forensic-deepdive
Copyright 2026 Dhevenddra

This product is licensed under the Apache License, Version 2.0 (the
"License"); you may not use this product except in compliance with the
License. A copy of the License is provided in the LICENSE file.

================================================================================
Third-party attributions
================================================================================

PageRank repo-map algorithm
  The symbol-graph construction and personalized-PageRank ranking in
  src/forensic_deepdive/static/ (graph.py and pagerank.py) are a clean-room
  port of the repo-map algorithm from Aider (https://github.com/Aider-AI/aider),
  licensed under the Apache License, Version 2.0. The `aider` package itself is
  NOT a dependency of this project; only the algorithm was ported. The PageRank
  numerics are provided by NetworkX. See DECISIONS.md DEC-003.

Tree-sitter tag queries
  The `.scm` tag queries in src/forensic_deepdive/static/tags.py follow the
  `tags.scm` convention established by the tree-sitter project and
  nvim-treesitter (MIT / Apache-2.0), as adapted by Aider for use with the
  tree-sitter language pack.

Confidence-tag taxonomy
  The EXTRACTED / INFERRED / AMBIGUOUS confidence taxonomy applied to emitted
  rules and facts is adopted from Graphify
  (https://github.com/safishamsi/graphify), licensed under the MIT License.
  See DECISIONS.md DEC-007.

Sigma.js / graphology (vendored UI client)
  The `forensic serve --ui` graph explorer (DEC-053) bundles three vendored,
  pinned, MIT-licensed JavaScript libraries under
  src/forensic_deepdive/serve/assets/vendor/:
    - Sigma.js 2.4.0           (https://github.com/jacomyal/sigma.js)
    - graphology 0.25.4        (https://github.com/graphology/graphology)
    - graphology-library 0.8.0 (https://github.com/graphology/graphology)
  Each is distributed under the MIT License. The bundles are loaded directly
  (no npm/Vite build step) so the UI is fully offline (DEC-009). Versions and
  source URLs are recorded in that directory's VENDOR.md.

  The MIT License (for all three):
    Permission is hereby granted, free of charge, to any person obtaining a copy
    of this software and associated documentation files (the "Software"), to deal
    in the Software without restriction, including without limitation the rights
    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
    copies of the Software, and to permit persons to whom the Software is
    furnished to do so, subject to the above copyright notice and this permission
    notice being included in all copies or substantial portions of the Software.
    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND.

Graph engine — real-ladybug (Kùzu fork)
  The persistent graph store uses `real-ladybug` (DEC-013), a community-maintained
  fork of Kùzu (https://github.com/kuzudb/kuzu), MIT License. Kùzu's GitHub repo
  was archived in October 2025; LadybugDB continues it (Cypher dialect, columnar
  storage, full-text + vector indices) under the MIT License.

FastContext (v0.8 usefulness experiment — NOT part of the distributed package)
  The wheel ships only `src/forensic_deepdive/`. The experiment harness under
  `experiments/fastcontext/` (DEC-087) integrates Microsoft FastContext
  (https://github.com/microsoft/fastcontext), MIT License, and evaluates against
  the SWE-bench Multilingual dataset. None of this is included in the published
  package; it is reproducibility tooling only.
