Access to AO Platform Ontology from 3rd Party Products (Preview)
Access to AO Platform Ontology from 3rd Party Products (Preview)
Breadcrumbs

Open Source Policy and Library List - AO Embedded Easy Answers Agent

Intended audience: administrators developers legal

AO Embedded Easy Answers Agent: 1.1


Overview

The AO Embedded Chat Agent is developed using a combination of:

  • App Orchid's proprietary software code

  • Open Source software libraries

This topic describes App Orchid’s policies and related USE of Free and Open Source Software (FOSS) libraries in the making of, and/or distributed with, the AO Embedded Chat Agent. App Orchid does not CREATE Open Source software, nor CONTRIBUTE to 3rd party Open Source projects at this point.

In accordance with the terms of applicable Open Source licenses, App Orchid acknowledges the USE of Open Source libraries with full transparency, including a complete listing of the main libraries and their dependencies, their 3rd party download locations, and the governing licenses. For questions about the FOSS Library List, please contact App Orchid Customer Support team.


License Types

  • There are many different types of open-source licenses. The Open Source Initiative is a great resource for understanding Licenses & Standards, and how they are categorized.

  • App Orchid follows some general principles when selecting open-source software for use in the AO Easy Answers for Mobile App (descriptions courtesy of Google’s “Three rights to consider”):

    • The right to make copies (also known as reproduction).

    • The right to modify and adapt (also known as the right to make derivative works).

    • The right to distribute the original and modifications.

  • The above principles are typical traits of the Open Source “Permissive” category of licenses.

  • App Orchid does NOT permit use of Open Source licenses from the “Copyleft” category, unless the specific license terms contain mitigating clauses, such as allowing distribution of the Open Source software without putting restrictions on the App Orchid commercially licensed software.


Managing Open Source Software/Licenses

  • App Orchid mainly makes use of open-source libraries from the following public repositories:

  • App Orchid manages all software libraries using App Orchid IP via an internal Maven repository. All open-source software dependencies are managed by the Gradle build tool, referencing specific software libraries and their corresponding version numbers.

  • App Orchid does not store copies of the dependent open-source libraries in use, but rather the internal repository links directly to external/public repositories (see above) from which the required software libraries will be downloaded. That said, the target build environment will store the libraries in a cache, so only new/updated libraries will be downloaded after the initial download/build process.

  • Before adopting a new Open Source library, a core team, consisting of App Orchid's Chief Architect, Development Manager, Product Manager, and a Legal representative, will assess the library based on a number of factors, such as:

    • desired functionality

    • frequency and recency of updates by the community

    • active support options - including commercial options

    • licensing - see above

    • availability of alternative libraries

    • complexity of integration

    • APIs, where relevant

  • App Orchid takes a practical and pragmatic approach to updating open-source libraries. App Orchid will assess data and privacy security implications, vulnerabilities, new and/or updated functionality, environment dependencies, customer feedback, and a number of other factors that can all lead to library updates. Depending on the seriousness of issues found, App Orchid will either issue a patch release with fixes and/or update affected library/ies for the next update of the software.

  • For the AO Platform Open Source Policy and Library List, see Open Source Policy and Library List.


Open Source Libraries Used by the AO Embedded Chat Agent

Last update: SEPTEMBER 2026

This report lists only the open source libraries present at runtime in production for the ao-mobile-viz visualization library — the publishable package at packages/ao-mobile-viz. The scope was determined by reading the shipped artifact, not the manifest: dist/ao-mobile-viz.bundle.js (and the copy vendored into Easy Answers for Mobile at client/lib/ao-mobile-viz/) imports exactly three third-party modules, listed below. Every one is a peer dependency marked external in the Rollup config, so the library bundles no third-party code at all — the consuming application resolves and supplies all three at load time, at whatever version it ships within the declared range. Build tooling, type declarations, and declared dependencies verified absent from the artifact are excluded.


Libraries

  • 3 Runtime Libraries

  • 1 License Group

  • 11 Excluded (non-production)

  • 0 Copyleft Obligations


Details

Library

Declared Range

Type

Downloaded From

License

Installed Location

Runtime Imports of the Shipped Bundle (peer dependencies — resolved by the consuming application, never bundled)

react
(React runtime for every renderer)

≥18.0.0

peer

NPM

MIT

resolved by the consuming application — not in dist/

react-native
(View, Text, ScrollView, Pressable, Dimensions)

≥0.72.0

peer

NPM

MIT

resolved by the consuming application — not in dist/

react-native-svg
(SVG primitives for every chart, card, table and map renderer)

≥13.0.0

peer

NPM

MIT

resolved by the consuming application — not in dist/

License Summary - Production Scope

License

Libraries

Category

Obligation when distributing ao-mobile-viz

MIT

3

Permissive

Discharged by the consuming application, which supplies all three libraries. For Easy Answers for Mobile, they appear in the Easy Answers for Mobile FOSS Dependency Inventory (Production Scope).

