Open source

Open source we use

Mercemur runs on the work of thousands of open-source authors. Here is every library we depend on, grouped by what it does, with its license.

282third-party open-source libraries, by license

MIT245Apache-2.021ISC7BSD-2-Clause4BSD-3-Clause1MIT-01MPL-2.01Hippocratic-2.11SEE LICENSE IN LICENSE1

None of Mercemur would exist without the wider open-source ecosystem. This page is our full accounting of that debt: every library the product ships with, sorted by category, each listed with the license it carries. We keep it public because the people who wrote this code earned the credit. If you maintain something listed here, thank you.

The large majority of these dependencies are MIT or Apache-2.0, both fully permissive licenses that let us use, modify, and ship the code with attribution. A smaller set carries BSD-2-Clause, BSD-3-Clause, and ISC, which are permissive on the same terms. A few are worth calling out by name. web-push is MPL-2.0, a weak file-level copyleft license; we use it unmodified, so the copyleft obligation never triggers. react-leaflet is Hippocratic-2.1, a source-available ethical-use license rather than a standard open-source one. nodemailer is MIT-0, which is MIT without the attribution clause. posthog-js declares its license as "SEE LICENSE IN LICENSE" in its manifest; the file it points to is MIT. We list these as they actually are, not rounded off.

Commerce framework

Mercemur is built on the open-source Medusa commerce engine. Medusa is an excellent piece of open-source engineering, and the team and contributors behind it have set a high bar for what a commerce framework can be. It gave us a mature, dependable foundation from day one and a clean, modular design we could build on without fighting it. That head start let us put our energy into the multi-tenant SaaS layer rather than the fundamentals, and we are grateful to the Medusa team and community for their work.

@medusajs/admin-bundlerMIT
Bundler for the admin dashboard
@medusajs/admin-sharedMIT
Shared code for admin packages
@medusajs/admin-vite-pluginMIT
commerce framework package
@medusajs/analyticsMIT
Analytics module
@medusajs/analytics-localMIT
Local analytics provider
@medusajs/analytics-posthogMIT
Posthog analytics provider
@medusajs/api-keyMIT
API Key module
@medusajs/authMIT
Auth module
@medusajs/auth-emailpassMIT
Email and password credential authentication provider
@medusajs/auth-githubMIT
Github OAuth authentication provider
@medusajs/auth-googleMIT
Google OAuth authentication provider
@medusajs/cache-inmemoryMIT
In-memory Cache Module
@medusajs/cache-redisMIT
Redis Cache Module
@medusajs/cachingMIT
Caching Module
@medusajs/caching-redisMIT
Redis Caching
@medusajs/cartMIT
Cart module
@medusajs/cliMIT
Command Line interface for Commerce
@medusajs/core-flowsMIT
Set of workflow definitions
@medusajs/currencyMIT
Currency module
@medusajs/customerMIT
Customer module
@medusajs/dashboardMIT
commerce framework package
@medusajs/depsMIT
Dependencies
@medusajs/draft-orderMIT
A draft order plugin
@medusajs/event-bus-localMIT
Local Event Bus Module
@medusajs/event-bus-redisMIT
Redis Event Bus Module
@medusajs/fileMIT
File module
@medusajs/file-localMIT
Local filesystem file storage
@medusajs/file-s3MIT
S3 protocol file storage. Supports any S3-compatible storage provider
@medusajs/frameworkMIT
Framework
@medusajs/fulfillmentMIT
Fulfillment module
@medusajs/fulfillment-manualMIT
Manual fulfillment
@medusajs/iconsMIT
UI React icon library
@medusajs/indexMIT
Index module
@medusajs/inventoryMIT
Inventory Module
@medusajs/js-sdkMIT
SDK for the API
@medusajs/link-modulesMIT
Default Link Modules Package and Definitions
@medusajs/lockingMIT
Locking Module
@medusajs/locking-postgresMIT
Postgres Advisory Locks
@medusajs/locking-redisMIT
Redis Lock
@medusajs/medusaMIT
Building blocks for digital commerce
@medusajs/medusa-oas-cliMIT
OAS CLI
@medusajs/modules-sdkMIT
SDK for medusa modules
@medusajs/notificationMIT
Notification module
@medusajs/notification-localMIT
Local (logging) notification provider, useful for testing purposes an
@medusajs/notification-sendgridMIT
Sendgrid notification provider
@medusajs/orchestrationMIT
utilities to orchestrate modules
@medusajs/orderMIT
Order module
@medusajs/paymentMIT
Payment module
@medusajs/payment-stripeMIT
Stripe payment provider
@medusajs/pricingMIT
Pricing module
@medusajs/productMIT
Product module
@medusajs/promotionMIT
Promotion module
@medusajs/rbacMIT
RBAC module
@medusajs/regionMIT
Region module
@medusajs/sales-channelMIT
Sales Channel module
@medusajs/settingsMIT
Settings module
@medusajs/stock-locationMIT
Stock Location Module
@medusajs/storeMIT
Store module
@medusajs/taxMIT
Tax module
@medusajs/telemetryMIT
Telemetry
@medusajs/test-utilsMIT
Test utils
@medusajs/translationMIT
Translation module
@medusajs/typesMIT
Types definition
@medusajs/uiMIT
commerce framework package
@medusajs/ui-presetMIT
UI preset
@medusajs/userMIT
Users module
@medusajs/utilsMIT
utilities functions shared by core and Modules
@medusajs/wishlistMIT
Wishlist module for customer product wishlists
@medusajs/workflow-engine-inmemoryMIT
Workflow Orchestrator module
@medusajs/workflow-engine-redisMIT
Workflow Orchestrator module using Redis to track workflows executions
@medusajs/workflows-sdkMIT
Set of workflows tooling

