Built on other people's work

Why this page exists

LensCore is made by a very small team in Chennai. Almost none of what makes it work was written by us — it rests on decades of software that people gave away and on services that let us build for free before we could pay for anything.

This page is the acknowledgement. It is generated from the actual dependency list, so it cannot quietly credit something we removed or miss something we added.

Services and infrastructure

Licences below are linked rather than restated. A licence copied by hand goes stale without anyone noticing and we only verified one of these directly from the software we run. Where we did verify it, it says so.

• Next.js — MIT · the framework the whole site runs on
• PostgreSQL — PostgreSQL Licence · every scan, report and payment row
• pgvector — PostgreSQL Licence · similarity search for peer benchmarking
• Our retrieval engine — AGPL-3.0-or-later (verified) · self-hosted open-source search and retrieval, run unmodified
• Gotenberg · renders the PDF version of a report
• Playwright — Apache-2.0 · captures the evidence screenshots
• Umami · privacy-friendly analytics, self-hosted
• Metabase · internal reporting on how the product is doing
• Uptime Kuma · tells us when the site is down before you do
• Qdrant · vector storage for audit history
• graphile-worker · runs scans in the background

A note on the AGPL software we run

Parts of our retrieval stack are licensed AGPL-3.0-or-later and some of the tools above use similar licences. We run them unmodified, as separate services reached over a network. We do not copy their source into LensCore, do not distribute them and do not offer them to anyone as a service. If that ever changes, this page and our licensing change with it.

Providers

• Cloudflare · DNS, the tunnel that serves this site and email routing
• Oracle Cloud · the machine everything runs on
• Supabase · authentication and hosted Postgres. Free while this was being built, which is a large part of why it exists at all.
• Dodo Payments · merchant of record — takes the payment, handles the tax
• Resend · delivers your report to your inbox
• OpenAI, Anthropic, Google, Perplexity · the answer engines a scan measures. We are their customer, not their partner — no engine has any say in what a report says about it.

Direct dependencies

Every package listed in our package.json, with the licence each one declares for itself. Transitive dependencies are not listed — that list runs to roughly a thousand entries, which is noise rather than gratitude — but they are covered by the same permissive licences.

Something missing?

If your work is in here and credited wrongly — or is in here and not credited at all — tell us at [email protected] and we will fix it.

See also what you can check about us.