# Third Party Notices This file enumerates third-party components redistributed by the root `oh-my-opencode` package surface from `package.json` `files[]`, root production dependencies, bundled MCP/runtime payloads, and the planned pinned CodeGraph provisioning payload for the CodeGraph OMO integration. Generator/checker note: update this file with the audited component list, then run `node scripts/check-third-party-notices.mjs`. Task 11 owns tarball ship verification. ## Components ### @clack/core@1.3.0 - License: MIT, from CodeGraph platform bundle `lib/node_modules/@clack/core/LICENSE`. - Copyright: Copyright (c) Nate Moore. - Upstream URL: https://github.com/bombshell-dev/clack - Where-bundled: CodeGraph platform bundle vendored dependency. ### @clack/prompts@1.5.0 - License: MIT, from `node_modules/@clack/prompts/LICENSE`. - Copyright: Copyright (c) Nate Moore. - Upstream URL: https://github.com/bombshell-dev/clack - Where-bundled: root production dependency; CodeGraph platform bundles also vendor `@clack/prompts@1.3.0`. ### @code-yeongyu/comment-checker@0.8.0 - License: MIT, from package metadata. The inspected package did not include a separate LICENSE file. - Copyright: Yeongyu Kim and contributors. - Upstream URL: https://github.com/code-yeongyu/go-claude-code-comment-checker - Where-bundled: root production dependency and vendored checker binary payload under `vendor//`. ### @colbymchenry/codegraph@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph - Where-bundled: pinned CodeGraph provisioning payload for the CodeGraph OMO integration. ### @colbymchenry/codegraph-darwin-arm64@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-darwin-arm64 - Where-bundled: optional CodeGraph platform bundle for darwin arm64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets. ### @colbymchenry/codegraph-darwin-x64@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-darwin-x64 - Where-bundled: optional CodeGraph platform bundle for darwin x64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets. ### @colbymchenry/codegraph-linux-arm64@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-linux-arm64 - Where-bundled: optional CodeGraph platform bundle for linux arm64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets. ### @colbymchenry/codegraph-linux-x64@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-linux-x64 - Where-bundled: optional CodeGraph platform bundle for linux x64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets. ### @colbymchenry/codegraph-win32-arm64@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-win32-arm64 - Where-bundled: optional CodeGraph platform bundle for win32 arm64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets. ### @colbymchenry/codegraph-win32-x64@1.0.1 - License: MIT, from npm package metadata. The inspected tarball did not include a separate LICENSE file. - Copyright: CodeGraph contributors. - Upstream URL: https://www.npmjs.com/package/@colbymchenry/codegraph-win32-x64 - Where-bundled: optional CodeGraph platform bundle for win32 x64, including CodeGraph runtime files, Node.js runtime binary, and tree-sitter WASM assets. ### @modelcontextprotocol/sdk@1.29.0 - License: MIT, from `node_modules/@modelcontextprotocol/sdk/LICENSE`. - Copyright: Copyright (c) 2024 Anthropic, PBC. - Upstream URL: https://github.com/modelcontextprotocol/typescript-sdk - Where-bundled: root production dependency for MCP client/server integration. ### @opencode-ai/plugin@1.15.13 - License: MIT, from package metadata. The inspected package did not include a separate LICENSE file. - Copyright: OpenCode contributors. - Upstream URL: https://www.npmjs.com/package/@opencode-ai/plugin - Where-bundled: root production dependency for the OpenCode plugin API. ### @opencode-ai/sdk@1.15.13 - License: MIT, from package metadata. The inspected package did not include a separate LICENSE file. - Copyright: OpenCode contributors. - Upstream URL: https://www.npmjs.com/package/@opencode-ai/sdk - Where-bundled: root production dependency for OpenCode API access. ### CodeGraph bundled Node.js runtime - License: Node.js MIT license plus bundled third-party licenses for runtime components such as OpenSSL and V8. The inspected CodeGraph platform tarballs include the Node.js binary but no separate Node LICENSE or NOTICE files; the Codex CodeGraph component therefore ships Node.js v24.16.0 license text at `packages/omo-codex/plugin/components/codegraph/NODE-RUNTIME-LICENSES.md`. - Copyright: Node.js contributors, OpenSSL Software Foundation, V8 authors, and other Node.js third-party contributors. - Upstream URL: https://nodejs.org/ - Where-bundled: each `@colbymchenry/codegraph-*` platform bundle includes `node` or `node.exe`. ### commander@14.0.3 - License: MIT, from `node_modules/commander/LICENSE`. - Copyright: Copyright (c) 2011 TJ Holowaychuk. - Upstream URL: https://github.com/tj/commander.js - Where-bundled: root production dependency; CodeGraph platform bundles also vendor commander. ### detect-libc@2.1.2 - License: Apache-2.0, from `node_modules/detect-libc/LICENSE`. - Copyright: detect-libc contributors. - Upstream URL: https://github.com/lovell/detect-libc - Where-bundled: root production dependency used