Third-party software
Weik.io 2026.2The open source programs inside the Weik.io 2026.2 images, with their versions and licences, and how each release checks them.
On this page
Weik.io is open source under the Apache License 2.0. Its images run Weik.io’s own programs, the backend, APIM, the agent, the forwarder and the supervisor that starts each telemetry store, beside the open source programs below. Every image is pinned by its digest and pulled from the installation’s registry, Docker Hub unless you give another.
The programs and their licences#
| Program | Version | Where it runs | What it does there | Licence |
|---|---|---|---|---|
| Apache Camel | 4.22.1 and 4.18.5 | weikio/, which builds each version with it, and the integrations on your agents |
Runs the integrations’ routes, with one launcher for each Camel line | Apache-2.0 |
| OpenJDK (Eclipse Temurin) | 21.0.12.1 | weikio/ and weikio/ |
The Java runtime the integrations run on | GPL-2.0 with the Classpath Exception |
| .NET | 10 | The backend, APIM and the agent, and the weikio CLI |
The runtime of Weik.io’s own programs | MIT |
| NATS server | 2.14.7 | The hub’s message server and each agent’s leaf node | Carries the control traffic and the events, and stores Weik.io’s records | Apache-2.0 |
| rclone | 1.75.1 | weikio/ and weikio/ |
Moves the files of file transfers and copies backup archives to their storage | MIT |
| OpenTelemetry Collector contrib | 0.160.0 | weikio/, weikio/ and weikio/ |
Forwards telemetry to your own systems, and keeps an agent’s telemetry on its disk while the hub is out of reach | Apache-2.0 |
| VictoriaLogs | 1.52.0 | weikio/, the hub’s log store |
Stores and searches the log lines | Apache-2.0 |
| VictoriaMetrics | 1.153.0 | weikio/, the hub’s metric store |
Stores the metrics and answers the charts | Apache-2.0 |
| VictoriaTraces | 0.12.0 | weikio/, the hub’s trace store |
Stores the traces | Apache-2.0 |
| Traefik Proxy | 3.7.13 | The hub’s terminator on port 443 | Passes each connection on by its name and terminates TLS for the hub’s own names | MIT |
The images also contain the libraries these programs and Weik.io’s own programs are built from, such as the NuGet packages, the admin UI’s npm packages, the jars inside each Camel launcher and the Go modules of rclone, the collector and the stores. Each of them has an entry with its licence in the image’s notices. Every integration’s bundle ships log4j 2.25.5, and the admin UI ships DOMPurify 3.4.17 and KaTeX 0.18.10.
Where the notices are#
Every Weik.io image has these files at its root:
| File | What it has |
|---|---|
/ |
The licence of Weik.io’s own programs, the Apache License 2.0 |
/ |
The copyright notice and where the source code of the components under a copyleft licence is published |
/ |
Every component of others the image contains, with its licence, the licence and notice files it ships and the standard text of each licence at the end |
/ |
The same components, one per line with its version and its licence as an SPDX expression, for scripts |
/ |
What each of these files is |
The backend and agent images also have /licenses/jdk/, the legal files of the Java runtime, and /licenses/rclone/COPYING, rclone’s licence. The forwarder image has /licenses/otelcol-contrib.modules, the list of the modules the collector is built from, and each store image has the same list of its store, such as /licenses/victoria-logs.modules.
How each release checks the licences#
The notices are written from the files each image actually contains while the image is built, so they can’t fall behind it. A component whose own files give no licence, or give one the check doesn’t recognise, gets the licence a person reviewed for that exact version, and the build of an image with an unreviewed version fails and says which component it is. Before a release is published, a check of each built image confirms that every component has its entry and that the text of every licence an entry lists is in the notices.