Legal
Cardගොඩ is not open source, but it is built almost entirely on software that is. These are the projects it depends on.
Last updated 10 September 2026 · for version 1.4.1
Each of the projects below is used under its own licence, and each keeps its own copyright. Nothing here is a claim of ownership over them — the opposite: an app this size exists at all because of them.
| Component | Licence | Used for |
|---|---|---|
| React, React DOM | MIT | The interface |
| Tauri (API and plugins) | MIT OR Apache-2.0 | The desktop shell, database, dialogs and updater |
| pdf.js (pdfjs-dist) | Apache-2.0 | Reading statement PDFs offline |
| @pdfsmaller/pdf-decrypt | MIT | Opening password-protected statements |
| @google/generative-ai | Apache-2.0 | Talking to Gemini when you enable AI reading |
| Firebase JS SDK | Apache-2.0 | Delivering problem reports you choose to send |
| Recharts | MIT | Charts |
| Zustand | MIT | Application state |
| React Router | MIT | Navigation between screens |
| date-fns | MIT | Dates and statement periods |
| JSZip | MIT OR GPL-3.0-or-later | Bundling your statement files into a backup |
| file-saver | MIT | Saving backups |
| SweetAlert2 | MIT | Dialogs and confirmations |
| lucide-react | ISC | Icons |
| react-dropzone | MIT | Dragging statements into the window |
| react-pdf | MIT | Previewing a statement page |
| clsx | MIT | Composing class names |
The Rust side is smaller. These are the direct dependencies; each one brings its own, and the full transitive list is far longer than any page would usefully show.
| Crate | Licence | Used for |
|---|---|---|
| Tauri | MIT OR Apache-2.0 | The application shell |
| serde, serde_json | MIT OR Apache-2.0 | Reading and writing structured data |
| keyring | MIT OR Apache-2.0 | Your Gemini key and statement passwords, in the OS keychain |
| ed25519-dalek | BSD-3-Clause | Verifying licence signatures |
| sha2 | MIT OR Apache-2.0 | Hashing |
| base64, hex | MIT OR Apache-2.0 | Encoding |
| chrono | MIT OR Apache-2.0 | Dates on the Rust side |
| log | MIT OR Apache-2.0 | Diagnostics |
| winreg | MIT | Reading the Windows registry for trial markers |
| Typeface | Licence | Used for |
|---|---|---|
| Inter | SIL Open Font License 1.1 | The app's interface typeface |
| Noto Sans Sinhala | SIL Open Font License 1.1 | The ගොඩ in the name |
| Plus Jakarta Sans | SIL Open Font License 1.1 | This website |
The tables above are the direct dependencies. Counting everything they in turn depend on, the real total runs to several hundred packages. The authoritative list is the lockfile in the build that produced your copy. If you need the complete set for a specific version, ask and it can be generated for you.
MIT, ISC and BSD licences require their copyright notice and permission notice to travel with the software. Apache-2.0 additionally requires that changes be marked; we do not modify any of these projects. The SIL Open Font License permits bundling and redistribution of the fonts as part of an application.
If you believe something is used incorrectly or a notice is missing, tell us and it will be fixed.