Appearance
Third-Party Component Inventory
INFO
This page lists every third-party component distributed with this product: name, version, license, and upstream source. It matches the release you are reading.
This is the complete machine-generated inventory referenced by the Third-Party Notices. Every component distributed with the Software is listed below with its version, license, and upstream source, grouped by license.
Summary
| License | Components |
|---|---|
| Apache-2.0 | 35 |
| BSD-2-Clause | 4 |
| BSD-3-Clause | 28 |
| ISC | 3 |
| MIT | 74 |
| MPL-2.0 | 4 |
| OFL-1.1 | 3 |
| Unlicense | 2 |
| Undetermined | 1 |
| Total | 154 |
Apache-2.0
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/akrylysov/pogreb | v0.10.1 | Go | https://github.com/akrylysov/pogreb |
| github.com/aws/aws-sdk-go-v2 | v1.41.7 | Go | https://github.com/aws/aws-sdk-go-v2 |
| github.com/aws/aws-sdk-go-v2/config | v1.32.7 | Go | https://github.com/aws/aws-sdk-go-v2/config |
| github.com/aws/aws-sdk-go-v2/credentials | v1.19.7 | Go | https://github.com/aws/aws-sdk-go-v2/credentials |
| github.com/aws/aws-sdk-go-v2/feature/ec2/imds | v1.18.17 | Go | https://github.com/aws/aws-sdk-go-v2/feature/ec2/imds |
| github.com/aws/aws-sdk-go-v2/internal/configsources | v1.4.23 | Go | https://github.com/aws/aws-sdk-go-v2/internal/configsources |
| github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 | v2.7.23 | Go | https://github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 |
| github.com/aws/aws-sdk-go-v2/internal/ini | v1.8.4 | Go | https://github.com/aws/aws-sdk-go-v2/internal/ini |
| github.com/aws/aws-sdk-go-v2/service/iam | v1.53.10 | Go | https://github.com/aws/aws-sdk-go-v2/service/iam |
| github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding | v1.13.7 | Go | https://github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding |
| github.com/aws/aws-sdk-go-v2/service/internal/presigned-url | v1.13.21 | Go | https://github.com/aws/aws-sdk-go-v2/service/internal/presigned-url |
| github.com/aws/aws-sdk-go-v2/service/signin | v1.0.5 | Go | https://github.com/aws/aws-sdk-go-v2/service/signin |
| github.com/aws/aws-sdk-go-v2/service/sso | v1.30.9 | Go | https://github.com/aws/aws-sdk-go-v2/service/sso |
| github.com/aws/aws-sdk-go-v2/service/ssooidc | v1.35.13 | Go | https://github.com/aws/aws-sdk-go-v2/service/ssooidc |
| github.com/aws/aws-sdk-go-v2/service/sts | v1.41.6 | Go | https://github.com/aws/aws-sdk-go-v2/service/sts |
| github.com/aws/smithy-go | v1.25.1 | Go | https://github.com/aws/smithy-go |
| github.com/dimchansky/utfbom | v1.1.1 | Go | https://github.com/dimchansky/utfbom |
| github.com/docker/go-units | v0.5.0 | Go | https://github.com/docker/go-units |
| github.com/ebitengine/purego | v0.10.0 | Go | https://github.com/ebitengine/purego |
| github.com/flier/gohs | v1.2.2 | Go | https://github.com/flier/gohs |
| github.com/glaslos/tlsh | v0.4.0 | Go | https://github.com/glaslos/tlsh |
| github.com/google/shlex | v0.0.0-20191202100458-e7afc7fbc510 | Go | https://github.com/google/shlex |
| github.com/gosimple/unidecode | v1.0.1 | Go | https://github.com/gosimple/unidecode |
| github.com/klauspost/compress | v1.18.5 | Go | https://github.com/klauspost/compress |
| github.com/modern-go/concurrent | v0.0.0-20180306012644-bacd9c7ef1dd | Go | https://github.com/modern-go/concurrent |
| github.com/modern-go/reflect2 | v1.0.2 | Go | https://github.com/modern-go/reflect2 |
| github.com/praetorian-inc/titus | v1.2.0 | Go | https://github.com/praetorian-inc/titus |
| github.com/sashabaranov/go-openai | v1.37.0 | Go | https://github.com/sashabaranov/go-openai |
| github.com/tklauser/numcpus | v0.11.0 | Go | https://github.com/tklauser/numcpus |
