{"corpus":"Blockchain Lab Constructor","licence":null,"note":"Registry metadata only. Not source code, not an SBOM, and not permission to reuse the repositories. E6–E10 are refused.","count":27,"demo_export_available":false,"components":[{"slug":"openzeppelin-contracts","name":"OpenZeppelin Contracts","category":"Smart-contract libraries","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/OpenZeppelin/openzeppelin-contracts","obligation":"Keep the copyright and permission notice with any substantial copy.","source_code":null,"commit":null},{"slug":"viem","name":"viem","category":"Wallets and chain clients","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/wevm/viem","obligation":"Keep the MIT notice.","source_code":null,"commit":null},{"slug":"wagmi","name":"wagmi","category":"Frontend wallets and transaction UX","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/wevm/wagmi","obligation":"Keep the MIT notice.","source_code":null,"commit":null},{"slug":"ethers","name":"ethers.js","category":"Wallets and chain clients","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/ethers-io/ethers.js","obligation":"Keep the MIT notice.","source_code":null,"commit":null},{"slug":"foundry","name":"Foundry","category":"Security and testing","spdx":"Apache-2.0 and MIT files both present","license_spdx":null,"tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/foundry-rs/foundry","obligation":"Keep the Apache and MIT notices that apply to the files you use.","source_code":null,"commit":null},{"slug":"scaffold-eth-2","name":"Scaffold-ETH 2","category":"Developer templates","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/scaffold-eth/scaffold-eth-2","obligation":"Keep the MIT notice. Treat the starter as a prototype, not a control framework.","source_code":null,"commit":null},{"slug":"ponder","name":"Ponder","category":"Indexing and data","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/ponder-sh/ponder","obligation":"Keep the MIT notice.","source_code":null,"commit":null},{"slug":"alloy","name":"Alloy","category":"Wallets and chain clients","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/alloy-rs/alloy","obligation":"Keep the Apache notice. Apache-2.0 also includes a patent grant and a NOTICE duty.","source_code":null,"commit":null},{"slug":"reth","name":"Reth","category":"Nodes and consensus","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/paradigmxyz/reth","obligation":"Keep the Apache notice if you distribute the client or a modification.","source_code":null,"commit":null},{"slug":"lighthouse","name":"Lighthouse","category":"Nodes and consensus","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/sigp/lighthouse","obligation":"Keep the Apache notice if you distribute it.","source_code":null,"commit":null},{"slug":"bitcoin-core","name":"Bitcoin Core","category":"Nodes and consensus","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/bitcoin/bitcoin","obligation":"Keep the MIT notice if you distribute the software.","source_code":null,"commit":null},{"slug":"go-ethereum","name":"Go Ethereum (geth)","category":"Nodes and consensus","spdx":"LGPL-3.0","license_spdx":"LGPL-3.0","tier":"amber","source_class":"S3","reuse":"Research available. Review required.","confidence":"high","url":"https://github.com/ethereum/go-ethereum","obligation":"Do not copy geth into a proprietary distribution until counsel has read the LGPL terms.","source_code":null,"commit":null},{"slug":"safe-smart-account","name":"Safe Smart Account","category":"Custody and multisig","spdx":"LGPL-3.0","license_spdx":"LGPL-3.0","tier":"amber","source_class":"S3","reuse":"Research available. Review required.","confidence":"high","url":"https://github.com/safe-fndn/safe-smart-account","obligation":"Legal review before the contracts or modifications are distributed under a proprietary licence.","source_code":null,"commit":null},{"slug":"chainlink-evm","name":"Chainlink EVM contracts","category":"Oracles and attestation","spdx":"Mixed — portions, not a single SPDX grant","license_spdx":null,"tier":"amber","source_class":"S3","reuse":"Research available. Review required.","confidence":"medium","url":"https://github.com/smartcontractkit/chainlink-evm","obligation":"Identify the licence of the specific files you use. Do not ingest the repository as if it were one MIT grant.","source_code":null,"commit":null},{"slug":"account-abstraction","name":"ERC-4337 contracts (eth-infinitism)","category":"Smart-contract libraries","spdx":"GPL-3.0","license_spdx":"GPL-3.0","tier":"red","source_class":"S1","reuse":"Reference only. Source export blocked.","confidence":"high","url":"https://github.com/eth-infinitism/account-abstraction","obligation":"Reference only, unless counsel accepts the GPL consequences for the whole work.","source_code":null,"commit":null},{"slug":"walletconnect","name":"WalletConnect monorepo","category":"Frontend wallets and transaction UX","spdx":"Custom — WalletConnect Community License Agreement","license_spdx":null,"tier":"red","source_class":"S1","reuse":"Reference only. Source export blocked.","confidence":"high","url":"https://github.com/WalletConnect/walletconnect-monorepo","obligation":"Do not copy. If you need wallet linking, read that agreement or pick a different stack.","source_code":null,"commit":null},{"slug":"hardhat","name":"Hardhat","category":"Security and testing","spdx":"NOASSERTION","license_spdx":null,"tier":"grey","source_class":"S1","reuse":"Reference only. Licence unconfirmed.","confidence":"high","url":"https://github.com/NomicFoundation/hardhat","obligation":"Do not reuse code from this repository until the package you want has a licence you have read.","source_code":null,"commit":null},{"slug":"cosmos-sdk","name":"Cosmos SDK","category":"Nodes and consensus","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/cosmos/cosmos-sdk","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"cometbft","name":"CometBFT","category":"Nodes and consensus","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/cometbft/cometbft","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"hyperledger-fabric","name":"Hyperledger Fabric","category":"Permissioned networks","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/hyperledger/fabric","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"rafiki","name":"Rafiki","category":"Payments","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/interledger/rafiki","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"graph-node","name":"Graph Node","category":"Indexing and data","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/graphprotocol/graph-node","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"go-libp2p","name":"go-libp2p","category":"Networking","spdx":"MIT","license_spdx":"MIT","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/libp2p/go-libp2p","obligation":"Keep the MIT notice.","source_code":null,"commit":null},{"slug":"kubo","name":"Kubo (IPFS)","category":"Storage","spdx":"MIT OR Apache-2.0, with a pre-2019 caveat","license_spdx":null,"tier":"amber","source_class":"S3","reuse":"Research available. Review required.","confidence":"medium","url":"https://github.com/ipfs/kubo","obligation":"Read the LICENSE before copying a file. Public IPFS is not access control.","source_code":null,"commit":null},{"slug":"spruce-ssi","name":"Spruce SSI","category":"Identity and credentials","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/spruceid/ssi","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"waltid","name":"walt.id Identity","category":"Identity and credentials","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"green","source_class":"S3","reuse":"Research available. Reuse pending.","confidence":"high","url":"https://github.com/walt-id/waltid-identity","obligation":"Keep the Apache notice.","source_code":null,"commit":null},{"slug":"anchor","name":"Anchor","category":"Smart-contract libraries","spdx":"Apache-2.0","license_spdx":"Apache-2.0","tier":"amber","source_class":"S3","reuse":"Research available. Review required.","confidence":"medium","url":"https://github.com/otter-sec/anchor","obligation":"Keep the Apache notice, and confirm maintainer continuity.","source_code":null,"commit":null}]}