Credits & licences
what it builds on.
Receipts itself: Copyright © 2026 MIKODES, under the Envato Market licence (Regular or Extended) you bought on CodeCanyon (LICENSE.md). Third-party components keep their own licences; the full record is SOURCES.md in the download.
01Runtime dependencies (npm)
From pnpm licenses list --prod on release 1.1.0: MIT 15, Apache-2.0 1, BSD-2-Clause 1. No GPL, AGPL or LGPL code in the runtime dependencies.
| Package | Licence | Role |
|---|---|---|
| hono, @hono/node-server | MIT | web server and pages |
| better-sqlite3 (bundles SQLite, public domain) | MIT | database |
| grammy, @grammyjs/types | MIT | Telegram bot |
| zod | MIT | validation |
lightweight-charts by TradingView (its readable development build, copied to public/lib/ with its licence file) | Apache-2.0 | price charts on receipts; attribution link kept |
| fancy-canvas, abort-controller, debug, event-target-shim, ms, node-addon-api, node-fetch, tr46, whatwg-url (transitive) | MIT | |
| webidl-conversions (transitive) | BSD-2-Clause |
Development tools (not needed to run the app): TypeScript (compiles the source for pnpm build), tsx (runs the source for pnpm dev), Vitest, ESLint with typescript-eslint and globals, Prettier and type definitions, installed from npm under their own licences.
02Admin console
The Admin console is the MIKODES Admin Kit 0.6.0 in packages/admin-kit/: the author's own code and part of the item, covered by the licence you bought (its LICENSE.md says so). Its built interface in ui/ is not minified, its full source is in ui-src/ with its package-lock.json, and pnpm build:ui rebuilds it. Its server code is compiled with the app by pnpm build. The interface bundles React and React DOM (MIT), cmdk (MIT), Lucide icons (ISC) and the Geist and Geist Mono fonts (SIL Open Font License 1.1).
03Fonts
Geist, Geist Mono and Instrument Serif (SIL Open Font License 1.1) ship in public/fonts/, each with its licence text, and are served by your own site: no visitor's browser contacts a font service. This documentation (not the app) loads Geist and Geist Mono from Google Fonts when you open it in a browser.
04External services (optional, your own accounts)
Stripe, the Telegram Bot API, Discord webhooks, OpenTimestamps public calendars (free), Binance and Bybit public market data (no key), and the browser vendors' push services for Web Push (the push carries no content). The reference ots client (LGPL-3.0) is not shipped; users install it themselves to verify timestamps. Names are trademarks of their owners, used only to describe compatibility.