License
Relevant source files
The following files were used as context for generating this wiki page:
The Quant project is an open-source tool provided under the Apache 2.0 License. This is a permissive license that grants users a broad set of rights for using, modifying, and distributing the software. The choice of this license reflects the project's goal to make vulnerability assessment accessible to everyone, including for commercial use.
All contributions to the project are also governed by the Apache 2.0 License, ensuring the software remains open and freely available. The project's source code is transparent and available for security audits.
Sources: README.md:8, README.md:104-113
Core Licensing Terms
The Quant project is licensed under the Apache 2.0 License, as indicated by the license badge in the project's README.md and the "Legal" section of the application's footer. While the full license text is available in the LICENSE.md file in the repository, the key terms are summarized below.
Sources: README.md:8, src/components/Footer.tsx:103-113
Summary of Apache 2.0 License
| Type | Description |
|---|---|
| Permissions | Grants rights for commercial use, distribution, modification, and private use. |
| Conditions | Requires inclusion of the original license and copyright notice. Any modifications to the source files must be stated. |
| Limitations | The license does not grant any rights to trademarks of the project contributors. The software is provided "as is" without warranties, and the authors have limited liability. |
Source: Implied by the selection of "Apache 2.0 License" in README.md:8.
The following diagram illustrates the relationship between the Quant project, its license, and the external specifications it implements.
This diagram shows that the Quant project is licensed under Apache 2.0 and implements the official CVSS specifications from FIRST.org.
Sources: README.md:8, src/lib/cvss/v4/scoring.ts:8, src/lib/cvss/v3/scoring.ts:8, src/lib/cvss/v2/scoring.ts:8
Copyright and Acknowledgments
The copyright for the Quant project is held by Cyberpath. This is explicitly stated in the application's footer.
Sources: src/components/Footer.tsx:122-124
// src/components/Footer.tsx:123
<p>© {currentYear} Cyberpath. Built with ❤️ to make vulnerability assessment accessible to everyone.</p>
The project's scoring engines are implementations of the official Common Vulnerability Scoring System (CVSS) specifications published by FIRST.org. The source code files for each CVSS version acknowledge this by referencing the official specification documents.
Sources: src/lib/cvss/v4/scoring.ts:8, src/lib/cvss/v3/scoring.ts:8, src/lib/cvss/v2/scoring.ts:8
License in the User Interface
The project's license is accessible to end-users through the application's footer. A link in the "Legal" section directs users to the LICENSE file in the main branch of the GitHub repository.
The following diagram shows how a user can find the license information from the main application interface.
This diagram illustrates the user flow to access the license file from the application's UI.
Sources: src/components/Footer.tsx:101-114
The code snippet below from the Footer.tsx component implements this link.
// src/components/Footer.tsx:102-114
<div className="space-y-3">
<h3 className="text-sm font-semibold">Legal</h3>
<ul className="space-y-2 text-sm">
<li>
<a
href={
`https://github.com/cyberpath-HQ/Quant/blob/HEAD/LICENSE?${new URLSearchParams(UTM_PARAMS).toString()}`
}
target="_blank"
rel="noopener noreferrer"
className="text-muted-foreground hover:text-primary transition-colors"
>
Apache 2.0 License
</a>
</li>
{/* ... other legal links */}
</ul>
</div>
Developer and Contributor Implications
As an open-source project, Quant welcomes contributions from the cybersecurity community. All contributions are subject to the project's Apache 2.0 License. Developers wishing to contribute should consult the contribution guidelines.
Sources: README.md:104-113
Summary
The Quant project is licensed under the permissive Apache 2.0 License, which aligns with its mission to provide an accessible and transparent tool for vulnerability assessment. The license allows for wide adoption and community contribution, with clear copyright attribution to Cyberpath and acknowledgment of the foundational CVSS specifications from FIRST.org.
Sources: README.md, src/components/Footer.tsx