Third-party software
Weik.io 2026.2The open source programs inside the Weik.io 2026.2 images, with their versions and licences, and how each release checks them.
On this page
Weik.io is open source under the Apache License 2.0. Its images run Weik.io’s own programs, the backend, APIM, the agent and the forwarder, beside the open source programs below. Every image is pinned by its digest and pulled from the registry the installation names, Docker Hub unless you name another.
The programs and their licences#
| Program | Version | Where it runs | What it does there | Licence |
|---|---|---|---|---|
| Apache Camel | 4.22.1 and 4.18.5 | weikio/, which builds each version with it, and the integrations at the sites |
Runs the integrations’ routes, with one launcher for each Camel line | Apache-2.0 |
| OpenJDK (Eclipse Temurin) | 21.0.12 | weikio/ and weikio/ |
The Java runtime the integrations run on | GPL-2.0 with the Classpath Exception |
| .NET | 10 | The backend, APIM and the agent, and the weikio CLI |
The runtime of Weik.io’s own programs | MIT |
| NATS server | 2.14.7 | The hub’s message server and each site’s leaf node | Carries the control traffic and the events, and stores the hub’s records | Apache-2.0 |
| rclone | 1.75.1 | weikio/ and weikio/ |
Moves the files of file transfers and copies backup archives to their storage | MIT |
| OpenTelemetry Collector contrib | 0.160.0 | weikio/, weikio/ and weikio/ |
Forwards telemetry to your own systems, and keeps a site’s telemetry on its disk while the hub is out of reach | Apache-2.0 |
| VictoriaLogs | 1.52.0 | The hub’s log store | Stores and searches the log lines | Apache-2.0 |
| VictoriaMetrics | 1.153.0 | The hub’s metric store | Stores the metrics and answers the charts | Apache-2.0 |
| VictoriaTraces | 0.12.0 | The hub’s trace store | Stores the traces | Apache-2.0 |
| Traefik Proxy | 3.7.13 | The hub’s terminator on port 443 | Passes each connection on by its name and terminates TLS for the hub’s own names | MIT |
The images also contain the libraries these programs and Weik.io’s own programs are built from, such as the NuGet packages, the admin UI’s npm packages, the jars inside each Camel launcher and the Go modules of rclone and the collector. Each of them has an entry with its licence in the image’s notices.
Where the notices are#
Every Weik.io image has these files at its root:
| File | What it has |
|---|---|
/ |
The licence of Weik.io’s own programs, the Apache License 2.0 |
/ |
The copyright notice and where the source code of the components under a copyleft licence is published |
/ |
Every component of others the image contains, with its licence, the licence and notice files it ships and the standard text of each licence at the end |
/ |
The same components, one per line with its version and its licence as an SPDX expression, for scripts |
/ |
What each of these files is |
The backend and agent images also have /licenses/jdk/, the legal files of the Java runtime, and /licenses/rclone/COPYING, rclone’s licence. The forwarder image has /licenses/otelcol-contrib.modules, the list of the modules the collector is built from.
How each release checks the licences#
The notices are written from the files each image actually contains while the image is built, so they can’t fall behind it. A component whose own files give no licence, or give one the check doesn’t recognise, takes the licence a person reviewed for that exact version, and the build of an image with an unreviewed version fails and names the component. Before a release is published, a check of each built image confirms that every component has its entry and that the text of every licence an entry names is in the notices.