any necessary servicing, *
* repair, or correction. This disclaimer of warranty constitutes an *
* essential part of this License. No use of any Covered Software is *
* authorized under this License except under this disclaimer. *
* *
************************************************************************
************************************************************************
* *
* 7. Limitation of Liability *
* -------------------------- *
* *
* Under no circumstances and under no legal theory, whether tort *
* (including negligence), contract, or otherwise, shall any *
* Contributor, or anyone who distributes Covered Software as *
* permitted above, be liable to You for any direct, indirect, *
* special, incidental, or consequential damages of any character *
* including, without limitation, damages for lost profits, loss of *
* goodwill, work stoppage, computer failure or malfunction, or any *
* and all other commercial damages or losses, even if such party *
* shall have been informed of the possibility of such damages. This *
* limitation of liability shall not apply to liability for death or *
* personal injury resulting from such party's negligence to the *
* extent applicable law prohibits such limitation. Some *
* jurisdictions do not allow the exclusion or limitation of *
* incidental or consequential damages, so this exclusion and *
* limitation may not apply to You. *
* *
************************************************************************
8. Litigation
-------------
Any litigation relating to this License may be brought only in the
courts of a jurisdiction where the defendant maintains its principal
place of business and such litigation shall be governed by laws of that
jurisdiction, without reference to its conflict-of-law provisions.
Nothing in this Section shall prevent a party's ability to bring
cross-claims or counter-claims.
9. Miscellaneous
----------------
This License represents the complete agreement concerning the subject
matter hereof. If any provision of this License is held to be
unenforceable, such provision shall be reformed only to the extent
necessary to make it enforceable. Any law or regulation which provides
that the language of a contract shall be construed against the drafter
shall not be used to construe this License against a Contributor.
10. Versions of the License
---------------------------
10.1. New Versions
Mozilla Foundation is the license steward. Except as provided in Section
10.3, no one other than the license steward has the right to modify or
publish new versions of this License. Each version will be given a
distinguishing version number.
10.2. Effect of New Versions
You may distribute the Covered Software under the terms of the version
of the License under which You originally received the Covered Software,
or under the terms of any subsequent version published by the license
steward.
10.3. Modified Versions
If you create software not governed by this License, and you want to
create a new license for such software, you may create and use a
modified version of this License if you rename the license and remove
any references to the name of the license steward (except to note that
such modified license differs from this License).
10.4. Distributing Source Code Form that is Incompatible With Secondary
Licenses
If You choose to distribute Source Code Form that is Incompatible With
Secondary Licenses under the terms of this version of the License, the
notice described in Exhibit B of this License must be attached.
Exhibit A - Source Code Form License Notice
-------------------------------------------
This Source Code Form is subject to the terms of the Mozilla Public
License, v. 2.0. If a copy of the MPL was not distributed with this
file, You can obtain one at http://mozilla.org/MPL/2.0/.
If it is not possible or desirable to put the notice in a particular
file, then You may include the notice in a location (such as a LICENSE
file in a relevant directory) where a recipient would be likely to look
for such a notice.
You may add additional accurate notices of copyright ownership.
Exhibit B - "Incompatible With Secondary Licenses" Notice
---------------------------------------------------------
This Source Code Form is "Incompatible With Secondary Licenses", as
defined by the Mozilla Public License, v. 2.0.Unicode License v3
Applies to 19 Rust crates. The text reproduced below is the copy shipped by the 18 ICU4X crates, which carries Copyright © 2020-2024 Unicode, Inc.; unicode-ident ships the same license text under Copyright © 1991-2023 Unicode, Inc. Both notices are reproduced in the table above, as the license requires.
Unicode License v3 — full text
UNICODE LICENSE V3 COPYRIGHT AND PERMISSION NOTICE Copyright © 2020-2024 Unicode, Inc. NOTICE TO USER: Carefully read the following legal agreement. BY DOWNLOADING, INSTALLING, COPYING OR OTHERWISE USING DATA FILES, AND/OR SOFTWARE, YOU UNEQUIVOCALLY ACCEPT, AND AGREE TO BE BOUND BY, ALL OF THE TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT DOWNLOAD, INSTALL, COPY, DISTRIBUTE OR USE THE DATA FILES OR SOFTWARE. Permission is hereby granted, free of charge, to any person obtaining a copy of data files and any associated documentation (the "Data Files") or software and any associated documentation (the "Software") to deal in the Data Files or Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, and/or sell copies of the Data Files or Software, and to permit persons to whom the Data Files or Software are furnished to do so, provided that either (a) this copyright and permission notice appear with all copies of the Data Files or Software, or (b) this copyright and permission notice appear in associated Documentation. THE DATA FILES AND SOFTWARE ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR HOLDERS INCLUDED IN THIS NOTICE BE LIABLE FOR ANY CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THE DATA FILES OR SOFTWARE. Except as contained in this notice, the name of a copyright holder shall not be used in advertising or otherwise to promote the sale, use or other dealings in these Data Files or Software without prior written authorization of the copyright holder. SPDX-License-Identifier: Unicode-3.0 — Portions of ICU4X may have been adapted from ICU4C and/or ICU4J. ICU 1.8.1 to ICU 57.1 © 1995-2016 International Business Machines Corporation and others.
BSD 2-Clause License
Applies to arrayref.
BSD 2-Clause License (arrayref) — full text
Copyright (c) 2015 David Roundy <roundyd@physics.oregonstate.edu> All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
BSD 3-Clause License
Applies to subtle and to Klaro! — different copyright holders, so both notices are reproduced.
