Third-party Dependencies Notice
Last reviewed: 2026-07-11

Steek uses third-party and open-source software components to provide and
secure the web application. Those components remain governed by their own
licenses.

This public notice is a concise disclosure for website users. Steek keeps
the detailed package license register and generated notice materials with the
source tree, build records, and distributed artifacts where license preservation
is required.

This public notice covers the direct Steek web runtime packages whose
licenses require notice preservation when the application, source bundle,
container image, or client assets are distributed.

Runtime package notices:

- @noble/curves: MIT license.
- @noble/hashes: MIT license.
- @noble/post-quantum: MIT license.
- lucide-react: ISC license.
- next: MIT license.
- pdf-lib: MIT license.
- pdfjs-dist: Apache-2.0 license.
- qrcode: MIT license.
- rate-limiter-flexible: ISC license.
- react: MIT license.
- react-dom: MIT license.
- server-only: MIT license.
- zod: MIT license.

Runtime data notices:

- Location recommendation data is derived from GeoNames city data
  (https://www.geonames.org), licensed under Creative Commons Attribution 4.0
  (https://creativecommons.org/licenses/by/4.0/). Steek uses a filtered,
  ASCII-normalized subset capped to 1,000 population-ranked suggestions for
  editable organization profile suggestions. The JSON conversion source
  `JulienChebance/geonames-cities-json` is MIT licensed.

Material notice categories:

- Permissive licenses such as MIT, ISC, BSD, Apache-2.0, 0BSD, MIT-0, BlueOak,
  and CC0. These licenses generally allow commercial use when required copyright
  and license notices are preserved.
- Weak copyleft or source-availability licenses such as MPL-2.0 and LGPL terms
  that can require additional notice preservation or source availability for
  covered modified files or redistributed binaries.
- Attribution licenses such as CC-BY that can require attribution when covered
  data or materials are redistributed.

Steek does not use this notice to grant extra rights in third-party
software. The applicable package licenses control their own components. Before
external redistribution, Steek produces or preserves an appropriate
third-party notice bundle for the exact shipped dependency tree, including
material transitive licenses where required.

Notificare privind dependintele third-party
Ultima revizuire: 2026-07-11

Steek foloseste componente software third-party si open-source pentru a
furniza si securiza aplicatia web. Aceste componente raman guvernate de
propriile licente.

Aceasta notificare publica este o divulgare concisa pentru utilizatorii site-ului.
Steek pastreaza registrul detaliat al licentelor de pachete si materialele
de notificare generate impreuna cu arborele sursa, inregistrarile de build si
artefactele distribuite acolo unde pastrarea licentelor este necesara.

Aceasta notificare publica acopera pachetele directe de runtime ale aplicatiei
web Steek ale caror licente cer pastrarea notificarilor cand aplicatia,
pachetul sursa, imaginea container sau asseturile client sunt distribuite.

Notificari pentru pachete runtime:

- @noble/curves: licenta MIT.
- @noble/hashes: licenta MIT.
- @noble/post-quantum: licenta MIT.
- lucide-react: licenta ISC.
- next: licenta MIT.
- pdf-lib: licenta MIT.
- pdfjs-dist: licenta Apache-2.0.
- qrcode: licenta MIT.
- rate-limiter-flexible: licenta ISC.
- react: licenta MIT.
- react-dom: licenta MIT.
- server-only: licenta MIT.
- zod: licenta MIT.

Notificari pentru date runtime:

- Datele pentru recomandarile de locatie sunt derivate din datele GeoNames
  despre orase (https://www.geonames.org), licentiate sub Creative Commons
  Attribution 4.0 (https://creativecommons.org/licenses/by/4.0/). Steek
  foloseste un subset filtrat, normalizat ASCII si limitat la 1.000 de sugestii
  ordonate dupa populatie pentru sugestii editabile in profilul organizatiei.
  Sursa de conversie JSON `JulienChebance/geonames-cities-json` este licentiata
  MIT.

Categoriile materiale de notificare:

- Licente permisive precum MIT, ISC, BSD, Apache-2.0, 0BSD, MIT-0, BlueOak si
  CC0. Aceste licente permit in general utilizarea comerciala cand notificarile
  de copyright si licenta cerute sunt pastrate.
- Licente weak copyleft sau cu obligatii de disponibilitate a sursei precum
  MPL-2.0 si termeni LGPL, care pot cere pastrarea unor notificari suplimentare
  sau disponibilitatea sursei pentru fisiere modificate acoperite ori binare
  redistribuite.
- Licente cu atribuire precum CC-BY, care pot cere atribuire cand datele sau
  materialele acoperite sunt redistribuite.

Steek nu foloseste aceasta notificare pentru a acorda drepturi suplimentare
asupra software-ului third-party. Licentele aplicabile ale pachetelor controleaza
propriile componente. Inainte de redistribuire externa, Steek produce sau
pastreaza un pachet adecvat de notificari third-party pentru arborele exact de
dependinte livrat, incluzand licentele tranzitive materiale unde este necesar.