Legal

Open-source Attributions

VaultMorph AI Shield v1.0 — last updated 1 July 2026

VaultMorph AI Shield is proprietary software, but it is built on top of world-class open-source components. We are grateful to every contributor and maintainer of the projects listed below. Each component is used under its respective license — click the license tag for the full license text.

Frontend & Desktop Shell (Node / TypeScript)

React^18.3.1
Declarative UI library for building the desktop interface. Used for the chat pane, settings, findings panel, and all interactive UI components.
github.com/facebook/react
MIT
react-dom^18.3.1
React renderer for the browser/WebView DOM environment inside Tauri.
github.com/facebook/react
MIT
react-markdown^10.1.0
Renders AI response text as safe, formatted Markdown inside the chat window without using dangerouslySetInnerHTML.
github.com/remarkjs/react-markdown
MIT
remark-gfm^4.0.1
GitHub Flavored Markdown plugin for remark — adds tables, strikethrough, task lists, and auto-links to the Markdown renderer.
github.com/remarkjs/remark-gfm
MIT
@tauri-apps/api^2.11.0
JavaScript/TypeScript bindings for the Tauri framework — provides IPC commands, OS keychain access, clipboard integration, and file system operations from the frontend.
github.com/tauri-apps/tauri
MIT / Apache-2.0
TypeScript^5.6.3
Typed superset of JavaScript. The entire desktop application and core engine are written in TypeScript for type safety and maintainability.
github.com/microsoft/TypeScript
Apache-2.0
Vite^5.4.10
Frontend build tool and dev server. Bundles and optimises the React application that runs inside the Tauri WebView.
github.com/vitejs/vite
MIT
@vitejs/plugin-react^4.3.3
Vite plugin that enables React Fast Refresh and JSX transform during development.
github.com/vitejs/vite-plugin-react
MIT
vitest^2.1.8
Unit test runner for the TypeScript core engine and React components. Powered by Vite for near-instant test execution.
github.com/vitest-dev/vitest
MIT
@testing-library/react^16.3.2
DOM testing utilities for React components — used in integration tests for the settings pane and API key flows.
github.com/testing-library/react-testing-library
MIT
@testing-library/user-event^14.6.1
Simulates real user interactions (typing, clicking) in unit tests.
github.com/testing-library/user-event
MIT
@testing-library/jest-dom^6.9.1
Custom Jest/vitest matchers for asserting on DOM nodes (e.g. toBeVisible, toHaveTextContent).
github.com/testing-library/jest-dom
MIT
jsdom^29.1.1
JavaScript DOM implementation used as the test environment for vitest, simulating a browser context in Node.js.
github.com/jsdom/jsdom
MIT
@tauri-apps/cli^2.0.0
Build toolchain for Tauri — invokes the Rust compiler, bundles the frontend, and produces platform installers (.msi, .dmg, .deb).
github.com/tauri-apps/tauri
MIT / Apache-2.0

Rust Backend (Tauri / Cargo)

tauri2.0.1
Cross-platform desktop application framework. Provides the application shell, WebView, IPC bridge, OS-level integrations (clipboard, tray, windows), and the packaging toolchain.
github.com/tauri-apps/tauri
MIT / Apache-2.0
tauri-build2.0.1
Tauri build helper — generates the Tauri resource manifest and links platform-specific libraries at compile time.
github.com/tauri-apps/tauri
MIT / Apache-2.0
aes-gcm0.10
AES-256-GCM authenticated encryption used to encrypt API keys stored on disk. Provides both encryption and integrity verification (AEAD).
github.com/RustCrypto/AEADs
MIT / Apache-2.0
base640.22
Base64 encoding and decoding — used for encoding encrypted blobs and Ed25519 signatures for storage and transport.
github.com/marshallpierce/rust-base64
MIT / Apache-2.0
dirs5
Cross-platform directory paths — resolves the OS-appropriate config directory, data directory, and cache directory for storing encrypted local data.
github.com/dirs-dev/dirs-rs
MIT / Apache-2.0
rand0.8
Cryptographically secure random number generation — used for generating AES-GCM nonces and encryption keys.
github.com/rust-random/rand
MIT / Apache-2.0
regex1
High-performance regular expression library — forms the engine behind the detection rule pack (110–127 rules for identifying secrets, keys, and sensitive patterns).
github.com/rust-lang/regex
MIT / Apache-2.0
reqwest0.12
Async HTTP client — used for license server communication (Pro Trial activation, revalidation) and rule pack updates. Configured with rustls-tls for pure-Rust TLS with no OpenSSL dependency.
github.com/seanmonstar/reqwest
MIT / Apache-2.0
serde1
Serialization/deserialization framework — used throughout for JSON serialization of license JWTs, rule packs, configuration, and IPC message payloads.
github.com/serde-rs/serde
MIT / Apache-2.0
serde_json1
JSON support for serde — deserializes rule packs and license payloads from JSON, and serializes IPC responses to the frontend.
github.com/serde-rs/json
MIT / Apache-2.0
tokio1
Asynchronous runtime for Rust — provides the async executor for all background tasks including license network requests and rule update downloads.
github.com/tokio-rs/tokio
MIT
hostname0.3
Retrieves the system hostname — one of the inputs used to derive the one-way device hash for license binding. The hash itself is never reversible.
github.com/svartalf/hostname
MIT
rfd0.14
Rust File Dialogs — provides native OS file picker dialogs for importing Enterprise license files (.vml) and exporting conversation exports.
github.com/PolyMeilex/rfd
MIT

License texts

The MIT License and Apache-2.0 License texts are reproduced below for reference. Where a component is dual-licensed (MIT / Apache-2.0), you may choose either license.

MIT License (representative text)

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.

The Apache-2.0 License full text is available at: apache.org/licenses/LICENSE-2.0