#Open Source Licenses

Last updated: 2026-07-10 — Corresponds to SKWADE package.json version 0.9.0.

#1. Introduction

SKWADE is built on top of a large ecosystem of open-source software. This document lists every open-source dependency that ships with the SKWADE application (Web, iOS and Android), together with its license, homepage and required attribution.

The information below is generated from the project manifest (package.json, bun.lock), the native bridge (capacitor.config.ts), the vendored source in vendor/ and the WebAssembly artifacts in public/wasm/. It reflects the exact set of libraries actually used by SKWADE — no template or placeholder entries.

#2. Why open source?

SKWADE relies on open-source software for three reasons:

1. Security and auditability. Open source lets us — and independent

reviewers — audit the exact code that runs on divers' devices.

1. Interoperability. Diving standards, dive-computer protocols and

marine biodiversity data are all documented and implemented in the open. Reusing that work is the only way to remain compatible with the wider ecosystem (libdivecomputer, GBIF, WoRMS, Wikimedia, etc.).

1. Sustainability. Building on well-maintained libraries lets our

small team focus on the diving experience rather than reinventing infrastructure.

We are grateful to every author and maintainer whose work is listed below.

#3. General attribution

Unless otherwise noted, every library listed below is used unmodified and linked dynamically at build time via Vite / Bun. The full text of each SPDX license identifier is available at <https://spdx.org/licenses/>.

Where a library requires attribution (MIT, BSD, Apache-2.0, ISC), the copyright notice is reproduced in this document. Where a library is distributed under a copyleft license (LGPL-2.1-or-later — applies to libdivecomputer only), the full corresponding source and relink instructions are shipped in the repository under vendor/libdivecomputer/, docs/licenses/libdivecomputer-COPYING and docs/native/libdivecomputer.md. See also NOTICE.md at the repository root.

#4. Runtime dependencies (alphabetical)

#5. Build / development dependencies

#6. Vendored / native components

#libdivecomputer

• Version pinned: upstream commit 35df71c0fa55fc2559b6a70ca791eddbbe3d1a6b (2026-07-03).
• License: GNU Lesser General Public License, version 2.1 or later

(LGPL-2.1-or-later).

• Copyright: © Jef Driesen and contributors.
• Location in repository: vendor/libdivecomputer/ (full upstream source,

minus .git) plus vendor/libdivecomputer-shim.c (SKWADE-authored build-time shim, LGPL-compatible).

• Full license text: docs/licenses/libdivecomputer-COPYING.
• Build reproduction, ABI documentation and relink instructions:

docs/native/libdivecomputer.md.

• Runtime artifacts: public/wasm/libdivecomputer.wasm and

public/wasm/libdivecomputer.mjs — end users may substitute their own build against the same shim ABI, as required by LGPL-2.1 §6(a).

SKWADE is not affiliated with the libdivecomputer project and does not speak on its behalf.

#7. Standard reproduced notices

The following notice covers every MIT / BSD / ISC / Apache-2.0 dependency listed above. Copyright is held by the respective authors of each package as listed in that package's source repository.

Permission is hereby granted, free of charge, to any person obtaining a copy of the software and associated documentation files (the "Software"), to deal in the Software without restriction (…). THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED (…).

The full, per-package license text is available in each package's LICENSE file, distributed inside node_modules/<package>/ after bun install, and mirrored in each project's public repository (see "Homepage" column above).

#8. Maintenance statement

This document is regenerated whenever package.json, bun.lock or the vendored vendor/ tree changes. The canonical source of truth for dependency versions is package.json; this file exists to make the license position explicit for legal, regulatory and store-review purposes (App Store, Google Play, procurement audits).

If you believe a library used by SKWADE is missing from this list or listed with an incorrect license, contact <legal@skwade.app>.