Installation - Mobile

Open Source Policy and Library List - Mobile App

Intended audience: administrators developers legal

AO Easy Answers for Mobile: 2.0


Overview

The AO Easy Answers for Mobile App is developed using a combination of:

  • App Orchid's proprietary software code

  • Open Source software libraries

This topic describes App Orchid’s policies and related USE of Free and Open Source Software (FOSS) libraries in the making of, and/or distributed with, the AO Easy Answers for Mobile App. App Orchid does not CREATE Open Source software, nor CONTRIBUTE to 3rd party Open Source projects at this point.

In accordance with the terms of applicable Open Source licenses, App Orchid acknowledges the USE of Open Source libraries with full transparency, including a complete listing of the main libraries and their dependencies, their 3rd party download locations, and the governing licenses. For questions about the FOSS Library List, please contact App Orchid Customer Support team.


License Types

  • There are many different types of open-source licenses. The Open Source Initiative is a great resource for understanding Licenses & Standards, and how they are categorized.

  • App Orchid follows some general principles when selecting open-source software for use in the AO Easy Answers for Mobile App (descriptions courtesy of Google’s “Three rights to consider”):

    • The right to make copies (also known as reproduction).

    • The right to modify and adapt (also known as the right to make derivative works).

    • The right to distribute the original and modifications.

  • The above principles are typical traits of the Open Source “Permissive” category of licenses.

  • App Orchid does NOT permit use of Open Source licenses from the “Copyleft” category, unless the specific license terms contain mitigating clauses, such as allowing distribution of the Open Source software without putting restrictions on the App Orchid commercially licensed software.


Managing Open Source Software/Licenses

  • App Orchid mainly makes use of open-source libraries from the following public repositories:

  • App Orchid manages all software libraries using App Orchid IP via an internal Maven repository. All open-source software dependencies are managed by the Gradle build tool, referencing specific software libraries and their corresponding version numbers.

  • App Orchid does not store copies of the dependent open-source libraries in use, but rather the internal repository links directly to external/public repositories (see above) from which the required software libraries will be downloaded. That said, the target build environment will store the libraries in a cache, so only new/updated libraries will be downloaded after the initial download/build process.

  • Before adopting a new Open Source library, a core team, consisting of App Orchid's Chief Architect, Development Manager, Product Manager, and a Legal representative, will assess the library based on a number of factors, such as:

    • desired functionality

    • frequency and recency of updates by the community

    • active support options - including commercial options

    • licensing - see above

    • availability of alternative libraries

    • complexity of integration

    • APIs, where relevant

  • App Orchid takes a practical and pragmatic approach to updating open-source libraries. App Orchid will assess data and privacy security implications, vulnerabilities, new and/or updated functionality, environment dependencies, customer feedback, and a number of other factors that can all lead to library updates. Depending on the seriousness of issues found, App Orchid will either issue a patch release with fixes and/or update affected library/ies for the next update of the software.

  • For the AO Platform Open Source Policy and Library List, see Open Source Policy and Library List.


Open Source Libraries Used by the AO Easy Answers for Mobile App

Last update: SEPTEMBER 2026

Libraries

  • 49 Production Libraries

  • 41 Mobile Binaries

  • 2 Web Surfaces

  • 6 Backend Services

  • 25 Excluded (non-production)

  • 0 Copyleft Obligations


Details

Library

Version

Type

Downloaded From

License

Installed Location

Mobile Application Binary — iOS and Android (41)

expo

54.0.25

shipped

NPM

MIT

node_modules/expo

react

19.1.0

shipped

NPM

MIT

node_modules/react

react-native

0.81.5

shipped

NPM

MIT

node_modules/react-native

@react-navigation/native

7.1.24

shipped

NPM

MIT

node_modules/@react-navigation/native

@react-navigation/native-stack

7.8.5

shipped

NPM

MIT

node_modules/@react-navigation/native-stack

@react-navigation/bottom-tabs

7.8.11

shipped

NPM

MIT

node_modules/@react-navigation/bottom-tabs

@react-navigation/elements

2.9.1

shipped

NPM

MIT

node_modules/@react-navigation/elements

react-native-screens
(native screen primitives required by react-navigation)

4.16.0

shipped

NPM

MIT

node_modules/react-native-screens

react-native-safe-area-context

5.6.2

shipped

NPM

MIT

node_modules/react-native-safe-area-context

react-native-gesture-handler

2.28.0

shipped

NPM

MIT

node_modules/react-native-gesture-handler

react-native-reanimated

4.1.5

shipped

NPM

MIT

node_modules/react-native-reanimated

react-native-worklets
(worklet runtime required by react-native-reanimated)

0.5.1

shipped

NPM

MIT

node_modules/react-native-worklets

react-native-keyboard-controller

1.18.5

shipped

NPM

MIT

node_modules/react-native-keyboard-controller

react-native-svg
(SVG primitives; also the sole third-party import of the vendored ao-mobile-viz bundle)

15.15.4

shipped

NPM

MIT

node_modules/react-native-svg

@expo/vector-icons
(Feather icon set)

