Our approach to open source
We prefer permissive licenses (Apache 2.0, MIT, BSD) and review every new dependency for license compatibility, security posture and maintenance signal before adoption.
Where we can, we contribute fixes and improvements back to upstream projects on company time.
Core open-source dependencies
Selected projects we rely on every day:
- Apache Iceberg — open table format (Apache 2.0)
- DuckDB — in-process analytical database (MIT)
- Apache Arrow — columnar memory format (Apache 2.0)
- React & TanStack — UI and routing (MIT)
- PostgreSQL — metadata storage (PostgreSQL License)
- Kubernetes — orchestration (Apache 2.0)
NOTICE file & SBOM
A complete NOTICE file shipping the full list of bundled components and their licenses is included with each release.
SPDX and CycloneDX Software Bills of Materials are available to enterprise customers under a standard NDA — email opensource@avaloka.com.
Third-party services
Some features rely on third-party services that you choose to enable in your workspace (for example: identity providers, observability tooling, payment processors). When you enable those integrations, their terms apply alongside ours.
Trademarks
"Avaloka" and the Avaloka logo are trademarks of Guruvai Sciences. All other trademarks, product names and logos appearing on this site are the property of their respective owners.
Reasonable use for interoperability, journalism and integration listings is welcome. For partnership or marketing use, please review our brand guidelines or reach out for approval.
Contributing back
Our SDKs and documentation are open-source under permissive licenses. Pull requests are welcome — larger contributions typically start with an issue so we can align on direction before code is written.
Reporting a concern
If you believe a component is misattributed or used outside its license terms, please email opensource@avaloka.com with the details. We take license compliance seriously and will respond promptly.