Docs
Third-party notices
Localization OS is built on excellent, openly licensed software. This page lists the dependencies of a standard installation and their licenses, the optional components and their licenses, and the design provenance behind the built-in connectors.
A standard install pulls a locked set of packages. A few optional components add a handful more, only when you turn them on. This page lists the complete standard install, package by package, plus the reference material that shaped how Localization OS's built-in connectors were designed. The same inventory ships with the codebase as a locked requirements file.
Copyleft and weak-copyleft dependencies#
Most of the standard install is permissively licensed: MIT, BSD, Apache-2.0. A small number of dependencies carry copyleft or weak-copyleft terms. They are listed here plainly, license as recorded by the package itself, no editorializing.
| Package | License | Role |
|---|---|---|
| certifi | MPL-2.0 | Certificate authority bundle |
| tqdm | MPL-2.0 AND MIT | Progress display utility |
Every package above is a standard, unmodified release installed from PyPI. The standard install carries no GPL-family code: no GPL, LGPL or AGPL dependency. The two MPL entries are file-level weak copyleft, unmodified, and impose nothing on the product. Two optional integrations bring an LGPL driver only when you install their extra: the PostgreSQL driver (psycopg, via requirements-postgres.txt) and the LDAP client (ldap3, via requirements-ldap.txt). A default install runs on SQLite with local authentication and includes neither. A test in the codebase scans the locked dependency tree's license metadata on every change and fails on any GPL-family license, so this statement is enforced, not asserted.
Standard installation dependencies#
Every package in a standard Localization OS install, sorted alphabetically, with the license each package records for itself. The PDF stack is pypdfium2 (parsing and rendering) and typst (generating translated PDFs).
| Package | Version | License |
|---|---|---|
| alembic | 1.18.5 | MIT |
| annotated-types | 0.7.0 | MIT License |
| anthropic | 0.42.0 | MIT |
| anyio | 4.14.1 | MIT |
| argon2-cffi | 25.1.0 | MIT |
| argon2-cffi-bindings | 25.1.0 | MIT |
| attrs | 26.1.0 | MIT |
| babel | 2.17.0 | BSD-3-Clause |
| certifi | 2026.6.17 | MPL-2.0 |
| cffi | 2.0.0 | MIT |
| charset-normalizer | 3.4.7 | MIT |
| click | 8.4.2 | BSD-3-Clause |
| colorama | 0.4.6 | BSD-3-Clause |
| cryptography | 49.0.0 | Apache-2.0 OR BSD-3-Clause |
| distro | 1.9.0 | Apache Software License |
| et_xmlfile | 2.0.0 | MIT License |
| fastapi | 0.115.6 | MIT License |
| google-auth | 2.55.1 | Apache Software License |
| google-genai | 0.3.0 | Apache Software License |
| greenlet | 3.5.3 | MIT AND PSF-2.0 |
| h11 | 0.16.0 | MIT License |
| httpcore | 1.0.9 | BSD-3-Clause |
| httptools | 0.8.0 | MIT |
| httpx | 0.28.1 | BSD-3-Clause |
| httpx-sse | 0.4.3 | MIT |
| idna | 3.18 | BSD-3-Clause |
| itsdangerous | 2.2.0 | BSD-3-Clause |
| Jinja2 | 3.1.4 | BSD-3-Clause |
| jiter | 0.15.0 | MIT |
| jsonschema | 4.26.0 | MIT |
| jsonschema-specifications | 2025.9.1 | MIT |
| lxml | 5.3.0 | BSD-3-Clause |
| Mako | 1.3.12 | MIT License |
| MarkupSafe | 3.0.3 | BSD-3-Clause |
| mcp | 1.29.0 | MIT License |
| numpy | 2.5.1 | BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0 |
| openai | 1.59.6 | Apache-2.0 |
| openpyxl | 3.1.5 | MIT License |
