Open source

Open source we use

Mercemur runs on the work of thousands of open-source authors. Here is every dependency the product installs, grouped by what it does, with its license.

143third-party dependencies, by license

MIT114Apache-2.010BSD-3-Clause9ISC3BSD-2-Clause3SEE LICENSE IN LICENSE1Hippocratic-2.11MPL-2.01MIT OR Apache-2.01

None of Mercemur would exist without the wider open-source ecosystem. This page is our full accounting of that debt: every third-party dependency the product installs, across the Go backend, the admin dashboard, the storefront and this site, each listed with the license it carries. It is generated from our lockfiles rather than maintained by hand, so it says what we actually ship. If you maintain something listed here, thank you.

Most of these are MIT or Apache-2.0, both fully permissive licenses that let us use, modify and ship the code with attribution. BSD-2-Clause, BSD-3-Clause and ISC are permissive on the same terms. A few are worth naming. web-push is MPL-2.0, a weak file-level copyleft license; we use it unmodified, so the copyleft obligation never triggers. react-leaflet carries Hippocratic-2.1, which is a source-available ethical-use license rather than an OSI-approved open-source one, which is why this page counts dependencies rather than calling all of them open source. posthog-js declares "SEE LICENSE IN LICENSE" in its manifest; the file it points at is MIT. We list these as they are, not rounded off.

Software bill of materials

143 components with versions and package URLs, generated from our lockfiles on 2026-09-09. Use these for licence review or vulnerability scanning rather than parsing the table below.

SPDX 2.3 (JSON)CycloneDX 1.5 (JSON)

Libraries & utilities

49 libraries

49 dependencies.

@adyen/adyen-webMIT
Used by the product
@axe-core/playwrightMPL-2.0
Provides a method to inject and analyze web pages using axe
@babel/coreMIT
Babel compiler core
@dnd-kit/coreMIT
dnd kit – a lightweight React library for building performant and accessible drag and drop experiences
@dnd-kit/sortableMIT
Official sortable preset and sensors for dnd kit
@dnd-kit/utilitiesMIT
Internal utilities to bee shared between `@dnd-kit` packages
@lexical/codeMIT
This package contains the functionality for the code blocks and code highlighting for Lexical
@lexical/code-prismMIT
This package contains the code highlighter for Lexical using the prism engine
@lexical/code-shikiMIT
This package contains the code highlighter for Lexical using shikijs engine
@lexical/extensionMIT
This package provides the extension functionality for Lexical
@lexical/fileMIT
This package provides the file import/export feature for Lexical
@lexical/hashtagMIT
This package contains the functionality for Lexical hashtags
@lexical/historyMIT
This package contains selection history helpers for Lexical
@lexical/htmlMIT
This package contains HTML helpers and functionality for Lexical
@lexical/linkMIT
This package contains the functionality for Lexical links
@lexical/listMIT
This package provides the list feature for Lexical
@lexical/markdownMIT
This package contains Markdown helpers and functionality for Lexical
@lexical/overflowMIT
This package contains selection overflow helpers and nodes for Lexical
@lexical/rich-textMIT
This package contains rich text helpers for Lexical
@lexical/selectionMIT
This package contains utilities and helpers for handling Lexical selection
@lexical/tableMIT
This package provides the Table feature for Lexical
@lexical/textMIT
This package contains utilities and helpers for handling Lexical text
@lexical/utilsMIT
This package contains misc utilities for Lexical
@playwright/testApache-2.0
A high-level API to automate web browsers
@tiptap/extension-linkMIT
link extension for tiptap
@tiptap/pmMIT
prosemirror wrapper package for tiptap
@tiptap/starter-kitMIT
starter kit for tiptap
ansi-colorsMIT
Easily add ANSI colors to your text and symbols in the terminal
babel-loaderMIT
babel module loader for webpack
cmdkMIT
Used by the product
cross-envMIT
Run scripts that set and use environment variables across platforms
date-fnsMIT
Modern JavaScript date utility library
globalsMIT
Global identifiers from different JavaScript environments
gopkg.in/yaml.v3Apache-2.0
Go module used by the backend
lexicalMIT
Lexical is an extensible text editor framework that provides excellent reliability, accessible and performance
lodashMIT
Lodash modular utilities
parse5MIT
HTML parser and serializer
pgMIT
PostgreSQL client - pure javascript & libpq with the same API
posthog-jsSEE LICENSE IN LICENSE
Posthog-js allows you to automatically capture usage and send events to PostHog
qsBSD-3-Clause
A querystring parser that supports nesting and arrays, with a depth limit
radix-uiMIT
Used by the product
rechartsMIT
React charts
server-onlyMIT
This is a marker package to indicate that a module can only be used in Server Components
shadcnMIT
Add components to your apps
sonnerMIT
An opinionated toast component for React
survey-coreMIT
A framework-independent core of the SurveyJS Form Library that works with rendering packages
threeMIT
JavaScript 3D library
webpackMIT
Packs ECMAScript/CommonJs/AMD modules for the browser
wranglerMIT OR Apache-2.0
Command-line interface for all things Cloudflare Workers

