Compass/NOTICE at main · ProsusAI/Compass · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
Project Compass
Copyright © 2026 MIH AI B.V.

This product includes software developed at MIH AI B.V.

Licensed under the Apache License, Version 2.0 (the "License"); you may not use
this software except in compliance with the License. You may obtain a copy of
the License in the LICENSE file in the project root or at:

    http://www.apache.org/licenses/LICENSE-2.0

------------------------------------------------------------------------------
THIRD-PARTY DEPENDENCIES
------------------------------------------------------------------------------

This software depends on the following third-party packages, retrieved at
install time and not redistributed within this repository. Their licenses are
reproduced or referenced here for attribution.

Permissive (Apache-2.0 / MIT / BSD / ISC / PSF):

  anthropic .................. MIT
  openai ..................... Apache-2.0
  mcp ........................ MIT
  aiohttp .................... Apache-2.0 AND MIT
  pyyaml ..................... MIT
  pydantic ................... MIT
  boto3 / botocore ........... Apache-2.0
  s3transfer ................. Apache-2.0
  matplotlib ................. Matplotlib License (BSD/PSF-style, permissive)
  numpy ...................... BSD-3-Clause
  httpx / httpcore ........... BSD-3-Clause
  starlette / uvicorn ........ BSD-3-Clause
  click / typer .............. BSD-3-Clause / MIT
  jsonschema ................. MIT
  anyio / sniffio ............ MIT
  rich / pygments ............ MIT / BSD-2-Clause
  (and their transitive permissive dependencies)

Weak copyleft (MPL-2.0) — used unmodified as install-time dependencies:

  certifi .................... Mozilla Public License 2.0 (MPL-2.0)
  tqdm ....................... MPL-2.0 AND MIT

  The MPL-2.0 source for these components is available from their respective
  upstream project repositories. MPL-2.0 obligations attach only to the
  MPL-licensed files themselves, which are used here without modification.

A complete, machine-generated Software Bill of Materials (SPDX) is produced by
the project's CI (`.github/workflows/open-source-ally.yml`) and attached as the
`sbom` artifact on each run.