Trust Centre
Trust · Veritome

Software bill of materials

Working toward the Cyber Resilience Act (EU) 2024/2847, Veritome publishes a record of the direct software components it is built on. This SBOM is generated from the application's dependency manifest at each deployment; it lists direct dependencies, not the full transitive tree.
46
Runtime dependencies
20
Build dependencies
66
Total packages
3
Licence types

Licence distribution

Other50 packages
MIT11 packages
Apache-2.05 packages

Runtime dependencies (46)

PackageVersionLicence
@anthropic-ai/sdk0.116.0MIT
@aws-sdk/client-s33.1110.0Apache-2.0
@aws-sdk/s3-request-presigner3.1110.0Apache-2.0
@dnd-kit/core6.3.1Other
@hello-pangea/dnd18.0.1Other
@phosphor-icons/react2.1.10MIT
@prisma/client6.19.3Apache-2.0
@react-pdf/renderer4.6.0Other
@sentry/nextjs10.70.0Other
@tiptap/extension-placeholder3.31.3Other
@tiptap/pm3.31.3Other
@tiptap/react3.31.3Other
@tiptap/starter-kit3.31.3Other
@upstash/ratelimit2.0.8Other
@upstash/redis1.38.2Other
bcryptjs3.0.3Other
better-auth1.6.27MIT
bullmq6.1.0Other
date-fns4.4.0MIT
docx9.7.1Other
framer-motion12.43.0MIT
ioredis5.11.1Other
jose6.2.8Other
mammoth1.12.1Other
next16.3.4MIT
next-intl4.13.6Other
otplib12.0.1Other
pdf-lib1.17.1Other
pdf-parse2.4.5Other
posthog-js1.417.0Other
posthog-node5.49.0Other
prisma6.19.3Apache-2.0
qrcode1.5.4Other
react19.2.8MIT
react-dom19.2.8MIT
react-hook-form7.85.0Other
react-markdown10.1.0Other
recharts3.10.1Other
rehype-highlight7.0.2Other
remark-gfm4.0.1Other
rss-parser3.13.0Other
satori0.29.0Other
sharp0.35.3Other
sonner2.0.8Other
stripe22.5.0MIT
zod4.4.3MIT

Build dependencies (20)

PackageVersionLicence
@commitlint/cli21.2.2Other
@commitlint/config-conventional21.2.0Other
@playwright/test1.62.1Other
@storybook/nextjs10.6.0Other
@storybook/react10.6.0Other
@tailwindcss/postcss4Other
@types/node26Other
@types/pdf-parse1.1.5Other
@types/qrcode1.5.6Other
@types/react19Other
@types/react-dom19Other
dotenv-cli11.0.0Other
eslint9Other
eslint-config-next16.3.4Other
lefthook2.1.10Other
opentype.js2.0.0Other
storybook10.6.0Other
tailwindcss4MIT
tsx4.23.12Other
typescript6Apache-2.0

This SBOM is generated from the platform's package manifest and updated with each deployment. Licence labels are indicative and classified best-effort; consult each package for its authoritative licence. For machine-readable SBOM formats (SPDX, CycloneDX), contact security@veritome.eu.