Open Source License Notice

GateLLM software uses a number of open-source software components in its build. This page declares the major open-source dependencies included in the GateLLM distribution and their license types, to satisfy the attribution and notice requirements of open-source licenses.

The license for GateLLM itself (per memory capacity) is detailed in the Terms of Service. This page covers only the third-party open-source components used by GateLLM.

Below are the major open-source components included in the GateLLM distribution and their license types (grouped by category). A complete list (SBOM) is provided with each release; enterprise customers may request the complete SBOM for the current version from support@gatellm.io.

• Next.js (MIT License) — full-stack framework, App Router / static export
• React & ReactDOM (MIT License) — UI runtime
• HeroUI / @heroui/react (MIT License) — component library
• HeroUI Pro / @heroui-pro/react (commercial license, Fluxon LLC holds a compliant license) — Pro components
• Tailwind CSS (MIT License) & tailwind-merge / tailwind-variants — styling system
• @supabase/supabase-js (MIT License) — Supabase client SDK (accounts & licensing)
• @sentry/nextjs (MIT License) — error monitoring SDK
• TipTap (@tiptap/*, MIT License) — rich text editing
• Recharts (MIT License) — charts
• Motion (MIT License) — animation
• Shiki (MIT License) — syntax highlighting
• Marked / react-markdown / remark-gfm / remark-breaks (MIT License) — Markdown rendering
• streamdown (Apache-2.0 License) — streaming Markdown rendering
• Iconify (@iconify/react, Apache-2.0 / MIT License) — icons
• Embla Carousel (MIT License) — carousel
• React Aria Components (Apache-2.0 License) — accessibility components
• @number-flow/react (MIT License) — animated number transitions
• react-resizable-panels (MIT License) — resizable panel layouts
• @heroui/styles (MIT License) — HeroUI style utilities

The open-source components used by GateLLM are primarily under the following permissive licenses:

• MIT License: permits free use, modification, and distribution, requiring retention of copyright and license notices. Most of GateLLM's dependencies use this license.
• Apache-2.0 License: similar to MIT, with additional patent grant terms.
• Commercial License: a small number of components such as HeroUI Pro use a commercial license; Fluxon LLC has purchased a compliant license and has the right to use and distribute them within GateLLM.

GateLLM connects to downstream model providers via BYOK. The licenses for provider SDKs and client libraries (if any) are provided and governed by each provider, and are not included within the scope of GateLLM's license notice.

When you configure a provider's API key in your self-hosted GateLLM instance, the license and usage terms between you and that provider are governed by the provider's terms of service. GateLLM acts only as a request-routing gateway and does not redistribute provider SDKs or model weights.

Sub-processor List

Each GateLLM release is accompanied by a Software Bill of Materials (SBOM) that fully lists all direct and transitive dependencies and their versions. Dependencies are regularly scanned for known vulnerabilities (CVEs); security patches are released per the vulnerability disclosure policy timeline and annotated with CVE IDs in the changelog.

Enterprise customers may request the current version's SBOM and dependency vulnerability scan report from support@gatellm.io or security@gatellm.io for procurement security assessment.

Vulnerability Disclosure Policy

GateLLM sincerely thanks the above open-source projects and their contributors. These open-source components are the foundation upon which GateLLM is built. The full copyright and license notices for each component are available in the NOTICE file provided with each release.

If you find this notice incomplete or incorrect, please contact support@gatellm.io so we can promptly correct and complete the attribution.

Terms of Service · Security & Compliance