15.1.1

shipped

NPM

MIT

node_modules/@expo/vector-icons

expo-blur

15.0.7

shipped

NPM

MIT

node_modules/expo-blur

expo-glass-effect

0.1.7

shipped

NPM

MIT

node_modules/expo-glass-effect

expo-linear-gradient

15.0.8

shipped

NPM

MIT

node_modules/expo-linear-gradient

expo-symbols

1.0.7

shipped

NPM

MIT

node_modules/expo-symbols

expo-image

3.0.10

shipped

NPM

MIT

node_modules/expo-image

expo-font

14.0.9

shipped

NPM

MIT

node_modules/expo-font

expo-splash-screen

31.0.11

shipped

NPM

MIT

node_modules/expo-splash-screen

expo-status-bar

3.0.8

shipped

NPM

MIT

node_modules/expo-status-bar

expo-system-ui

6.0.8

shipped

NPM

MIT

node_modules/expo-system-ui

expo-haptics

15.0.7

shipped

NPM

MIT

node_modules/expo-haptics

expo-keep-awake

15.0.8

shipped

NPM

MIT

node_modules/expo-keep-awake

@react-native-async-storage/async-storage

2.2.0

shipped

NPM

MIT

node_modules/@react-native-async-storage/async-storage

@tanstack/react-query
(server-state cache)

5.90.11

shipped

NPM

MIT

node_modules/@tanstack/react-query

expo-secure-store
(credential storage)

15.0.8

shipped

NPM

MIT

node_modules/expo-secure-store

expo-file-system

19.0.22

shipped

NPM

MIT

node_modules/expo-file-system

pako
(zlib inflate for compressed API payloads)

2.1.0

shipped

NPM

(MIT AND Zlib)

node_modules/pako

@react-native-firebase/app

24.0.0

shipped

NPM

Apache-2.0

node_modules/@react-native-firebase/app

@react-native-firebase/messaging

24.0.0

shipped

NPM

Apache-2.0

node_modules/@react-native-firebase/messaging

expo-notifications

0.32.17

shipped

NPM

MIT

node_modules/expo-notifications

expo-constants

18.0.13

shipped

NPM

MIT

node_modules/expo-constants

expo-device

55.0.9

shipped

NPM

MIT

node_modules/expo-device

expo-linking

8.0.9

shipped

NPM

MIT

node_modules/expo-linking

expo-clipboard

8.0.8

shipped

NPM

MIT

node_modules/expo-clipboard

expo-sharing

14.0.8

shipped

NPM

MIT

node_modules/expo-sharing

expo-speech-recognition
(voice input in chat)

3.0.1

shipped

NPM

MIT

node_modules/expo-speech-recognition

expo-web-browser

15.0.9

shipped

NPM

MIT

node_modules/expo-web-browser

Web Surface — static build served in production (2)

react-dom
(web renderer for the static build served at static-build/web)

19.1.0

shipped

NPM

MIT

node_modules/react-dom

react-native-web
(React Native primitives on the web surface)

0.21.2

shipped

NPM

MIT

node_modules/react-native-web

Backend Service — server_dist, run by npm run server:prod (6)

express
(HTTP server and static asset host)

4.22.1

shipped

NPM

MIT

node_modules/express

http-proxy-middleware
(upstream API proxy)

3.0.5

shipped

NPM

MIT

node_modules/http-proxy-middleware

firebase-admin
(server-side push dispatch)

13.8.0

shipped

NPM

Apache-2.0

node_modules/firebase-admin

drizzle-orm
(schema definitions (drizzle-orm/pg-core))

0.39.3

shipped

NPM

Apache-2.0

node_modules/drizzle-orm

drizzle-zod
(schema-to-validator bridge)

0.7.1

shipped

NPM

Apache-2.0

node_modules/drizzle-zod

zod
(request payload validation)

3.25.76

shipped

NPM

MIT

node_modules/zod

License Summary — Production Scope

License

Libraries

Category

Obligation when distributing Easy Answers for Mobile

MIT

43

Permissive

Reproduce the copyright notice and permission text in the app's third-party notices. No source disclosure.

Apache-2.0

5

Permissive

Reproduce the license, retain NOTICE file contents, and state significant modifications. Includes an express patent grant. No source disclosure.

MIT AND Zlib

1

Permissive

pako. Both notices must appear in third-party notices. Zlib additionally requires that altered source versions be marked as such; pako is used unmodified.

Compliance Findings

Check

Result

Detail

Copyleft (GPL / LGPL / AGPL)

None

No production library carries a GPL-family license. No source-disclosure obligation attaches to this release.

Weak copyleft (MPL / EPL / CDDL)

None

No production library carries a file-level copyleft license.

Commercial / Proprietary

None

All 49 production libraries are OSI-approved open source.

Unknown / Unresolved licenses

0

Every production library declares a machine-readable SPDX license identifier in its published package.json.

Patent grant coverage

Present

Apache-2.0 components (Firebase, Drizzle) carry an express patent grant. React and React Native are MIT-licensed with no separate patents file as of the versions listed.

Attribution artifact

Required

A third-party notices screen or file must ship with the app reproducing the MIT, Apache-2.0, and Zlib texts for the 49 libraries above.

Component

Version

Note

ao-mobile-viz

1.1.0

App Orchid’s own visualization library, vendored into this app as a prebuilt bundle at client/lib/ao-mobile-viz/. It is first-party code, not a third-party dependency, and is inventoried separately in the ao-mobile-viz FOSS Dependency Inventory (Production Scope). The bundle’s only third-party imports are react, react-native, and react-native-svg, all three already listed above and all supplied by this application (react@19.1.0, react-native@0.81.5, react-native-svg@15.15.4). It bundles no third-party code of its own, so it adds no attribution obligation beyond the rows above.






Contact App Orchid | Disclaimer