| pillow | 11.3.0 | MIT-CMU |
| portalocker | 3.2.0 | BSD-3-Clause |
| pyasn1 | 0.6.3 | BSD-2-Clause |
| pyasn1_modules | 0.4.2 | BSD-3-Clause |
| pycparser | 3.0 | BSD-3-Clause |
| pydantic | 2.14.0a1 | MIT |
| pydantic-settings | 2.14.2 | MIT |
| pydantic_core | 2.47.0 | MIT |
| PyJWT | 2.13.0 | MIT |
| pypdfium2 | 5.13.0 | BSD-3-Clause OR Apache-2.0 |
| python-docx | 1.1.2 | MIT License |
| python-dotenv | 1.0.1 | BSD-3-Clause |
| python-multipart | 0.0.20 | Apache-2.0 |
| pywin32 | 312 | Python Software Foundation License |
| PyYAML | 6.0.3 | MIT License |
| RapidFuzz | 3.10.1 | MIT License |
| referencing | 0.37.0 | MIT |
| regex | 2026.7.19 | Apache-2.0 AND CNRI-Python |
| requests | 2.34.2 | Apache Software License |
| rpds-py | 2026.6.3 | MIT |
| sacrebleu | 2.6.0 | Apache-2.0 |
| sniffio | 1.3.1 | MIT License; Apache Software License |
| socksio | 1.0.0 | MIT License |
| SQLAlchemy | 2.0.51 | MIT |
| sqlmodel | 0.0.22 | MIT License |
| sse-starlette | 3.4.5 | BSD-3-Clause |
| starlette | 0.41.3 | BSD-3-Clause |
| tabulate | 0.10.0 | MIT |
| tenacity | 9.0.0 | Apache Software License |
| tqdm | 4.68.3 | MPL-2.0 AND MIT |
| typing-inspection | 0.4.2 | MIT |
| typing_extensions | 4.15.0 | PSF-2.0 |
| typst | 0.15.0 | Apache-2.0 |
| tzdata | 2026.2 | Apache-2.0 |
| urllib3 | 2.7.0 | MIT |
| uvicorn | 0.34.0 | BSD-3-Clause |
| watchfiles | 1.2.0 | MIT License |
| websockets | 14.2 | BSD-3-Clause |
Optional components#
A handful of features are opt-in and bring their own dependencies, only installed when you turn the feature on.
| Optional feature | Package | License |
|---|---|---|
| PostgreSQL backend | psycopg, psycopg-binary | LGPL-3.0-only |
| LDAP / Active Directory sign-in | ldap3 | LGPL-3.0 |
| S3-compatible storage | boto3 | Apache-2.0 |
| Metrics | prometheus_client | Apache-2.0 AND BSD-2-Clause |
| Local OCR | rapidocr | Apache-2.0 |
| Local OCR | onnxruntime | MIT |
| PII detection | presidio-analyzer | MIT |
| PII detection | spacy | MIT |
| PII detection | en_core_web_lg (spaCy language model) | MIT |
| PII detection | en_core_web_sm (spaCy language model) | MIT |
| SAML single sign-on | python3-saml | MIT |
| SAML single sign-on | xmlsec | MIT |
| At-rest database encryption | sqlcipher3 | MIT |
On the last row: the sqlcipher3 Python binding itself is MIT-licensed. SQLCipher, the encryption engine it binds to, is licensed separately by its publisher; that license is not restated here, see the publisher's own terms.
Connector design provenance#
Six of Localization OS's built-in connectors were designed by studying MIT-licensed reference connectors published by Blackbird at the bb-io GitHub organization. In every case the approach was reference-and-reimplement: the design, meaning endpoint coverage, auth flow, pagination, and localization strategy, was understood from the reference implementation and then written fresh. No code or assets were copied from any bb-io repository. Attribution is given below with respect to the original authors.
- Strapi: reference at github.com/bb-io/Strapi
- Contentful: reference at github.com/bb-io/Contentful
- Shopify: reference at github.com/bb-io/Shopify
- HubSpot: reference at github.com/bb-io/Hubspot
- WordPress: reference at github.com/bb-io/Wordpress
- Akeneo: reference at github.com/bb-io/Akeneo
The licenses of every package listed on this page are available from their respective projects. Questions about this page: brent@patoislabs.com.