circuit/NOTICE at main · RiceTooCold/circuit · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
CIRCUIT — Code Intelligence for Repository Context, Understanding, Impact, and Traceability
Copyright 2026 RiceTooCold

This product is licensed under the Apache License, Version 2.0 (see LICENSE).

Apache-2.0 (rather than a shorter permissive license like MIT) is deliberate.
It stays fully permissive — commercial use, modification, and redistribution
are all allowed — but adds three things MIT omits and this project actually
uses: an explicit patent grant with a retaliation clause (protecting
contributors and adopters alike), the formal NOTICE mechanism that carries the
third-party attributions below, and alignment with the license of the
ecosystem CIRCUIT targets and builds on (Apache Fineract, Spring, scip-java).

================================================================================
Third-party components
================================================================================

CIRCUIT builds on the following open-source work. Each component is the
property of its respective authors and is used under its own license. This
NOTICE lists the principal direct dependencies; the full, version-pinned
transitive set is resolvable with `./gradlew dependencies`.

--------------------------------------------------------------------------------
Bundled in the application artifact (circuit.jar)
--------------------------------------------------------------------------------

Spring Boot, Spring Framework, Spring Data Neo4j      Apache License 2.0
  (org.springframework.boot:*, org.springframework:*)
  Copyright (c) VMware, Inc. / Broadcom and contributors.

Spring AI — model API, Neo4j vector store, MCP server  Apache License 2.0
  (org.springframework.ai:spring-ai-model,
   spring-ai-starter-vector-store-neo4j,
   spring-ai-starter-mcp-server)

Model Context Protocol Java SDK                        MIT License
  (io.modelcontextprotocol.sdk:*, transitive via Spring AI MCP server)
  Copyright (c) Anthropic and the MCP contributors.

Neo4j Java Driver                                      Apache License 2.0
  (org.neo4j.driver:neo4j-java-driver, transitive)
  Copyright (c) Neo4j Sweden AB.

picocli                                                Apache License 2.0
  (info.picocli:picocli)  Copyright (c) Remko Popma and contributors.

Apache Lucene                                          Apache License 2.0
  (org.apache.lucene:lucene-core, lucene-analysis-common, lucene-queryparser)
  Copyright (c) The Apache Software Foundation.

SCIP / SemanticDB for Java                             Apache License 2.0
  (com.sourcegraph:scip-java-proto, semanticdb-java)
  Copyright (c) Sourcegraph, Inc.

Google Protocol Buffers (Java)                         BSD 3-Clause
  (com.google.protobuf:protobuf-java, transitive via the SCIP readers)
  Copyright (c) Google LLC.

ASM                                                    BSD 3-Clause
  (org.ow2.asm:asm)  Copyright (c) INRIA, France Telecom.

Jackson                                                Apache License 2.0
  (com.fasterxml.jackson.*, transitive)
  Copyright (c) FasterXML, LLC.

SLF4J                                                  MIT License
  (org.slf4j:*, transitive)  Copyright (c) QOS.ch.

Logback                                                EPL 1.0 / LGPL 2.1
  (ch.qos.logback:*, transitive)  Copyright (c) QOS.ch.

Test-only (NOT shipped in circuit.jar): Testcontainers (MIT), JUnit (EPL 2.0).

--------------------------------------------------------------------------------
Provisioned at runtime — fetched directly from the vendor by `circuit up`,
not redistributed as part of CIRCUIT
--------------------------------------------------------------------------------

These run in the Neo4j server process (a separate container) and are downloaded
on first start from their own distribution points. CIRCUIT only pins versions
and URLs (src/main/resources/circuit-plugins.properties); it neither bundles
nor relicenses them.

Neo4j 5.26 Community Edition                           GPL v3
  Pulled by Docker as `neo4j:5.26-community`. Copyright (c) Neo4j Sweden AB.

Neo4j APOC Core 5.26.25                                Apache License 2.0
  https://github.com/neo4j/apoc — powers `traverse` / `status` graph queries.

Neo4j Graph Data Science 2.13.8                        Neo4j GDS license
  https://neo4j.com/docs/graph-data-science/ — powers centrality enrichment
  (PageRank / betweenness) at ingest. Distributed by Neo4j under its own
  Graph Data Science library license terms.

--------------------------------------------------------------------------------
Optional external service — embedding
--------------------------------------------------------------------------------

Semantic search uses an embedding model, chosen by the operator at ingest /
serve time (see KNOWN_LIMITATIONS.md "Data egress"):

  - Jina AI Embeddings (cloud API, default)            jina.ai terms of service
    The only network egress, and only when selected.
  - A self-hosted endpoint serving the same model      no egress, no key
    (docs/design/local-embedding-selfhost.md).

CIRCUIT itself emits no telemetry.