--- title: "Open source and licenses, Mercemur" description: "Every third-party dependency Mercemur installs, grouped by what it does, with its license." canonical_url: "https://mercemur.com/open-source" last_updated: "2026-09-15" --- Open source # Open source we use Mercemur runs on the work of thousands of open-source authors. Here is every dependency the product installs, grouped by what it does, with its license. 143third-party dependencies, by license MIT114Apache-2.010BSD-3-Clause9ISC3BSD-2-Clause3SEE LICENSE IN LICENSE1Hippocratic-2.11MPL-2.01MIT OR Apache-2.01 None of Mercemur would exist without the wider open-source ecosystem. This page is our full accounting of that debt: every third-party dependency the product installs, across the Go backend, the admin dashboard, the storefront and this site, each listed with the license it carries. It is generated from our lockfiles rather than maintained by hand, so it says what we actually ship. If you maintain something listed here, thank you. Most of these are MIT or Apache-2.0, both fully permissive licenses that let us use, modify and ship the code with attribution. BSD-2-Clause, BSD-3-Clause and ISC are permissive on the same terms. A few are worth naming. web-push is MPL-2.0, a weak file-level copyleft license; we use it unmodified, so the copyleft obligation never triggers. react-leaflet carries Hippocratic-2.1, which is a source-available ethical-use license rather than an OSI-approved open-source one, which is why this page counts dependencies rather than calling all of them open source. posthog-js declares "SEE LICENSE IN LICENSE" in its manifest; the file it points at is MIT. We list these as they are, not rounded off. Software bill of materials 143 components with versions and package URLs, generated from our lockfiles on 2026-09-09. Use these for licence review or vulnerability scanning rather than parsing the table below. [SPDX 2.3 (JSON)](https://mercemur.com/open-source/sbom.spdx.json) [CycloneDX 1.5 (JSON)](https://mercemur.com/open-source/sbom.cyclonedx.json) [Libraries & utilities49](https://mercemur.com/open-source#libraries-utilities) [Storefront & site31](https://mercemur.com/open-source#storefront-site) [Commerce backend19](https://mercemur.com/open-source#commerce-backend) [Dev & build tooling13](https://mercemur.com/open-source#dev-build-tooling) [Styling10](https://mercemur.com/open-source#styling) [Admin dashboard UI7](https://mercemur.com/open-source#admin-dashboard-ui) [Data & storage6](https://mercemur.com/open-source#data-storage) [Payments5](https://mercemur.com/open-source#payments) [AI & search3](https://mercemur.com/open-source#ai-search) ## Libraries & utilities 49 libraries 49 dependencies. - `@adyen/adyen-web`MIT Used by the product - `@axe-core/playwright`MPL-2.0 Provides a method to inject and analyze web pages using axe - `@babel/core`MIT Babel compiler core - `@dnd-kit/core`MIT dnd kit – a lightweight React library for building performant and accessible drag and drop experiences - `@dnd-kit/sortable`MIT Official sortable preset and sensors for dnd kit - `@dnd-kit/utilities`MIT Internal utilities to bee shared between \`@dnd-kit\` packages - `@lexical/code`MIT This package contains the functionality for the code blocks and code highlighting for Lexical - `@lexical/code-prism`MIT This package contains the code highlighter for Lexical using the prism engine - `@lexical/code-shiki`MIT This package contains the code highlighter for Lexical using shikijs engine - `@lexical/extension`MIT This package provides the extension functionality for Lexical - `@lexical/file`MIT This package provides the file import/export feature for Lexical - `@lexical/hashtag`MIT This package contains the functionality for Lexical hashtags - `@lexical/history`MIT This package contains selection history helpers for Lexical - `@lexical/html`MIT This package contains HTML helpers and functionality for Lexical - `@lexical/link`MIT This package contains the functionality for Lexical links - `@lexical/list`MIT This package provides the list feature for Lexical - `@lexical/markdown`MIT This package contains Markdown helpers and functionality for Lexical - `@lexical/overflow`MIT This package contains selection overflow helpers and nodes for Lexical - `@lexical/rich-text`MIT This package contains rich text helpers for Lexical - `@lexical/selection`MIT This package contains utilities and helpers for handling Lexical selection - `@lexical/table`MIT This package provides the Table feature for Lexical - `@lexical/text`MIT This package contains utilities and helpers for handling Lexical text - `@lexical/utils`MIT This package contains misc utilities