| github.com/vulncheck-oss/go-exploit | v1.51.0 | Go | https://github.com/vulncheck-oss/go-exploit |
| github.com/xdg-go/pbkdf2 | v1.0.0 | Go | https://github.com/xdg-go/pbkdf2 |
| github.com/zmap/rc2 | v0.0.0-20190804163417-abaa70531248 | Go | https://github.com/zmap/rc2 |
| github.com/zmap/zcrypto | v0.0.0-20240803002437-3a861682ac77 | Go | https://github.com/zmap/zcrypto |
| gopkg.in/yaml.v2 | v2.4.0 | Go | https://gopkg.in/yaml.v2 |
| gopkg.in/yaml.v3 | v3.0.1 | Go | https://gopkg.in/yaml.v3 |
BSD-2-Clause
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/Mzack9999/go-http-digest-auth-client | v0.6.1-0.20220414142836-eb8883508809 | Go | https://github.com/Mzack9999/go-http-digest-auth-client |
| github.com/andybalholm/cascadia | v1.3.3 | Go | https://github.com/andybalholm/cascadia |
| github.com/pkg/errors | v0.9.1 | Go | https://github.com/pkg/errors |
| github.com/syndtr/goleveldb | v1.0.0 | Go | https://github.com/syndtr/goleveldb |
BSD-3-Clause
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/PuerkitoBio/goquery | v1.12.0 | Go | https://github.com/PuerkitoBio/goquery |
| github.com/cloudflare/ahocorasick | v0.0.0-20240916140611-054963ec9396 | Go | https://github.com/cloudflare/ahocorasick |
| github.com/dsnet/compress | v0.0.2-0.20230904184137-39efe44ab707 | Go | https://github.com/dsnet/compress |
| github.com/elazarl/goproxy | v1.8.4 | Go | https://github.com/elazarl/goproxy |
| github.com/golang/snappy | v0.0.4 | Go | https://github.com/golang/snappy |
| github.com/google/go-github/v57 | v57.0.0 | Go | https://github.com/google/go-github/v57 |
| github.com/google/go-querystring | v1.2.0 | Go | https://github.com/google/go-querystring |
| github.com/google/uuid | v1.6.0 | Go | https://github.com/google/uuid |
| github.com/gorilla/css | v1.0.1 | Go | https://github.com/gorilla/css |
| github.com/lufia/plan9stats | v0.0.0-20211012122336-39d0f177ccd0 | Go | https://github.com/lufia/plan9stats |
| github.com/microcosm-cc/bluemonday | v1.0.27 | Go | https://github.com/microcosm-cc/bluemonday |
| github.com/miekg/dns | v1.1.72 | Go | https://github.com/miekg/dns |
| github.com/projectdiscovery/jarm-go | v0.0.0-20260910160638-430e2bae86f6 | Go | https://github.com/projectdiscovery/jarm-go |
| github.com/refraction-networking/utls | v1.8.2 | Go | https://github.com/refraction-networking/utls |
| github.com/shirou/gopsutil/v4 | v4.26.3 | Go | https://github.com/shirou/gopsutil/v4 |
| github.com/spaolacci/murmur3 | v1.1.0 | Go | https://github.com/spaolacci/murmur3 |
| github.com/tklauser/go-sysconf | v0.3.16 | Go | https://github.com/tklauser/go-sysconf |
| golang.org/x/crypto | v0.55.0 | Go | https://golang.org/x/crypto |
| golang.org/x/exp | v0.0.0-20260218203240-3dfff04db8fa | Go | https://golang.org/x/exp |
| golang.org/x/mod | v0.38.0 | Go | https://golang.org/x/mod |
| golang.org/x/net | v0.58.0 | Go | https://golang.org/x/net |
| golang.org/x/oauth2 | v0.36.0 | Go | https://golang.org/x/oauth2 |
| golang.org/x/sync | v0.22.0 | Go | https://golang.org/x/sync |
| golang.org/x/sys | v0.47.0 | Go | https://golang.org/x/sys |
| golang.org/x/term | v0.45.0 | Go | https://golang.org/x/term |
| golang.org/x/text | v0.41.0 | Go | https://golang.org/x/text |
| golang.org/x/time | v0.15.0 | Go | https://golang.org/x/time |
| golang.org/x/tools | v0.48.0 | Go | https://golang.org/x/tools |
ISC
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/cnf/structhash | v0.0.0-20250313080605-df4c6cc74a9a | Go | https://github.com/cnf/structhash |
| github.com/tidwall/tinyqueue | v0.1.1 | Go | https://github.com/tidwall/tinyqueue |
| lucide-react | 0.468.0 | npm | https://www.npmjs.com/package/lucide-react/v/0.468.0 |
MIT
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/Azure/azure-sdk-for-go/sdk/azcore | v1.20.0 | Go | https://github.com/Azure/azure-sdk-for-go/sdk/azcore |