by platform/runtime detection. ### diff@9.0.0 - License: BSD-3-Clause, from `node_modules/diff/LICENSE`. - Copyright: Copyright (c) 2009-2015, Kevin Decker. - Upstream URL: https://github.com/kpdecker/jsdiff - Where-bundled: root production dependency used by diff rendering and patch helpers. ### fast-string-truncated-width@3.0.3 - License: MIT, from CodeGraph platform bundle `lib/node_modules/fast-string-truncated-width/license`. - Copyright: Fabio Spampinato and contributors. - Upstream URL: https://github.com/fabiospampinato/fast-string-truncated-width - Where-bundled: CodeGraph platform bundle vendored dependency. ### fast-string-width@3.0.2 - License: MIT, from CodeGraph platform bundle `lib/node_modules/fast-string-width/license`. - Copyright: Fabio Spampinato and contributors. - Upstream URL: https://github.com/fabiospampinato/fast-string-width - Where-bundled: CodeGraph platform bundle vendored dependency. ### fast-wrap-ansi@0.2.0 - License: MIT, from CodeGraph platform bundle `lib/node_modules/fast-wrap-ansi/LICENSE`. - Copyright: James Garbutt and contributors. - Upstream URL: https://github.com/43081j/fast-wrap-ansi - Where-bundled: CodeGraph platform bundle vendored dependency. ### ignore@7.0.5 - License: MIT, from CodeGraph platform bundle `lib/node_modules/ignore/LICENSE-MIT`. - Copyright: ignore contributors. - Upstream URL: https://github.com/kaelzhang/node-ignore - Where-bundled: CodeGraph platform bundle vendored dependency. ### js-yaml@4.2.0 - License: MIT, from `node_modules/js-yaml/LICENSE`. - Copyright: Copyright (C) 2011-2015 Vitaly Puzrin. - Upstream URL: https://github.com/nodeca/js-yaml - Where-bundled: root production dependency used by frontmatter and YAML parsing. ### jsonc-parser@3.3.1 - License: MIT, from `node_modules/jsonc-parser/LICENSE.md`. - Copyright: Copyright (c) Microsoft. - Upstream URL: https://github.com/microsoft/node-jsonc-parser - Where-bundled: root production dependency and CodeGraph platform bundle vendored dependency. ### pi-comment-checker - License: MIT, from `packages/omo-codex/plugin/components/comment-checker/LICENSE` and component NOTICE. - Copyright: Yeongyu Kim. - Upstream URL: https://github.com/code-yeongyu - Where-bundled: ported source in `packages/omo-codex/plugin/components/comment-checker`, shipped by the root package file surface. ### pi-lsp-client - License: MIT, from `packages/lsp-tools-mcp/LICENSE`, `packages/lsp-tools-mcp/NOTICE`, and `packages/omo-codex/plugin/components/lsp/LICENSE`. - Copyright: Yeongyu Kim. - Upstream URL: https://github.com/code-yeongyu - Where-bundled: adapted LSP runtime in `packages/lsp-tools-mcp`, `packages/lsp-core`, and the Codex plugin LSP component shipped by the root package file surface. ### pi-rules - License: MIT, from `packages/omo-codex/plugin/components/rules/LICENSE` and component NOTICE. - Copyright: Yeongyu Kim. - Upstream URL: https://github.com/code-yeongyu - Where-bundled: ported rules/context loading behavior in `packages/omo-codex/plugin/components/rules`, shipped by the root package file surface. ### picocolors@1.1.1 - License: ISC, from `node_modules/picocolors/LICENSE`. - Copyright: Copyright (c) 2021-2024 Oleksii Raspopov, Kostiantyn Denysov, Anton Verinov. - Upstream URL: https://github.com/alexeyraspopov/picocolors - Where-bundled: root production dependency for terminal color formatting. ### picomatch@4.0.4 - License: MIT, from `node_modules/picomatch/LICENSE`. - Copyright: Copyright (c) 2017-present, Jon Schlinkert. - Upstream URL: https://github.com/micromatch/picomatch - Where-bundled: root production dependency; CodeGraph platform bundles also vendor `picomatch@4.0.3`. ### posthog-node@5.35.12 - License: Apache-2.0 text in `node_modules/posthog-node/LICENSE`; package metadata declares MIT. - Copyright: Copyright 2020 Posthog / Hiberly, Inc.; Copyright 2015 Mixpanel, Inc. - Upstream URL: https://github.com/PostHog/posthog-js - Where-bundled: root production dependency for anonymous telemetry. ### sisteransi@1.0.5 - License: MIT, from CodeGraph platform bundle `lib/node_modules/sisteransi/license`. - Copyright: Terkel Gjervig and contributors. - Upstream URL: https://github.com/terkelg/sisteransi - Where-bundled: CodeGraph platform bundle vendored dependency. ### tree-sitter-wasms@0.1.13 - License: Unlicense, from CodeGraph platform bundle `lib/node_modules/tree-sitter-wasms/LICENSE`. - Copyright: Gregor, Menci, and grammar contributors. - Upstream URL: https://github.com/Gregoor/tree-sitter-wasms - Where-bundled: CodeGraph platform bundle vendored dependency and bundled language grammar WASM files. ### vscode-jsonrpc@8.2.1 - License: MIT, from `node_modules/vscode-jsonrpc/License.txt`. - Copyright: Copyright (c) Microsoft Corporation. - Upstream URL: https://github.com/microsoft/vscode-languageserver-node - Where-bundled: root production dependency for LSP JSON-RPC transport. ### web-tree-sitter@0.25.10 - License: MIT, from CodeGraph platform bundle `lib/node_modules/web-tree-sitter/LICENSE`. - Copyright: Max Brunsfeld and tree-sitter contributors. - Upstream URL: https://github.com/tree-sitter/tree-sitter - Where-bundled: CodeGraph platform bundle vendored dependency and bundled WebAssembly tree-sitter runtime.