for Lexical - `@playwright/test`Apache-2.0 A high-level API to automate web browsers - `@tiptap/extension-link`MIT link extension for tiptap - `@tiptap/pm`MIT prosemirror wrapper package for tiptap - `@tiptap/starter-kit`MIT starter kit for tiptap - `ansi-colors`MIT Easily add ANSI colors to your text and symbols in the terminal - `babel-loader`MIT babel module loader for webpack - `cmdk`MIT Used by the product - `cross-env`MIT Run scripts that set and use environment variables across platforms - `date-fns`MIT Modern JavaScript date utility library - `globals`MIT Global identifiers from different JavaScript environments - `gopkg.in/yaml.v3`Apache-2.0 Go module used by the backend - `lexical`MIT Lexical is an extensible text editor framework that provides excellent reliability, accessible and performance - `lodash`MIT Lodash modular utilities - `parse5`MIT HTML parser and serializer - `pg`MIT PostgreSQL client - pure javascript & libpq with the same API - `posthog-js`SEE LICENSE IN LICENSE Posthog-js allows you to automatically capture usage and send events to PostHog - `qs`BSD-3-Clause A querystring parser that supports nesting and arrays, with a depth limit - `radix-ui`MIT Used by the product - `recharts`MIT React charts - `server-only`MIT This is a marker package to indicate that a module can only be used in Server Components - `shadcn`MIT Add components to your apps - `sonner`MIT An opinionated toast component for React - `survey-core`MIT A framework-independent core of the SurveyJS Form Library that works with rendering packages - `three`MIT JavaScript 3D library - `webpack`MIT Packs ECMAScript/CommonJs/AMD modules for the browser - `wrangler`MIT OR Apache-2.0 Command-line interface for all things Cloudflare Workers ## Storefront & site 31 libraries 31 dependencies. - `@base-ui/react`MIT Base UI is a library of headless ('unstyled') React components and low-level hooks - `@fortedigital/nextjs-cache-handler`MIT Next.js cache handlers - `@headlessui/react`MIT A set of completely unstyled, fully accessible UI components for React, designed to integrate beautifully with Tailwi... - `@lexical/react`MIT This package provides Lexical components and hooks for React applications - `@next/eslint-plugin-next`MIT ESLint plugin for Next.js - `@next/third-parties`MIT Used by the product - `@opennextjs/cloudflare`MIT Cloudflare builder for next apps - `@sentry/nextjs`MIT Official Sentry SDK for Next.js - `@tiptap/react`MIT React components for tiptap - `@types/leaflet`MIT TypeScript definitions for leaflet - `@types/react`MIT TypeScript definitions for react - `@types/react-dom`MIT TypeScript definitions for react-dom - `@types/react-instantsearch-dom`MIT TypeScript definitions for react-instantsearch-dom - `@vitejs/plugin-react`MIT The default Vite plugin for React projects - `embla-carousel-autoplay`MIT An autoplay plugin for Embla Carousel - `embla-carousel-react`MIT A lightweight carousel library with fluid motion and great swipe precision - `eslint-config-next`MIT ESLint configuration used by Next.js - `eslint-plugin-react`MIT React specific linting rules for ESLint - `eslint-plugin-react-hooks`MIT ESLint rules for React Hooks - `leaflet`BSD-2-Clause JavaScript library for mobile-friendly interactive maps - `lucide-react`ISC A Lucide icon library package for React applications - `next`MIT The React Framework - `next-themes`MIT Used by the product - `qrcode.react`ISC React component to generate QR codes - `react`MIT React is a JavaScript library for building user interfaces - `react-country-flag`MIT Used by the product - `react-day-picker`MIT Customizable Date Picker for React - `react-dom`MIT React package for working with the DOM - `react-leaflet`Hippocratic-2.1 React components for Leaflet maps - `react-router-dom`MIT Declarative routing for React web applications - `survey-react-ui`MIT A free MIT-licensed React UI component that renders dynamic, interactive JSON-based forms and surveys ## Commerce backend 19 libraries 19 dependencies. - `github.com/go-chi/chi/v5`MIT HTTP router the API is built on - `github.com/golang-jwt/jwt/v5`MIT Signs and verifies JSON Web Tokens - `github.com/google/uuid`BSD-3-Clause UUID generation - `github.com/joho/godotenv`MIT Loads environment variables from a file - `github.com/Notifuse/liquidgo`MIT Liquid template rendering for storefronts - `github.com/oklog/ulid/v2`Apache-2.0 Sortable unique identifiers - `github.com/oschwald/geoip2-golang`ISC IP geolocation lookups - `github.com/pmezard/go-difflib`BSD-2-Clause Readable diffs in test failures - `github.com/pquerna/otp`Apache-2.0 Time-based one-time passwords for MFA - `github.com/signintech/gopdf`MIT Generates