Open-Source Licences

Last updated: 2026-07-17

DRAFT (revamp 2026-07) — for SA attorney review only. Not legal advice. Not for publication.
Placeholders marked [TBD: …] require factual confirmation before this document may be finalised or published.
All statutory references in this draft are indicative and must be verified by counsel against the current text of each Act before any reliance or publication.

eRunna and its associated mobile applications, backend services, and websites ("the Software") are built on a foundation of open-source software. In accordance with the terms of the licences under which those packages are distributed, we publish these attributions to acknowledge the work of the open-source community and to meet our licence obligations.

Nothing on this page constitutes a claim of ownership over any third-party package listed below. Each package remains the intellectual property of its respective authors and is used under the licence terms stated.

1. How this attribution list is generated

The authoritative source of truth for all third-party dependencies is the set of package lockfiles across the eRunna monorepo and service repositories:

The list below is intended to be auto-generated from those lockfiles using a licence-extraction tool (for example license-checker, licensee, or an equivalent) and regenerated on each production release.

[TBD: generate OSS attributions from lockfiles]
The full, auto-generated attribution table has not yet been produced. Before this page is published, an attorney-reviewed attribution report must be generated from all production lockfiles, reviewed for any copyleft (GPL/LGPL/AGPL) obligations that may affect proprietary code, and inserted here. Until that process is complete, this page must remain unpublished.

2. Licence categories expected in the dependency tree

Based on the technology stack (React Native, Node.js / TypeScript services, Firebase SDK, Google Cloud client libraries), the following licence families are expected to appear in the generated list. Each category carries different obligations:

Licence family Typical obligation Copyleft?
MIT Retain copyright notice and licence text No
Apache 2.0 Retain NOTICE file; state changes No (patent grant included)
BSD 2-Clause / BSD 3-Clause Retain copyright notice No
ISC Retain copyright notice No
Mozilla Public Licence 2.0 (MPL-2.0) Source of modified MPL files must be disclosed File-level weak copyleft
GNU GPL / LGPL / AGPL Strong copyleft — any GPL dependency that is linked into proprietary code may require disclosure of proprietary source; AGPL extends this to network-distributed software Yes — legal review required before use

South African copyright law (Copyright Act 98 of 1978, as amended) applies to works created or used in South Africa. Open-source licence obligations are understood to operate as contractual conditions of the licence grant; the precise interpretation and enforceability of those conditions under South African law is [ATTORNEY-REQUIRED: confirm citation]. Breaching a licence condition (for example, failing to retain a copyright notice) may, subject to counsel's advice, expose the platform operator to a copyright infringement claim [ATTORNEY-REQUIRED: confirm citation].

3. Third-party package attributions

The table below will be populated by the auto-generation process described in section 1. It will list, for each production dependency:

[TBD: insert auto-generated attribution table here]
To be generated from all production lockfiles prior to publication. The generation command and output format must be agreed with the attorney reviewing this document.

4. Proprietary and internally developed components

The following components of the eRunna platform are proprietary and are not distributed under any open-source licence:

Use of any eRunna proprietary component without express written permission is prohibited.

5. Feedback and corrections

If you believe that a required attribution has been omitted or is incorrectly stated, please contact us at info@erunna.app with the subject line "OSS Attribution Notice". We will investigate and, where required, correct the attribution within a reasonable time.

Related policies