Dev & build tooling

Compilers, bundlers, linters, and test runners that turn our source into the product you use. Our largest category, almost all MIT or Apache-2.0.

@babel/parserMIT
Parses JavaScript source into an abstract syntax tree
@babel/runtimeMIT
Shared runtime helpers for Babel-compiled code
@babel/traverseMIT
Traverses and modifies JavaScript abstract syntax trees
@babel/typesMIT
Utility library for building AST nodes
@changesets/changelog-githubMIT
Generates GitHub changelog entries linking commits, PRs, and users
@changesets/cliMIT
Manages package versioning and publishing across the monorepo
@graphql-codegen/coreMIT
Generates code from GraphQL schemas
@graphql-codegen/typescriptMIT
Generates TypeScript types from GraphQL schemas
@graphql-tools/mergeMIT
Merges GraphQL type definitions and resolvers
@graphql-tools/schemaMIT
Builds and manipulates GraphQL schemas
@inquirer/checkboxMIT
Interactive checkbox prompt for CLI
@inquirer/inputMIT
Interactive text input prompt for CLI
@jercle/yargonautApache-2.0
Styles CLI output with colors and fonts
@redocly/cliMIT
CLI for linting and bundling OpenAPI docs
@types/expressMIT
TypeScript type definitions for Express
@types/pluralizeMIT
TypeScript type definitions for pluralize
@vitejs/plugin-reactMIT
Vite plugin enabling React in admin builds
autoprefixerMIT
Add vendor prefixes to CSS rules
boxenMIT
Draw boxes in the terminal
chalkMIT
Terminal string color styling
chokidarMIT
Cross-platform file watching
ci-infoMIT
Detect the current CI environment
commanderMIT
Build command-line interfaces
configstoreBSD-2-Clause
Persist config without managing file paths
dotenvBSD-2-Clause
Load environment variables from .env files
dotenv-expandBSD-2-Clause
Expand variables within dotenv values
execaMIT
Run external processes from Node
find-yarn-workspace-rootApache-2.0
Locate the root of a yarn workspace
get-portMIT
Find an available network port
hosted-git-infoISC
Parse metadata from git repository URLs
import-fromMIT
Import a module from a given path
inquirerMIT
Interactive command-line prompts
is-dockerMIT
Detect if running inside Docker
magic-stringMIT
Modify strings and generate sourcemaps
oraMIT
Terminal loading spinner
picocolorsISC
Tiny terminal output color formatting
postcssMIT
Transforms CSS with JavaScript plugins
promptsMIT
Lightweight interactive command line prompts
terminal-linkMIT
Creates clickable terminal links
tsconfig-pathsMIT
Resolves modules using tsconfig path aliases
verdaccioMIT
Lightweight private npm proxy registry
viteMIT
ESM-powered web dev build tool
wait-onMIT
Waits for files, ports, or resources
webpackMIT
Module bundler for browser code
yargsMIT
Command-line argument parser

UI components & styling

The building blocks of the admin dashboard and storefront: component primitives, styling engines, and design tokens.

