# Third-party notices

SafeTun itself is governed by the repository `LICENSE`. The following direct
dependencies retain their upstream licenses. Release automation must include
their complete license text and the equivalent report for all transitive
dependencies.

| Module | Pinned version | SPDX | Upstream |
|---|---:|---|---|
| `github.com/BurntSushi/toml` | v1.6.0 | MIT | https://github.com/BurntSushi/toml |
| `github.com/coder/websocket` | v1.8.15 | ISC | https://github.com/coder/websocket |
| `github.com/quic-go/quic-go` | v0.61.0 | MIT | https://github.com/quic-go/quic-go |
| `github.com/vishvananda/netlink` | v1.3.1 | Apache-2.0 | https://github.com/vishvananda/netlink |
| `github.com/vishvananda/netns` (transitive) | v0.0.5 | Apache-2.0 | https://github.com/vishvananda/netns |
| `golang.org/x/crypto` (transitive) | v0.54.0 | BSD-3-Clause | https://go.googlesource.com/crypto |
| `golang.org/x/net` (transitive) | v0.56.0 | BSD-3-Clause | https://go.googlesource.com/net |
| `golang.org/x/sys` | v0.47.0 | BSD-3-Clause | https://go.googlesource.com/sys |
| `golang.org/x/term` | v0.45.0 | BSD-3-Clause | https://go.googlesource.com/term |

No DaggerConnect or Backhaul code is included. OpenVPN and strongSwan are not
bundled; optional adapters control separately installed executables.