PDF invoices and labels - `github.com/TwiN/go-away`MIT Profanity filtering for merchant-authored content - `go.uber.org/goleak`MIT Fails tests that leak goroutines - `golang.org/x/crypto`BSD-3-Clause Go module used by the backend - `golang.org/x/net`BSD-3-Clause Go module used by the backend - `golang.org/x/oauth2`BSD-3-Clause Go module used by the backend - `golang.org/x/sync`BSD-3-Clause Go module used by the backend - `golang.org/x/text`BSD-3-Clause Go module used by the backend - `golang.org/x/time`BSD-3-Clause Go module used by the backend - `google.golang.org/api`BSD-3-Clause Go module used by the backend ## Dev & build tooling 13 libraries 13 dependencies. - `@types/lodash`MIT TypeScript definitions for lodash - `@types/node`MIT TypeScript definitions for Node.js - `@types/pg`MIT TypeScript definitions for pg - `@types/three`MIT TypeScript definitions for three - `@vitest/coverage-v8`MIT V8 coverage provider for Vitest - `eslint`MIT An AST-based pattern checker for JavaScript - `eslint-plugin-jsx-a11y`MIT Static AST checker for accessibility rules on JSX elements - `jsdom`MIT A JavaScript implementation of many web standards - `prettier`MIT Prettier is an opinionated code formatter - `typescript`Apache-2.0 TypeScript is a language for application scale JavaScript development - `typescript-eslint`MIT Tooling which enables you to use TypeScript with ESLint - `vite`MIT Native-ESM powered web dev build tool - `vitest`MIT Next generation testing framework powered by Vite ## Styling 10 libraries 10 dependencies. - `@tailwindcss/postcss`MIT PostCSS plugin for Tailwind CSS, a utility-first CSS framework for rapidly building custom user interfaces - `@tailwindcss/typography`MIT A Tailwind CSS plugin for automatically styling plain HTML content with beautiful typographic defaults - `autoprefixer`MIT Parse CSS and add vendor prefixes to CSS rules using values from the Can I Use website - `class-variance-authority`Apache-2.0 Class Variance Authority - `clsx`MIT A tiny (239B) utility for constructing className strings conditionally - `postcss`MIT Tool for transforming styles with JS plugins - `tailwind-merge`MIT Merge Tailwind CSS classes without style conflicts - `tailwindcss`MIT A utility-first CSS framework for rapidly building custom user interfaces - `tailwindcss-radix`MIT Utilities and variants for styling Radix state - `tw-animate-css`MIT TailwindCSS v4.0 compatible replacement for \`tailwindcss-animate\` ## Admin dashboard UI 7 libraries 7 dependencies. - `@medusajs/icons`MIT Medusa UI React icon library - `@medusajs/js-sdk`MIT SDK for the Medusa API - `@medusajs/types`MIT Medusa Types definition - `@medusajs/ui`MIT Used by the product - `@medusajs/ui-preset`MIT Medusa UI preset - `@radix-ui/react-accordion`MIT Used by the product - `@tanstack/react-query`MIT Hooks for managing, caching and syncing asynchronous and remote data in React ## Data & storage 6 libraries 6 dependencies. - `github.com/alicebob/miniredis/v2`MIT In-memory Redis for tests - `github.com/jackc/pgx/v5`MIT PostgreSQL driver and connection pool - `github.com/minio/minio-go/v7`Apache-2.0 S3-compatible object storage client - `github.com/qdrant/go-client`Apache-2.0 Vector database client for retrieval - `github.com/redis/go-redis/v9`BSD-2-Clause Redis client for caching and rate limits - `redis`MIT A modern, high performance Redis client ## Payments 5 libraries 5 dependencies. - `@stripe/react-stripe-js`MIT React components for Stripe.js and Stripe Elements - `@stripe/stripe-js`MIT Stripe.js loading utility - `github.com/dodopayments/dodopayments-go`Apache-2.0 Dodo Payments API client - `github.com/razorpay/razorpay-go`MIT Razorpay API client - `github.com/stripe/stripe-go/v86`MIT Stripe API client ## AI & search 3 libraries 3 dependencies. - `github.com/openai/openai-go`Apache-2.0 OpenAI client for the sales agent - `github.com/pkoukk/tiktoken-go`MIT Token counting for model cost controls - `github.com/pkoukk/tiktoken-go-loader`MIT Loads token encodings for tiktoken Built in the open ecosystem ## Standing on the work of thousands of contributors. We keep this list honest and current. If you maintain a library here and want a correction, reach out and we will fix it. [Start selling for free](https://mercemur.com/signup) [Contact us](https://mercemur.com/contact) ## Sitemap - [Site index (llms.txt)](https://mercemur.com/llms.txt): every public page, described - [Sitemap (sitemap.md)](https://mercemur.com/sitemap.md): every public URL with its last-modified date - [AGENTS.md](https://mercemur.com/AGENTS.md): how to build against the platform - [Developer documentation](https://docs.mercemur.com/llms.txt): API reference, CLI, MCP