| github.com/Azure/azure-sdk-for-go/sdk/internal | v1.11.2 | Go | https://github.com/Azure/azure-sdk-for-go/sdk/internal |
| github.com/Azure/azure-sdk-for-go/sdk/storage/azblob | v1.6.4 | Go | https://github.com/Azure/azure-sdk-for-go/sdk/storage/azblob |
| github.com/Azure/go-ntlmssp | v0.1.1 | Go | https://github.com/Azure/go-ntlmssp |
| github.com/Mzack9999/gcache | v0.0.0-20230410081825-519e28eab057 | Go | https://github.com/Mzack9999/gcache |
| github.com/Mzack9999/jsluice | v0.0.0-20260306161058-30114a312f98 | Go | https://github.com/Mzack9999/jsluice |
| github.com/andybalholm/brotli | v1.2.1 | Go | https://github.com/andybalholm/brotli |
| github.com/asaskevich/govalidator | v0.0.0-20230301143203-a9d515a09cc2 | Go | https://github.com/asaskevich/govalidator |
| github.com/aymerick/douceur | v0.2.0 | Go | https://github.com/aymerick/douceur |
| github.com/brianvoe/gofakeit/v7 | v7.2.1 | Go | https://github.com/brianvoe/gofakeit/v7 |
| github.com/ditashi/jsbeautifier-go | v0.0.0-20141206144643-2520a8026a9c | Go | https://github.com/ditashi/jsbeautifier-go |
| github.com/djherbis/times | v1.6.0 | Go | https://github.com/djherbis/times |
| github.com/dlclark/regexp2 | v1.11.5 | Go | https://github.com/dlclark/regexp2 |
| github.com/gaissmai/bart | v0.30.0 | Go | https://github.com/gaissmai/bart |
| github.com/go-chi/chi/v5 | v5.1.0 | Go | https://github.com/go-chi/chi/v5 |
| github.com/go-ole/go-ole | v1.2.6 | Go | https://github.com/go-ole/go-ole |
| github.com/go-rod/rod | v0.116.2 | Go | https://github.com/go-rod/rod |
| github.com/happyhackingspace/dit | v0.0.25 | Go | https://github.com/happyhackingspace/dit |
| github.com/iangcarroll/cookiemonster | v1.6.0 | Go | https://github.com/iangcarroll/cookiemonster |
| github.com/jackc/pgpassfile | v1.0.0 | Go | https://github.com/jackc/pgpassfile |
| github.com/jackc/pgservicefile | v0.0.0-20240606120523-5a60cdf6a761 | Go | https://github.com/jackc/pgservicefile |
| github.com/jackc/pgx/v5 | v5.7.2 | Go | https://github.com/jackc/pgx/v5 |
| github.com/jackc/puddle/v2 | v2.2.2 | Go | https://github.com/jackc/puddle/v2 |
| github.com/json-iterator/go | v1.1.12 | Go | https://github.com/json-iterator/go |
| github.com/kataras/jwt | v0.1.8 | Go | https://github.com/kataras/jwt |
| github.com/lukasbob/srcset | v0.0.0-20190730101422-86b742e617f3 | Go | https://github.com/lukasbob/srcset |
| github.com/mattn/go-isatty | v0.0.20 | Go | https://github.com/mattn/go-isatty |
| github.com/mitchellh/mapstructure | v1.5.0 | Go | https://github.com/mitchellh/mapstructure |
| github.com/odvcencio/gotreesitter | v0.6.1-0.20260306002001-fbe5983c6f41 | Go | https://github.com/odvcencio/gotreesitter |
| github.com/power-devops/perfstat | v0.0.0-20240221224432-82ca36839d55 | Go | https://github.com/power-devops/perfstat |
| github.com/projectdiscovery/blackrock | v0.0.2 | Go | https://github.com/projectdiscovery/blackrock |
| github.com/projectdiscovery/dsl | v0.8.21 | Go | https://github.com/projectdiscovery/dsl |
| github.com/projectdiscovery/fastdialer | v0.5.23 | Go | https://github.com/projectdiscovery/fastdialer |
| github.com/projectdiscovery/goflags | v0.2.1 | Go | https://github.com/projectdiscovery/goflags |
| github.com/projectdiscovery/gologger | v1.1.73 | Go | https://github.com/projectdiscovery/gologger |
| github.com/projectdiscovery/gostruct | v0.0.2 | Go | https://github.com/projectdiscovery/gostruct |
| github.com/projectdiscovery/govaluate | v0.0.0-20260504230327-80320480bb6e | Go | https://github.com/projectdiscovery/govaluate |
| github.com/projectdiscovery/hmap | v0.0.102 | Go | https://github.com/projectdiscovery/hmap |
| github.com/projectdiscovery/katana | v1.8.0 | Go | https://github.com/projectdiscovery/katana |
