This repository builds and redistributes runtime artifacts from independently licensed upstream projects. The MIT license at the repository root applies only to the original packaging code in this repository. It does not replace the licenses of upstream projects or their transitive dependencies.
The primary upstream projects are:
| Service | Upstream project | License |
|---|---|---|
| Analytics | Logflare | Apache-2.0 |
| Auth | Supabase Auth | MIT |
| Edge Runtime | Supabase Edge Runtime | MIT |
| Postgres Meta | postgres-meta | Apache-2.0 |
| Pooler | Supavisor | Apache-2.0 |
| Postgres | Supabase Postgres | PostgreSQL |
| PostgREST | PostgREST | MIT |
| Realtime | Supabase Realtime | Apache-2.0 |
| Storage | Supabase Storage | Apache-2.0 |
| Studio | Supabase | Apache-2.0 |
| Mailpit | Mailpit | MIT |
| Vector | Vector | MPL-2.0 |
| Imgproxy | imgproxy | MIT |
Each generated runtime archive includes the license and notice files found in
its dependency closure under share/licenses/. Each release also includes an
SPDX 2.3 SBOM describing every file shipped in the archive. Those generated
materials are the authoritative notices for a particular service, version, and
target.