Open source and third-party software

Werklo is built on open source software. This page lists the open source packages and self-hosted tools that make up the platform, together with their licenses, and the third-party services Werklo connects to. This is a transparency page, not a legally required document.

Framework and build tools

Next.js -- MIT (https://github.com/vercel/next.js)

React / React DOM -- MIT (https://github.com/facebook/react)

TypeScript -- Apache-2.0 (https://github.com/microsoft/TypeScript)

Tailwind CSS -- MIT (https://github.com/tailwindlabs/tailwindcss)

ESLint -- MIT (https://github.com/eslint/eslint)

Backend and payment SDKs

@supabase/supabase-js -- MIT (https://github.com/supabase/supabase-js)

@supabase/ssr -- MIT (https://github.com/supabase/ssr)

stripe (Node SDK) -- MIT (https://github.com/stripe/stripe-node)

@stripe/stripe-js -- MIT (https://github.com/stripe/stripe-js)

@stripe/react-stripe-js -- MIT (https://github.com/stripe/react-stripe-js)

resend (Node SDK) -- MIT (https://github.com/resend/resend-node)

@sentry/nextjs -- MIT (https://github.com/getsentry/sentry-javascript)

sanitize-html -- MIT (https://github.com/apostrophecms/sanitize-html)

pdf-lib -- MIT (https://github.com/Hopding/pdf-lib)

Rich text editor

Tiptap (core + starter-kit, link, underline, text-style, font-family extensions) -- MIT (https://github.com/ueberdosis/tiptap)

Icons

lucide-react -- ISC (https://github.com/lucide-icons/lucide)

Self-hosted infrastructure

Werklo runs its own instances of the following open source tools, rather than using their paid cloud offerings -- your data on these tools stays on Werklo-operated servers.

Umami (visitor analytics, self-hosted by Werklo) -- MIT (https://github.com/umami-software/umami)

GlitchTip (error tracking, self-hosted by Werklo) -- MIT (https://gitlab.com/glitchtip/glitchtip-backend)

Uptime Kuma (uptime monitoring, self-hosted by Werklo) -- MIT (https://github.com/louislam/uptime-kuma)

Third-party services

These are not open source software, but paid or freemium services that parts of the platform connect to. Listed here for transparency, not as a license grant.

Vercel -- application hosting

Supabase -- managed Postgres database and authentication

Cloudflare -- DNS and domain management

Stripe -- payment processing (platform billing and, optionally, each tenant's own connected account)

Szamlazz.hu, Billingo, Fakturoid -- invoicing providers a tenant may connect their own account to

Quaderno -- EU VAT compliance (planned, Growth plan and above)

Full production dependency list

The lists above cover the direct, major dependencies for readability. Werklo depends on many more indirect (transitive) packages through them -- the complete, machine-generated list of every production dependency and its license is published at /third-party-notices.txt, regenerated from package.json/pnpm-lock.yaml on every dependency change.

Package versions and the exact list in use can change between releases -- the generated notices file at /third-party-notices.txt is the public, authoritative record of the dependencies in the current production build. Questions about a specific license: hello@werklo.net.