| github.com/projectdiscovery/mapcidr | v1.1.97 | Go | https://github.com/projectdiscovery/mapcidr |
| github.com/projectdiscovery/networkpolicy | v0.1.53 | Go | https://github.com/projectdiscovery/networkpolicy |
| github.com/projectdiscovery/ratelimit | v0.0.92 | Go | https://github.com/projectdiscovery/ratelimit |
| github.com/projectdiscovery/retryabledns | v1.0.116 | Go | https://github.com/projectdiscovery/retryabledns |
| github.com/projectdiscovery/utils | v0.11.6 | Go | https://github.com/projectdiscovery/utils |
| github.com/projectdiscovery/wappalyzergo | v0.3.4 | Go | https://github.com/projectdiscovery/wappalyzergo |
| github.com/quic-go/qpack | v0.6.0 | Go | https://github.com/quic-go/qpack |
| github.com/quic-go/quic-go | v0.60.0 | Go | https://github.com/quic-go/quic-go |
| github.com/remeh/sizedwaitgroup | v1.0.0 | Go | https://github.com/remeh/sizedwaitgroup |
| github.com/rs/xid | v1.5.0 | Go | https://github.com/rs/xid |
| github.com/saintfish/chardet | v0.0.0-20230101081208-5e3ef4b5456d | Go | https://github.com/saintfish/chardet |
| github.com/spf13/cast | v1.10.0 | Go | https://github.com/spf13/cast |
| github.com/stoewer/go-strcase | v1.3.0 | Go | https://github.com/stoewer/go-strcase |
| github.com/tidwall/btree | v1.6.0 | Go | https://github.com/tidwall/btree |
| github.com/tidwall/buntdb | v1.3.0 | Go | https://github.com/tidwall/buntdb |
| github.com/tidwall/gjson | v1.18.0 | Go | https://github.com/tidwall/gjson |
| github.com/tidwall/grect | v0.1.4 | Go | https://github.com/tidwall/grect |
| github.com/tidwall/match | v1.2.0 | Go | https://github.com/tidwall/match |
| github.com/tidwall/pretty | v1.2.1 | Go | https://github.com/tidwall/pretty |
| github.com/tidwall/rtred | v0.1.2 | Go | https://github.com/tidwall/rtred |
| github.com/valyala/bytebufferpool | v1.0.0 | Go | https://github.com/valyala/bytebufferpool |
| github.com/valyala/fasttemplate | v1.2.2 | Go | https://github.com/valyala/fasttemplate |
| github.com/weppos/publicsuffix-go | v0.50.3-0.20260104170930-90713dec78f2 | Go | https://github.com/weppos/publicsuffix-go |
| github.com/ysmood/fetchup | v0.2.3 | Go | https://github.com/ysmood/fetchup |
| github.com/ysmood/goob | v0.4.0 | Go | https://github.com/ysmood/goob |
| github.com/ysmood/got | v0.40.0 | Go | https://github.com/ysmood/got |
| github.com/ysmood/gson | v0.7.3 | Go | https://github.com/ysmood/gson |
| github.com/ysmood/leakless | v0.9.0 | Go | https://github.com/ysmood/leakless |
| github.com/yusufpapurcu/wmi | v1.2.4 | Go | https://github.com/yusufpapurcu/wmi |
| go.etcd.io/bbolt | v1.3.7 | Go | https://go.etcd.io/bbolt |
| go.uber.org/multierr | v1.11.0 | Go | https://go.uber.org/multierr |
| react | 19.2.7 | npm | https://www.npmjs.com/package/react/v/19.2.7 |
| react-dom | 19.2.7 | npm | https://www.npmjs.com/package/react-dom/v/19.2.7 |
| react-resizable-panels | 2.1.9 | npm | https://www.npmjs.com/package/react-resizable-panels/v/2.1.9 |
| scheduler | 0.27.0 | npm | https://www.npmjs.com/package/scheduler/v/0.27.0 |
MPL-2.0
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/gosimple/slug | v1.15.0 | Go | https://github.com/gosimple/slug |
| github.com/hashicorp/go-version | v1.9.0 | Go | https://github.com/hashicorp/go-version |
| github.com/hashicorp/golang-lru/v2 | v2.0.7 | Go | https://github.com/hashicorp/golang-lru/v2 |
| github.com/projectdiscovery/retryablehttp-go | v1.3.29 | Go | https://github.com/projectdiscovery/retryablehttp-go |
OFL-1.1
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| @fontsource/inter | 5.3.0 | npm | https://www.npmjs.com/package/@fontsource/inter/v/5.3.0 |
| @fontsource/jetbrains-mono | 5.3.0 | npm | https://www.npmjs.com/package/@fontsource/jetbrains-mono/v/5.3.0 |
