Open Source Notices
Open Source Notices
Solid Accounting is built on the work of many open source projects. We're grateful to the developers and communities behind these libraries. This page lists the open source components included in Solid Accounting and their licenses.
These components are covered by their own licenses, which apply regardless of the Solid Accounting EULA. Full license texts are linked below and included in the software's installation directory and "About" screen.
The tables below list direct dependencies. These libraries have their own dependencies (transitive dependencies) which are also included in the software. A complete list of all transitive dependencies and their licenses is available in the installation directory under licenses/ and in the source repository.
Desktop Application (Rust)
| Crate | License | Description |
|---|---|---|
| tauri | MIT OR Apache-2.0 | Application framework |
| tauri-plugin-dialog | MIT OR Apache-2.0 | Native dialog windows |
| tauri-plugin-fs | MIT OR Apache-2.0 | File system access |
| tauri-plugin-shell | MIT OR Apache-2.0 | Shell command execution |
| serde | MIT OR Apache-2.0 | Serialization framework |
| serde_json | MIT OR Apache-2.0 | JSON serialization |
| rusqlite | MIT | SQLite bindings |
| uuid | MIT OR Apache-2.0 | UUID generation |
| argon2 | MIT OR Apache-2.0 | Password hashing |
| chrono | MIT OR Apache-2.0 | Date and time |
| thiserror | MIT OR Apache-2.0 | Error handling |
| lopdf | MIT | PDF generation (checks, invoices, statements, reports) |
| csv | MIT OR Unlicense | CSV parsing |
| sha2 | MIT OR Apache-2.0 | SHA-256 hashing |
| encoding_rs | MIT OR Apache-2.0 | Character encoding |
| aes-gcm | MIT OR Apache-2.0 | AES-256-GCM encryption |
| base64 | MIT OR Apache-2.0 | Base64 encoding |
| reqwest | MIT OR Apache-2.0 | HTTP client |
| tokio | MIT | Async runtime |
| hostname | MIT | System hostname detection |
| whoami | MIT OR Apache-2.0 OR BSL-1.0 | User/system identification |
| axum | MIT | Web framework (local API) |
| tower-http | MIT | HTTP middleware |
| async-trait | MIT OR Apache-2.0 | Async trait support |
| llama-cpp-2 | MIT OR Apache-2.0 | Rust bindings to llama.cpp for on-device AI inference (included; on-device AI is not enabled yet) |
| pdf-extract | MIT OR Apache-2.0 | PDF text extraction |
| quick-xml | MIT | Cloud Backup: S3 list responses |
| md-5 | MIT OR Apache-2.0 | Cloud Backup: S3 upload checksums |
| ed25519-dalek | BSD-3-Clause | Ed25519 signature verification for AI adapter bundles |
| hmac | MIT OR Apache-2.0 | HMAC for one-way customer-name tokenization |
| once_cell | MIT OR Apache-2.0 | Lazy static initialization |
| dirs | MIT OR Apache-2.0 | Cross-platform user directory lookup |
| keyring | MIT OR Apache-2.0 | OS keychain integration |
AI model (Qwen3.5)
On-device AI is coming soon and is not enabled in the current version, so no model is downloaded yet. When it is enabled, the following applies.
Solid Accounting's on-device AI features use the Qwen3.5 family of language models from Alibaba Cloud, licensed under Apache License 2.0. When you enable AI features, Solid Accounting downloads a quantized GGUF build of Qwen3.5 to your machine. The model license is included with the downloaded files; a copy is also available at:
Solid Accounting's fine-tuned LoRA adapters (which specialize Qwen3.5 for specific PDF formats) are derivative works of Qwen3.5 and are therefore Apache-2.0 licensed; however, distribution of the adapters is limited to Solid Accounting customers through the in-app adapter updater, not as a standalone download.
llama.cpp runtime
The Rust crate llama-cpp-2 wraps the C++ llama.cpp inference runtime, copyright (c) 2023-2026 Georgi Gerganov and contributors, MIT licensed. The llama.cpp LICENSE file is redistributed with the Solid Accounting installation directory.
SQLCipher
Solid Accounting uses SQLCipher Community Edition (BSD-3-Clause license) via rusqlite for encrypted database storage. SQLCipher incorporates OpenSSL for its cryptographic operations. Both the SQLCipher BSD notice and the OpenSSL/SSLeay license notice are reproduced below under "Required Notice Texts."
Desktop Application (Frontend)
| Package | License | Description |
|---|---|---|
| react | MIT | UI component library |
| react-dom | MIT | React DOM renderer |
| react-router-dom | MIT | Client-side routing |
| @tauri-apps/api | MIT OR Apache-2.0 | Tauri JavaScript API |
| @tauri-apps/plugin-dialog | MIT OR Apache-2.0 | Dialog plugin bindings |
| @tauri-apps/plugin-fs | MIT OR Apache-2.0 | File system plugin bindings |
| @tauri-apps/plugin-shell | MIT OR Apache-2.0 | Shell plugin bindings |
Website
| Package | License | Description |
|---|---|---|
| next | MIT | React framework |
| react | MIT | UI component library |
| react-dom | MIT | React DOM renderer |
| stripe | MIT | Stripe API client |
| gray-matter | MIT | YAML front-matter parser |
| react-markdown | MIT | Markdown renderer |
| remark-gfm | MIT | GitHub-flavored markdown |
| tailwindcss | MIT | Utility-first CSS framework |
License Server
| Package | License | Description |
|---|---|---|
| express | MIT | Web framework |
| better-sqlite3 | MIT | SQLite3 bindings |
| dotenv | BSD-2-Clause | Environment variable management |
| uuid | MIT | UUID generation |
| express-rate-limit | MIT | API rate limiting |
Required Notice Texts
The following notice texts are required by the licenses of components used in Solid Accounting.
SQLCipher
Copyright (c) 2008-2024 Zetetic LLC
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice,
this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
3. Neither the name of the copyright holder nor the names of its
contributors may be used to endorse or promote products derived from this
software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
OpenSSL / SSLeay
Copyright (c) 1998-2024 The OpenSSL Project. All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in
the documentation and/or other materials provided with the
distribution.
3. All advertising materials mentioning features or use of this
software must display the following acknowledgment:
"This product includes software developed by the OpenSSL Project
for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
endorse or promote products derived from this software without
prior written permission. For written permission, please contact
openssl-core@openssl.org.
THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
PURPOSE ARE DISCLAIMED.
This product includes cryptographic software written by Eric Young
(eay@cryptsoft.com). This product includes software written by Tim
Hudson (tjh@cryptsoft.com).
Original SSLeay License:
Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the copyright notice,
this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
3. All advertising materials mentioning features or use of this software
must display the following acknowledgement:
"This product includes cryptographic software written by
Eric Young (eay@cryptsoft.com)"
License References
- MIT License: https://spdx.org/licenses/MIT.html
- Apache License 2.0: https://spdx.org/licenses/Apache-2.0.html
- BSD 3-Clause License: https://spdx.org/licenses/BSD-3-Clause.html
- BSD 2-Clause License: https://spdx.org/licenses/BSD-2-Clause.html
- ISC License: https://spdx.org/licenses/ISC.html
- Unlicense: https://spdx.org/licenses/Unlicense.html
- Boost Software License 1.0: https://spdx.org/licenses/BSL-1.0.html
- OpenSSL License: https://www.openssl.org/source/license.html