@ariakit/reactMIT
Accessible React UI component toolkit for the admin
@base-ui/reactMIT
Headless React component library for the landing site
@dnd-kit/coreMIT
Drag-and-drop primitives for admin interfaces
@dnd-kit/sortableMIT
Sortable list preset for drag-and-drop reordering
@dnd-kit/utilitiesMIT
Shared utilities for drag-and-drop components
@headlessui/reactMIT
Unstyled accessible React UI components for the storefront
@hookform/error-messageMIT
Renders form validation error messages in React
@radix-ui/react-accordionMIT
Accessible accordion component for React
@radix-ui/react-dialogMIT
Accessible modal dialog primitive for React
@radix-ui/react-dismissable-layerMIT
Dismissable overlay layer primitive for React
@tailwindcss/formsMIT
Form element styling reset for Tailwind
@tanstack/react-tableMIT
Headless data-table building for React
@tanstack/react-virtualMIT
Virtualized rendering of large lists
@tiptap/extension-imageMIT
Image support for Tiptap rich text editor
@tiptap/extension-linkMIT
Link support for Tiptap rich text editor
@tiptap/pmMIT
ProseMirror wrapper for Tiptap editor
@tiptap/reactMIT
React components for Tiptap rich text editor
@tiptap/starter-kitMIT
Default extension bundle for Tiptap editor
@uiw/react-json-viewMIT
JSON viewer component for React
class-variance-authorityApache-2.0
Compose variant-based CSS class names
clsxMIT
Conditionally build className strings
cmdkMIT
Command menu component for React
copy-to-clipboardMIT
Copy text to the clipboard
cvaApache-2.0
Compose variant-based CSS class names
embla-carousel-autoplayMIT
Autoplay plugin for Embla carousel
embla-carousel-reactMIT
Lightweight React carousel with swipe support
lucide-reactISC
Icon library for React
motionMIT
Animation library for JavaScript and React
prism-react-rendererMIT
Renders highlighted Prism output in React
prismjsMIT
Lightweight syntax highlighting library
radix-uiMIT
Accessible unstyled React UI primitives
react-ariaApache-2.0
Accessible React UI hooks and components
react-country-flagMIT
Renders country flag components in React
react-currency-input-fieldMIT
React input for currency and number formatting
react-hook-formMIT
Form state management for React
react-statelyApache-2.0
State management for React UI components
shadcnMIT
Adds prebuilt UI components to apps
sonnerMIT
Toast notification component for React
survey-coreMIT
Framework-independent core for JSON-based forms
survey-react-uiMIT
React renderer for dynamic JSON-based forms
tailwind-mergeMIT
Merges Tailwind classes without conflicts
tailwindcssMIT
Utility-first CSS framework
tailwindcss-animateMIT
Tailwind plugin for animations
tailwindcss-radixMIT
Tailwind utilities for styling Radix component state
tw-animate-cssMIT
Tailwind v4 animation utilities replacement

Utilities

Small, focused helpers for dates, types, object handling, and the everyday plumbing that shows up across the codebase.

@onboardjs/coreMIT
Headless logic for dynamic onboarding flows
awilixMIT
Dependency injection container
bignumber.jsMIT
Arbitrary-precision decimal arithmetic for money math
date-fnsMIT
Modern date manipulation utilities
fast-json-stable-stringifyMIT
Deterministic JSON stringification
lodashMIT
Modular JavaScript utility helpers
lodash.debounceMIT
Debounce function calls
lodash.isequalMIT
Deep equality comparison
lodash.memoizeMIT
Memoize function results
lodash.mergewithMIT
Deep merge objects with a customizer
meantMIT
Suggest did-you-mean corrections for strings
nanoidMIT
Tiny secure unique string ID generator
node-emojiMIT
Emoji lookup and parsing for Node
openMIT
Opens URLs, files, and executables cross-platform
outdentMIT
Removes leading indentation from template literals
pluralizeMIT
Pluralizes and singularizes words
remove-trailing-slashMIT
Removes trailing slashes from strings
resolve-cwdMIT
Resolves module path from working directory
server-onlyMIT
Marker preventing module use outside server components
signal-exitISC
Fires events when a process exits
slugifyMIT
Converts strings into URL slugs
ts-dedentMIT
Trims indentation from multi-line strings
ulidMIT
Sortable unique identifier generator
uuidMIT
Generates RFC4122 UUIDs
xxhash-wasmMIT
WebAssembly xxHash hashing implementation

