Licenses & Attribution

Here’s a secret about modern software: nobody builds anything alone. SQLly is written in Rust, and like every Rust project, it’s assembled from hundreds of open-source crates - libraries written by thousands of developers who chose to give their work away under permissive licenses. My 15 crates are the glue. Their 1210 crates are basically everything else.

Almost all of these are dual-licensed MIT OR Apache-2.0 - the Rust community’s house blend - which is a polite legal way of saying “use it, build on it, sell things with it, just don’t sue us and don’t pretend you wrote it.” So here I am, not pretending I wrote it. Every crate SQLly ships with is listed at the bottom of this page, with its license, its version, and a link to its home. This page is regenerated from the actual Cargo.lock file, so it can’t quietly drift out of date - if it’s in the app, it’s on this page.

The big shoulders

A few projects deserve more than a row in a table, because without them SQLly quite literally would not exist:

By the numbers

SQLly’s lock file pins 1210 third-party crates. Here’s how the licenses break down (some crates offer a choice - “OR” means I get to pick, and I pick whichever is most permissive):

The interesting ones

A handful of crates use licenses beyond the MIT/Apache house blend. All are compatible with shipping a commercial desktop app, but credit where it’s specifically due:

• MPL-2.0 - cbindgen (build tool), dwrote (Windows DirectWrite bindings), option-ext. File-level copyleft from Mozilla: modifications to those files must be shared, and I ship them unmodified.
• Unicode-3.0 - the ICU4X internationalization crates (icu_*, zerovec, tinystr, and friends). Permissive license from the Unicode Consortium, the people who make sure your emoji work.
• bzip2-1.0.6 - libbz2-rs-sys, a memory-safe Rust reimplementation of bzip2. BSD-style permissive.
• CDLA-Permissive-2.0 - webpki-root-certs: Mozilla’s root TLS certificates, republished under a permissive data license. These are how SQLly knows it’s talking to the real update server.
• Apache-2.0 WITH LLVM-exception - rustix and the wasi/wit-bindgen toolchain crates. The exception exists specifically so compiled binaries don’t need runtime attribution. Still getting attribution, because gratitude.
• CC0-1.0 / Unlicense - notify (file watching), tiny-keccak, hexf-parse, and BurntSushi’s memchr, csv, walkdir and friends (Unlicense OR MIT). Public-domain dedications - about as generous as licensing gets.
• ISC / OpenSSL-lineage - ring and aws-lc-rs, the cryptography under every TLS connection SQLly makes. Mostly ISC and Apache-2.0, with BSD/MIT pieces inherited from BoringSSL and OpenSSL.
• Choice of GPL/LGPL - self_cell (Apache-2.0 or GPL-2.0) and r-efi (MIT or Apache-2.0 or LGPL-2.1). SQLly uses the Apache/MIT option in both cases. No copyleft ships in the app.

Fonts

This website and parts of the app’s docs use three typefaces from Google Fonts, all under the SIL Open Font License 1.1: Fredoka (the friendly rounded headings), Inter (the body text you’re reading), and JetBrains Mono (the code). OFL means free for commercial use, embedding, and modification - just don’t sell the fonts themselves. Deal.

Every single crate

The complete list, generated from Cargo.lock on 2026-09-26. Git dependencies (currently just sqlly-datatable) are listed first and pulled straight from their source repositories; everything else comes from crates.io.

// generated by scripts/generate-licenses.js on 2026-09-26