BSD 3-Clause License (subtle) — full text
Copyright (c) 2016-2017 Isis Agora Lovecruft, Henry de Valence. All rights reserved. Copyright (c) 2016-2024 Isis Agora Lovecruft. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. 3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
BSD 3-Clause License (Klaro!) — full text
BSD 3-Clause License Copyright (c) 2019-2020, KIProtect GmbH Copyright (c) various authors obtainable by running `git shortlog -nse` or visiting https://github.com/KIProtect/klaro/graphs/contributors All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: * Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. * Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
The Unlicense
Applies to secstr. No attribution is required; reproduced for completeness.
The Unlicense (secstr) — full text
This is free and unencumbered software released into the public domain. Anyone is free to copy, modify, publish, use, compile, sell, or distribute this software, either in source code form or as a compiled binary, for any purpose, commercial or non-commercial, and by any means. In jurisdictions that recognize copyright laws, the author or authors of this software dedicate any and all copyright interest in the software to the public domain. We make this dedication for the benefit of the public at large and to the detriment of our heirs and successors. We intend this dedication to be an overt act of relinquishment in perpetuity of all present and future rights to this software under copyright law. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. For more information, please refer to <http://unlicense.org/>
How this list was produced
We would rather this page be checkable than merely confident. Here is exactly how it was built, so that you or we can reproduce it.
1. Enumerate the Rust dependency graph for the shipping target
cd kakuremi-core
cargo tree -p kakuremi-core --edges normal --target aarch64-apple-ios -f '{p}' --prefix none | sed 's/ (\*)$//' | sort -u # 159
cargo metadata --format-version 1 --filter-platform aarch64-apple-ios
cargo tree yields the 159 entries of the graph, including kakuremi-core itself. The sed step removes the (*) marker cargo appends to de-duplicated repeat subtrees; without it sort -u keeps foo v1.0 and foo v1.0 (*) as two distinct lines and the command reports 197. cargo metadata supplies each crate’s declared SPDX expression and repository. Copyright notices were read from every LICENSE*, COPYRIGHT, COPYING and NOTICE file each crate ships in the local registry — not from Cargo.toml authors, because authors and copyright holders are not the same thing, and not from the elected license file alone, because several crates carry their notice only in a sibling file. Notices without a year (for example Copyright Mozilla Foundation) are matched, and where a license file names several holders all of them are reproduced.
2. Separate what is shipped from what is only built with
A Rust static library contains object files for build-time tooling that the linker then discards, so inspecting the .a archive over-reports. We therefore inspected the linked binaries instead:
ar t libkakuremi_core.a | wc -l # 774 archive members — over-inclusive
nm Kakuremi.app/Kakuremi.debug.dylib # symbols that actually survived linking
nm Kakuremi.app/PlugIns/AutoFillExtension.appex/AutoFillExtension.debug.dylib
strings <binary> | grep -E 'uniffi-bindgen|clap_builder|askama|goblin' # 0 hits in shipped binaries
Symbols were attributed to crates by their first mangled path element, and cross-checked between the main app and the AutoFill extension, which agreed. Generic-only crates legitimately leave no symbols of their own because they are monomorphized into their callers, so we classify those as shipped rather than as absent. Symbol evidence was taken from a debug build; the linker’s archive-member selection is the same in release, which additionally dead-strips, so this method can over-report but not under-report.
3. Enumerate the iOS and website components
Package.resolved # one pin: yubikit-ios 4.7.0, revision 2c4206263763743a2f1ca3309b87432588be637f
find <yubikit checkout> -iname 'NOTICE*' -not -path '*/.git/*' # 0 results
git -C <yubikit checkout> log --all -- NOTICE # 0 results
find ~/.cargo/registry/src/*/ -maxdepth 2 -iname 'NOTICE*' # 0 results
strings Kakuremi.xcarchive/.../Kakuremi | grep -E 'gzippedData|MF_Base32Codec' # both present
Website components were identified from the served files themselves: the jsDelivr banner and version string in klaro.min.js, the core-js copyright banner it preserves, Preact’s compat fingerprints, and byte-for-byte comparison of inline SVG path data against the Feather Icons set.
4. Known limits of this method
Symbol inspection identifies code that reaches the binary; it cannot prove the absence of a component that leaves no symbols and is fully inlined. That is why we resolve every uncertainty by listing the component rather than omitting it. Vendored code inside a dependency — such as the two files inside yubikit-ios — appears in no package manifest and can only be found by reading the dependency’s source, which is a step that automated license tooling does not take. We re-run these checks, including the NOTICE searches, at each release.
Where these notices appear
This page lists the third-party components included in the Kakuremi iOS application and served by this website, together with their copyright notices and the full text of their licenses. It is maintained per release and applies to the app version stated at the top.
Since Kakuremi for iOS 1.4.0 (build 51), the app itself links to this page: in Settings, under the About section, an “Open Source Licenses” row opens this page in the browser. Every copy of the app from that version onward therefore carries a direct route to these notices, rather than leaving them to be found on the web. The notices are not reproduced a second time inside the app; this page is what that row opens, and it remains the complete and authoritative listing.
Changes to this page
We update this page for each App Store release. Entries for previous releases are kept rather than replaced, because notices and source-availability commitments continue to apply to copies that have already been distributed.
Contact
For attribution corrections, license questions, or a request for the source code of any MPL-2.0 component in a Kakuremi build:
SpringHiker Inc.
Email: support@kakuremi.com