File, data & parsing

Reading, writing, and transforming files and structured data such as CSV, JSON, and archive formats.

csv-parseMIT
Stream-based CSV parser
delMIT
Delete files and directories
fdirMIT
Fast directory crawler and globbing
fs-exists-cachedISC
Cached file existence checks
fs-extraMIT
Extended filesystem methods beyond Node fs
globISC
Match file paths using glob patterns
is-valid-pathMIT
Check that a file path is valid
json-2-csvMIT
Convert between JSON and CSV with nesting
multerMIT
Handle multipart form-data file uploads
openapi3-tsMIT
TypeScript models for OpenAPI 3 specs
qsBSD-3-Clause
Query string parser with nesting and arrays
swagger-inlineISC
Generates OpenAPI definitions from inline comments

HTTP & networking

Clients and servers that move requests between the storefront, the admin, our backend, and outside services.

axiosMIT
Promise-based HTTP client for browser and Node
axios-retryApache-2.0
Retry failed axios requests
compressionMIT
HTTP response compression middleware
cookie-parserMIT
Parse HTTP request cookies
expressMIT
Minimalist web server framework
fetch-event-streamMIT
Server-sent event streaming over fetch
gotMIT
HTTP request library for Node
graphqlMIT
GraphQL query language and runtime
node-fetchMIT
Brings Fetch API to Node.js
path-to-regexpMIT
Converts route paths to regular expressions
request-ipMIT
Retrieves a request's IP address

Observability & logging

Error tracking, structured logs, and tracing so we can see what the platform is doing in production and fix it fast.

@opentelemetry/apiApache-2.0
Public API for OpenTelemetry instrumentation
@opentelemetry/instrumentation-pgApache-2.0
Traces PostgreSQL queries via OpenTelemetry
@opentelemetry/resourcesApache-2.0
Defines resource metadata for OpenTelemetry
@opentelemetry/sdk-nodeApache-2.0
OpenTelemetry SDK for Node.js telemetry
@opentelemetry/sdk-trace-nodeApache-2.0
Automatic tracing telemetry for Node.js apps
@sentry/nextjsMIT
Error and performance monitoring for Next.js
@sentry/nodeMIT
Error and performance monitoring for the backend
@sentry/reactMIT
Error and performance monitoring for the admin
morganMIT
HTTP request logging middleware
stack-traceMIT
Gets V8 stack traces as call objects
winstonMIT
General-purpose logger for Node

Database & ORM

The data layer: Postgres drivers, query builders, and the object-relational mapping that backs every order and product.

@aws-sdk/client-dynamodbApache-2.0
DynamoDB client for storing and querying NoSQL data
@mikro-orm/cliMIT
Command line tooling for MikroORM
@mikro-orm/coreMIT
TypeScript ORM core for Node.js
@mikro-orm/knexMIT
Knex query builder driver for MikroORM
@mikro-orm/migrationsMIT
Schema migration support for MikroORM
@mikro-orm/postgresqlMIT
PostgreSQL driver for MikroORM
pgMIT
PostgreSQL client for Node.js
pg-connection-stringMIT
Parses PostgreSQL connection strings
pg-godMIT
Creates and drops PostgreSQL databases

Caching & queues

Redis-backed caching and background job queues that keep pages quick and offload slow work from the request path.

@neshca/cache-handlerMIT
Self-hosting cache handler for Next.js
bullmqMIT
Redis-backed job and message queue
connect-redisMIT
Redis-backed session store for Express
cron-parserMIT
Parse crontab schedule expressions
ioredisMIT
Full-featured Redis client for Node
node-cacheMIT
Simple in-memory caching for Node
node-scheduleMIT
Cron-like job scheduler for Node
redisMIT
Redis client for storefront caching

Validation & schemas

Schema definitions and runtime checks that validate input at every system boundary before it reaches our logic.