| @fontsource/rajdhani | 5.3.0 | npm | https://www.npmjs.com/package/@fontsource/rajdhani/v/5.3.0 |
Unlicense
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/logrusorgru/aurora | v2.0.3+incompatible | Go | https://github.com/logrusorgru/aurora |
| github.com/logrusorgru/aurora/v4 | v4.0.0 | Go | https://github.com/logrusorgru/aurora/v4 |
Undetermined
The license of the following components could not be determined automatically from the files bundled in this build. They are listed here rather than omitted; contact Hack LLC for their license terms.
| Component | Version | Ecosystem | Source |
|---|---|---|---|
| github.com/sullo/nikto-dsl-golang no license file vendored | v0.2.0 | Go | https://github.com/sullo/nikto-dsl-golang |
Attribution notices (Apache-2.0 section 4(d))
The following components ship a NOTICE file. Apache License 2.0 section 4(d) requires that the attribution notices they contain be reproduced with any distribution that includes those components. They are reproduced below exactly as published upstream.
github.com/aws/aws-sdk-go-v2
text
AWS SDK for Go
Copyright 2015 Amazon.com, Inc. or its affiliates. All Rights Reserved.
Copyright 2014-2015 Stripe, Inc.github.com/aws/smithy-go
text
Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.github.com/glaslos/tlsh
text
=========================================================================
== NOTICE file for use with the Apache License, Version 2.0, ==
== in this case for the Trend Locality Sensitive Hash distribution. ==
=========================================================================
Trend Locality Sensitive Hash (TLSH)
Copyright 2010-2014 Trend Micro
Copyright 2017 Lukas Rist
This product is derived from software developed at
Trend Micro (http://www.trendmicro.com/)
Refer to the following publications for more information:
Jonathan Oliver, Chun Cheng and Yanggui Chen,
"TLSH - A Locality Sensitive Hash"
4th Cybercrime and Trustworthy Computing Workshop, Sydney, November 2013
https://github.com/trendmicro/tlsh/blob/master/TLSH_CTC_final.pdf
Jonathan Oliver, Scott Forman and Chun Cheng,
"Using Randomization to Attack Similarity Digests"
Applications and Techniques in Information Security. Springer Berlin Heidelberg, 2014. 199-210.
https://github.com/trendmicro/tlsh/blob/master/Attacking_LSH_and_Sim_Dig.pdf
Jonathan Oliver and Jayson Pryde
http://blog.trendmicro.com/trendlabs-security-intelligence/smart-whitelisting-using-locality-sensitive-hashing/
SHA1(LICENSE)= f0b513a735cc88cc1f37c5ee0caec2a9e154bd86github.com/praetorian-inc/titus
text
Titus
Copyright 2026 Praetorian Security, Inc.
This product includes software developed at Praetorian Security, Inc.
(https://www.praetorian.com/).
================================================================================
Detection rules in pkg/rule/rules/ are derived from NoseyParker
(https://github.com/praetorian-inc/noseyparker), which is licensed under the
Apache License, Version 2.0.
NoseyParker
Copyright 2023-2026 Praetorian Security, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
================================================================================
Additional detection rules in pkg/rule/rules/ (prefixed with "kingfisher.") are
derived from Kingfisher (https://github.com/mongodb/kingfisher), which is
licensed under the Apache License, Version 2.0.
Kingfisher
Copyright MongoDB, Inc.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.github.com/zmap/zcrypto/cryptobyte
text
Forked from golang.org/x/crypto/cryptobyte in order to support
permissive asn1 parsing.gopkg.in/yaml.v2
text
Copyright 2011-2016 Canonical Ltd.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.gopkg.in/yaml.v3
text
Copyright 2011-2016 Canonical Ltd.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.