Storefront & site

31 libraries

31 dependencies.

@base-ui/reactMIT
Base UI is a library of headless ('unstyled') React components and low-level hooks
@fortedigital/nextjs-cache-handlerMIT
Next.js cache handlers
@headlessui/reactMIT
A set of completely unstyled, fully accessible UI components for React, designed to integrate beautifully with Tailwi...
@lexical/reactMIT
This package provides Lexical components and hooks for React applications
@next/eslint-plugin-nextMIT
ESLint plugin for Next.js
@next/third-partiesMIT
Used by the product
@opennextjs/cloudflareMIT
Cloudflare builder for next apps
@sentry/nextjsMIT
Official Sentry SDK for Next.js
@tiptap/reactMIT
React components for tiptap
@types/leafletMIT
TypeScript definitions for leaflet
@types/reactMIT
TypeScript definitions for react
@types/react-domMIT
TypeScript definitions for react-dom
@types/react-instantsearch-domMIT
TypeScript definitions for react-instantsearch-dom
@vitejs/plugin-reactMIT
The default Vite plugin for React projects
embla-carousel-autoplayMIT
An autoplay plugin for Embla Carousel
embla-carousel-reactMIT
A lightweight carousel library with fluid motion and great swipe precision
eslint-config-nextMIT
ESLint configuration used by Next.js
eslint-plugin-reactMIT
React specific linting rules for ESLint
eslint-plugin-react-hooksMIT
ESLint rules for React Hooks
leafletBSD-2-Clause
JavaScript library for mobile-friendly interactive maps
lucide-reactISC
A Lucide icon library package for React applications
nextMIT
The React Framework
next-themesMIT
Used by the product
qrcode.reactISC
React component to generate QR codes
reactMIT
React is a JavaScript library for building user interfaces
react-country-flagMIT
Used by the product
react-day-pickerMIT
Customizable Date Picker for React
react-domMIT
React package for working with the DOM
react-leafletHippocratic-2.1
React components for Leaflet maps
react-router-domMIT
Declarative routing for React web applications
survey-react-uiMIT
A free MIT-licensed React UI component that renders dynamic, interactive JSON-based forms and surveys

Commerce backend

19 libraries

19 dependencies.

github.com/go-chi/chi/v5MIT
HTTP router the API is built on
github.com/golang-jwt/jwt/v5MIT
Signs and verifies JSON Web Tokens
github.com/google/uuidBSD-3-Clause
UUID generation
github.com/joho/godotenvMIT
Loads environment variables from a file
github.com/Notifuse/liquidgoMIT
Liquid template rendering for storefronts
github.com/oklog/ulid/v2Apache-2.0
Sortable unique identifiers
github.com/oschwald/geoip2-golangISC
IP geolocation lookups
github.com/pmezard/go-difflibBSD-2-Clause
Readable diffs in test failures
github.com/pquerna/otpApache-2.0
Time-based one-time passwords for MFA
github.com/signintech/gopdfMIT
Generates PDF invoices and labels
github.com/TwiN/go-awayMIT
Profanity filtering for merchant-authored content
go.uber.org/goleakMIT
Fails tests that leak goroutines
golang.org/x/cryptoBSD-3-Clause
Go module used by the backend
golang.org/x/netBSD-3-Clause
Go module used by the backend
golang.org/x/oauth2BSD-3-Clause
Go module used by the backend
golang.org/x/syncBSD-3-Clause
Go module used by the backend
golang.org/x/textBSD-3-Clause
Go module used by the backend
golang.org/x/timeBSD-3-Clause
Go module used by the backend
google.golang.org/apiBSD-3-Clause
Go module used by the backend

Dev & build tooling

13 libraries

13 dependencies.

