Built on other people's good work.

Nearly everything underneath this page is open source — the language, the framework, the databases, the container engine, the proxy at the edge. This page names the projects, their licences, and every package the running build actually ships.

The application

What renders the control panel you are reading right now.

PHP logo

PHP

PHP-3.01

The language everything above the sockets is written in.

Symfony logo

Symfony

MIT

The framework — routing, security, forms, the message queues, the scheduler.

Twig logo

Twig

BSD-3-Clause

Every page here, this one included, is a Twig template.

Doctrine logo

Doctrine

MIT

The ORM and migrations — every entity, every schema change since day one.

API Platform logo

The JSON-LD API over the same entities the pages render.

Tailwind CSS logo

The utility CSS everything is styled with, built Node-free by the Symfonycasts bundle.

Hotwire logo

Hotwire

MIT

Turbo keeps pages updating in place; behaviours are small Stimulus controllers.

Mercure logo

Mercure

AGPL-3.0

The hub Turbo Streams ride to the browser — deploys narrate themselves live.

The platform underneath

What actually runs the tenant workloads.

Docker · Moby logo

Docker · Moby

Apache-2.0

Every tenant workload is a Swarm service, driven over the Engine API socket.

PostgreSQL logo

PostgreSQL

PostgreSQL

The platform's own database, and a managed engine tenants can bind.

MariaDB logo

MariaDB

GPL-2.0

A managed database engine, run and bound on a tenant's behalf.

MySQL logo

MySQL

GPL-2.0

A managed database engine, run and bound on a tenant's behalf.

Traefik logo

Traefik

MIT

The edge — routes every hostname to whichever container answers for it.

Garage logo

Garage

AGPL-3.0

The S3 object store behind uploaded bundles and the registry's blobs.

Trivy logo

Trivy

Apache-2.0

Scans every image the platform builds or pulls before it runs.

Also in the engine room: BuildKit (Apache-2.0) builds tenant images unprivileged inside the swarm.

The clients

What talks to the platform from the outside.

Go logo

Go

BSD-3-Clause

sc, sc-tray and the Terraform provider are all Go.

Development & testing

Never shipped, but every line here passed through them.

PHPUnit logo

PHPUnit

BSD-3-Clause

The suite that holds the 100% coverage line.

SQLite logo

SQLite

Public Domain

Every test runs against its own throwaway SQLite database.

PHPStan logo

PHPStan

MIT

Static analysis at level 8, no baseline — a finding fails the build.

Playwright logo

Playwright

Apache-2.0

The end-to-end suite, driving a real browser through the panel.

Every publisher in this build

Read from Composer's own install record, so it describes the running build rather than a list someone once wrote — 160 packages from 33 publishers, collapsed by publisher. Development-only tooling is credited above and excluded here, matching what the production image actually carries.

Publisher Licence
altcha-org/altcha MIT
api-platform/* 13 packages MIT
async-aws/* 2 packages MIT
bacon/bacon-qr-code BSD-2-Clause
composer/* 2 packages MIT
dasprid/enum BSD-2-Clause
dflydev/dot-access-data MIT
doctrine/* 14 packages MIT
egulias/email-validator MIT
endroid/qr-code MIT
grey-ooo/brand-kit proprietary
guzzlehttp/* 3 packages MIT
knpuniversity/oauth2-client-bundle MIT
lcobucci/jwt BSD-3-Clause
league/* 10 packages BSD-3-Clause, MIT
mcp/sdk Apache-2.0
nelmio/security-bundle MIT
nette/* 2 packages BSD-3-Clause, GPL-2.0-only, GPL-3.0-only
opis/* 3 packages Apache-2.0
paragonie/constant_time_encoding MIT
php-http/discovery MIT
phpdocumentor/* 3 packages MIT
phpstan/phpdoc-parser MIT
predis/predis MIT
psr/* 11 packages MIT
ralouphie/getallheaders MIT
spomky-labs/otphp MIT
symfony/* 75 packages MIT
symfonycasts/tailwind-bundle MIT
twig/twig BSD-3-Clause
ua-parser/uap-php MIT
webmozart/assert MIT
willdurand/negotiation MIT

Logos and names remain trademarks of their respective projects, shown here to credit them — no endorsement of this platform is implied in either direction. Some marks are drawn from Simple Icons (CC0). Licence names are as each project declares them; the licence texts ship in this build's vendor/ tree alongside the code they cover.