THIRD-PARTY COMPONENT NOTICES (THIRD-PARTY NOTICES)
Product: Cabinee
Copyright holder: © 2024–2026 Reunico LLC. All rights reserved.
This document lists third-party software components directly specified in the provided pom.xml and package.json files.
Cabinee is proprietary software owned by Reunico LLC. Third-party components are distributed under the terms of their respective licenses. This document does not transfer ownership of third-party components and does not change their licensing terms.
1. Product notice
Cabinee is proprietary software. Unauthorized copying, modification, distribution, sublicensing, decompilation, or disclosure is prohibited, except as expressly provided by the license agreement.
The Cabinee name, logo, and related designations are trademarks of Reunico LLC. All third-party trademarks belong to their respective owners.
2. Third-party components
2.1 Backend / Java / Maven
The components specified in pom.xml are listed below.
| Component | Version | License | Purpose |
|---|---|---|---|
| Spring Boot Starter Parent | 3.5.11 | Apache 2.0 | Parent POM |
| Spring Cloud BOM | 2025.0.0 | Apache 2.0 | Dependency management |
| Lombok | 1.18.32 | MIT | Code generation |
| PostgreSQL Driver | Managed | BSD | Database connectivity |
| Liquibase | 4.18.0 | Apache 2.0 | Database migrations |
| MapStruct | 1.5.5 | Apache 2.0 | Object mapping |
| OpenHTML to PDF | 1.1.31 | LGPL 2.1 | PDF generation |
| Hibernate JPAModelGen | 6.6.13 | LGPL 2.1 | JPA metamodel |
| JJWT | 0.12.3 | Apache 2.0 | JWT |
| Selenium | 4.23.0 | Apache 2.0 | Testing |
| PDFBox | 3.0.5 | Apache 2.0 | PDF handling |
Camunda 8 components
| Component | Version | License | Purpose |
|---|---|---|---|
| Camunda Platform (orchestration cluster) | 8.9.x | core — Apache 2.0; some components under Camunda License | Process execution, Operate, Tasklist |
| Zeebe Exporter API | 8.9.0 | Apache 2.0 | Exporter interface, provided by the broker at runtime |
| Zeebe Protocol | 8.9.0 | Apache 2.0 | Engine record model, provided by the broker at runtime |
| Kafka Clients | Managed | Apache 2.0 | Record publishing by the exporter; exchange in the adapter |
| Camunda BPMN Model | 7.24.0-unibpm.1 | Apache 2.0 | BPMN model parsing on the Cabinee side |
| Zeebe BPMN Model | 8.5.6 | Apache 2.0 | Declared in unibpm-app/pom.xml, not used in code |
| Elasticsearch | 9.2.x | Elastic License 2.0 / SSPL | Secondary storage for the orchestration cluster |
Internal modules attached to unibpm-app for the Camunda 8 transition (technical artifact names):
| Module | Purpose |
|---|---|
unibpm-external-task-api | ExternalTaskJob and ExternalTaskResult contracts for the job activation worker |
unibpm-camunda8-adapter | Separate service, built from the same repository |
unibpm-camunda8-exporter | Broker plugin, built from the same repository |
camunda-bpmn-modelis a BPMN parsing library. Cabinee uses it to obtain the user-task name, form reference, and available escalations from the model.zeebe:extensions are read from it as well, via generic DOM access, so a separate Zeebe model is not required for that.
zeebe-bpmn-modelis declared inunibpm-app/pom.xml, but no class fromio.camunda.zeebe.modelis imported, and the declared version (8.5.6) does not match the cluster version (8.9.x). The dependency should either be removed or aligned by version.
zeebe-exporter-apiandzeebe-protocolare connected with scopeprovided: classes come from the broker JVM, so the exporter version must match the cluster at least on the minor part.Parts of the orchestration cluster are distributed under the Camunda License, not Apache 2.0. Usage terms should be checked against the release notes of the specific version.
2.2 Frontend runtime
| Component | Version | License | Purpose |
|---|---|---|---|
| React | ^19.2.7 | MIT | UI library |
| React DOM | ^19.2.7 | MIT | Rendering |
| React Router DOM | ^7.18.1 | MIT | Routing |
| Quill | ^2.0.3 | BSD | Text editor |
| Recharts | ^3.9.2 | MIT | Charts |
| Axios | ^1.18.1 | MIT | HTTP client |
| keycloak-js | ^26.2.4 | Apache 2.0 | Authentication |
| @stomp/stompjs | ^7.3.0 | MIT | WebSocket |
| SockJS Client | ^1.6.1 | MIT | WebSocket transport |
| React Toastify | ^11.1.0 | MIT | Notifications |
Embedded modeler
| Component | Version | License | Purpose |
|---|---|---|---|
| bpmn-js-properties-panel | ^5.60.0 | MIT | BPMN properties panel |
| camunda-bpmn-moddle | ^7.0.1 | MIT | camunda: extensions for BPMN |
| dmn-js | ^17.8.1 | bpmn.io | DMN editor |
| dmn-js-properties-panel | ^3.11.1 | MIT | DMN properties panel |
| camunda-dmn-moddle | ^1.3.1 | MIT | camunda: extensions for DMN |
| @bpmn-io/form-js | ^1.23.0 | bpmn.io | Form editor |
The embedded modeler is built for the legacy platform:
BpmnEditor.tsxconnectsCamundaPlatformPropertiesProviderModuleandcamunda-bpmn-moddle; there is nozeebe-bpmn-moddlepackage in the dependencies. Thereforezeebe:extensions are neither shown nor saved in the embedded editor, and Camunda 8 models are prepared in Camunda Modeler. See Space artifacts .
2.3 Frontend build
| Component | Version | License | Purpose |
|---|---|---|---|
| Webpack | ^5.108.4 | MIT | Bundling |
| Babel | ^7.29.7 | MIT | JS transpilation |
| TypeScript | ^7.0.2 | Apache 2.0 | Language |
| Sass | ^1.101.0 | MIT | Styles |
| oxlint | ^1.75.0 | MIT | Static analysis |
| selenium-webdriver | ^4.46.0 | Apache 2.0 | Testing |
3. License locations
Full license texts are available:
- in
node_modules/.../LICENSE - in Maven artifacts
- in library repositories
Recommended release artifacts:
THIRD-PARTY-NOTICES.mdTHIRD-PARTY-LICENSES/
4. License review
4.1 Copyleft
There are no GPL/AGPL components in the direct dependencies.
There are LGPL components (for example OpenHTML to PDF) that require a compliance review against the license terms.
5. Source code header
/*
- Copyright © 2024-2026 Reunico LLC.
- Cabinee is proprietary software. All rights reserved. */
Do not apply to third-party code.
6. Disclaimer
This document is informational and is not legal advice.