@hookform/resolversMIT
Connects React Hook Form to schema validators like Zod
@readme/json-schema-ref-parserMIT
Parses and dereferences JSON Schema refs
@readme/openapi-parserMIT
Parses and validates OpenAPI specs
validatorMIT
String validation and sanitization
zodMIT
TypeScript-first schema validation with type inference
zod-validation-errorMIT
Formats Zod errors into readable messages

Frontend framework

The core rendering and routing layer behind the storefront and admin, including React and Next.js.

@tanstack/react-queryMIT
Manages caching and syncing of server data
nextMIT
React framework powering storefront and landing pages
reactMIT
Library for building user interfaces
react-domMIT
React renderer for the DOM
react-helmet-asyncApache-2.0
Thread-safe document head management for React
react-router-domMIT
Declarative routing for React web apps

Media & images

Image resizing, format conversion, and media handling for product photos and store assets.

@svgr/coreMIT
Transforms SVG files into React components
@svgr/plugin-jsxMIT
Transforms SVG into JSX for SVGR
@svgr/plugin-prettierMIT
Formats SVGR output using Prettier
@svgr/plugin-svgoMIT
Optimizes SVG output for SVGR
sharpApache-2.0
High performance image processing for Node
threeMIT
JavaScript 3D graphics library

Auth & security

Password hashing, token signing, and the cryptographic primitives that protect accounts and sessions.

bcryptjsMIT
Password hashing with bcrypt in pure JS
corsMIT
Cross-origin resource sharing middleware
express-sessionMIT
Session middleware for Express
jsonwebtokenMIT
Sign and verify JSON Web Tokens
react-jwtMIT
Decodes JSON web tokens in React
scrypt-kdfMIT
Scrypt key derivation function

Payments

SDKs for the payment providers merchants connect, including Stripe, Razorpay, and Dodo Payments.

@stripe/react-stripe-jsMIT
React components for Stripe Elements checkout
@stripe/stripe-jsMIT
Loads Stripe.js for client-side payments
dodopaymentsApache-2.0
Official SDK for Dodo Payments API
razorpayMIT
Official Node SDK for Razorpay payments
stripeMIT
Stripe API client wrapper

Email & notifications

Sending transactional email and push notifications to merchants and their customers.

@aws-sdk/client-snsApache-2.0
AWS SNS client for sending push and SMS notifications
@sendgrid/mailMIT
Sends transactional email via SendGrid
nodemailerMIT-0
Sends email from Node applications
web-pushMPL-2.0
Web push notification library for Node

Internationalization

Translation, locale handling, and formatting so stores can run in more than one language and currency.

i18nextMIT
Internationalization framework
i18next-browser-languagedetectorMIT
Detect user language in the browser
i18next-http-backendMIT
Load translation resources over HTTP
react-i18nextMIT
Internationalization for React using i18next

Cloud & object storage

S3-compatible clients for storing product files, digital downloads, and backups in object storage.

@aws-sdk/client-s3Apache-2.0
S3 client for storing and retrieving product files
@aws-sdk/lib-storageApache-2.0
Handles multipart uploads to S3 object storage
@aws-sdk/s3-request-presignerApache-2.0
Generates presigned S3 URLs for secure file access

Maps & geo

Map rendering and geocoding for address entry, shipping zones, and location-based features.

leafletBSD-2-Clause
Mobile-friendly interactive maps library
react-leafletHippocratic-2.1
React components for Leaflet maps

Search

Full-text and faceted search over product catalogs.

match-sorterMIT
Best-match sorting and filtering of arrays

Shipping & fulfillment

Carrier integration for rates, labels, and tracking through providers like ShipEngine.

shipengineApache-2.0
Official ShipEngine SDK for shipping operations

Analytics & tracking

Product analytics that show how merchants and shoppers actually move through the platform.

posthog-jsSEE LICENSE IN LICENSE
Captures usage events and sends to PostHog

Built in the open ecosystem

Standing on the work of thousands of contributors.

We keep this list honest and current. If you maintain a library here and want a correction, reach out and we will fix it.

Start selling for free Contact us