Visualization Renderer Coverage

Viz Type

Libraries Used

Renderer Source

Line / Area Chart

react-native-svg (Path, Circle, Line, G, SvgText)

src/renderers/ChartRenderer.tsx

Bar / Column Chart

react-native-svg (Rect, G, Line, SvgText)

src/renderers/ChartRenderer.tsx

Pie / Donut Chart

react-native-svg (Path, G, SvgText)

src/renderers/ChartRenderer.tsx

Radar Chart

react-native-svg (Polygon, Path, Circle, SvgText)

src/renderers/ChartRenderer.tsx
src/utils/radarRings.ts

Radial Bar Chart

react-native-svg (Path, Circle, G)

src/renderers/ChartRenderer.tsx
src/utils/chartHeight.ts

Funnel Chart

react-native-svg (Polygon, Circle, Line, G, SvgText)

src/renderers/ChartRenderer.tsx

Treemap

react-native-svg (Rect, G, SvgText)
squarified layout (Bruls et al.) implemented in-repo — no third-party layout library

src/renderers/ChartRenderer.tsx

Bubble Chart

react-native-svg (Circle, Line, G, SvgText)

src/renderers/ChartRenderer.tsx
src/utils/yAxis.ts
src/utils/pointerCoords.ts

Box Plot

react-native-svg (Rect, Line, G, SvgText)

src/renderers/ChartRenderer.tsx
src/utils/yAxis.ts

Heatmap
(matrix grid and calendar variants)

react-native-svg (Rect, G, SvgText)

src/renderers/ChartRenderer.tsx

Word Cloud

react-native-svg (SvgText)
placement computed in-repo — no third-party word-cloud library

src/renderers/ChartRenderer.tsx

Multi-Series Chart

react-native-svg (Path, Circle, G, SvgText)

src/renderers/MultiSeriesChartRenderer.tsx

Temporal Chart

react-native-svg (Path, Line, G, SvgText)

src/renderers/TemporalChartRenderer.tsx

Chart Tooltip

React Native core only (View, Text, Pressable)

src/renderers/ChartTooltip.tsx

Table

React Native core (ScrollView, Pressable)
react-native-svg (sort and filter glyphs)

src/renderers/TableRenderer.tsx

DataView

React Native core (ScrollView, Dimensions)
react-native-svg (Path, Circle)

src/renderers/DataViewRenderer.tsx

Card (KPI)

react-native-svg (Path, Circle, Rect, G)

src/renderers/CardRenderer.tsx

Map (SVG fallback)

react-native-svg (Circle, Rect, G, Path, SvgText)

src/renderers/MapRenderer.tsx

Compliance Findings

Check

Result

Detail

Copyleft (GPL / LGPL / AGPL)

None

No production library carries a GPL-family license. The one LGPL package in the repository, rollup-plugin-dts, is build-time only and is excluded below.

Commercial / Proprietary

None

All three production libraries are OSI-approved open source.

Unknown / Unresolved licenses

0

Each declares a machine-readable SPDX license identifier in its published package.json.

Runtime footprint

Zero

The shipped bundle contains no third-party code. Its complete set of external imports is react, react/jsx-runtime, react-native, and react-native-svg, all resolved from the host application at load time.

Peer resolution

Host-controlled

This library pins no peer version. All three peers are marked external in the Rollup config, so the consuming application resolves and supplies each one at load time; whatever version a host provides within the declared range is the version that runs. npm's peer auto-install may place its own copy in a developer's workspace during a local build — that copy is a build-machine artifact, never enters dist/, and never reaches a device.

Attribution artifact

Not required standalone

Because nothing third-party is bundled into dist/, this library ships no third-party code of its own and needs no notices file of its own. Attribution for the three peer libraries is discharged by the consuming application.

Component

Version

Note

ao-mobile-viz

1.1.0

App Orchid’s own visualization library, vendored into this app as a prebuilt bundle at client/lib/ao-mobile-viz/. It is first-party code, not a third-party dependency, and is inventoried separately in the ao-mobile-viz FOSS Dependency Inventory (Production Scope). The bundle’s only third-party imports are react, react-native, and react-native-svg, all three already listed above and all supplied by this application (react@19.1.0, react-native@0.81.5, react-native-svg@15.15.4). It bundles no third-party code of its own, so it adds no attribution obligation beyond the rows above.





Contact App Orchid | Disclaimer