@types/lodashMIT
TypeScript definitions for lodash
@types/nodeMIT
TypeScript definitions for Node.js
@types/pgMIT
TypeScript definitions for pg
@types/threeMIT
TypeScript definitions for three
@vitest/coverage-v8MIT
V8 coverage provider for Vitest
eslintMIT
An AST-based pattern checker for JavaScript
eslint-plugin-jsx-a11yMIT
Static AST checker for accessibility rules on JSX elements
jsdomMIT
A JavaScript implementation of many web standards
prettierMIT
Prettier is an opinionated code formatter
typescriptApache-2.0
TypeScript is a language for application scale JavaScript development
typescript-eslintMIT
Tooling which enables you to use TypeScript with ESLint
viteMIT
Native-ESM powered web dev build tool
vitestMIT
Next generation testing framework powered by Vite

Styling

10 libraries

10 dependencies.

@tailwindcss/postcssMIT
PostCSS plugin for Tailwind CSS, a utility-first CSS framework for rapidly building custom user interfaces
@tailwindcss/typographyMIT
A Tailwind CSS plugin for automatically styling plain HTML content with beautiful typographic defaults
autoprefixerMIT
Parse CSS and add vendor prefixes to CSS rules using values from the Can I Use website
class-variance-authorityApache-2.0
Class Variance Authority
clsxMIT
A tiny (239B) utility for constructing className strings conditionally
postcssMIT
Tool for transforming styles with JS plugins
tailwind-mergeMIT
Merge Tailwind CSS classes without style conflicts
tailwindcssMIT
A utility-first CSS framework for rapidly building custom user interfaces
tailwindcss-radixMIT
Utilities and variants for styling Radix state
tw-animate-cssMIT
TailwindCSS v4.0 compatible replacement for `tailwindcss-animate`

Admin dashboard UI

7 libraries

7 dependencies.

@medusajs/iconsMIT
Medusa UI React icon library
@medusajs/js-sdkMIT
SDK for the Medusa API
@medusajs/typesMIT
Medusa Types definition
@medusajs/uiMIT
Used by the product
@medusajs/ui-presetMIT
Medusa UI preset
@radix-ui/react-accordionMIT
Used by the product
@tanstack/react-queryMIT
Hooks for managing, caching and syncing asynchronous and remote data in React

Data & storage

6 libraries

6 dependencies.

github.com/alicebob/miniredis/v2MIT
In-memory Redis for tests
github.com/jackc/pgx/v5MIT
PostgreSQL driver and connection pool
github.com/minio/minio-go/v7Apache-2.0
S3-compatible object storage client
github.com/qdrant/go-clientApache-2.0
Vector database client for retrieval
github.com/redis/go-redis/v9BSD-2-Clause
Redis client for caching and rate limits
redisMIT
A modern, high performance Redis client

Payments

5 libraries

5 dependencies.

@stripe/react-stripe-jsMIT
React components for Stripe.js and Stripe Elements
@stripe/stripe-jsMIT
Stripe.js loading utility
github.com/dodopayments/dodopayments-goApache-2.0
Dodo Payments API client
github.com/razorpay/razorpay-goMIT
Razorpay API client
github.com/stripe/stripe-go/v86MIT
Stripe API client

AI & search

3 libraries

3 dependencies.

github.com/openai/openai-goApache-2.0
OpenAI client for the sales agent
github.com/pkoukk/tiktoken-goMIT
Token counting for model cost controls
github.com/pkoukk/tiktoken-go-loaderMIT
Loads token encodings for tiktoken

Built in the open ecosystem

Standing on the work of thousands of contributors.

We keep this list honest and current. If you maintain a library here and want a correction, reach out and we will fix it.

Start selling for free Contact us