Open-source notices

Split Harbor · web, iOS and Android. Inventory reviewed November 3, 2026.

We thank the authors of the open-source software used by Split Harbor. Their licenses apply to their components; this page does not make KoturStudio’s application code or artwork open source. Versions below describe the reviewed source dependencies and may differ from an installed older beta.

Website, web app and server components

The browser uses PDF.js and QR-code rendering; authentication and server services also use the packages listed below. This includes installed production transitive packages, not just direct dependencies. Development-only build tools are not shipped as app features.

@stablelib/base64 1.0.1 — MIT

Full bundled license / notice

agent-base 7.1.4 — MIT

Full bundled license / notice

ansi-regex 5.0.1 — MIT

Full bundled license / notice

ansi-styles 4.3.0 — MIT

Full bundled license / notice

asn1.js 5.4.1 — MIT

Full bundled license / notice

bn.js 4.12.5 — MIT

Full bundled license / notice

buffer-equal-constant-time 1.0.1 — BSD-3-Clause

Full bundled license / notice

camelcase 5.3.1 — MIT

Full bundled license / notice

cliui 6.0.0 — ISC

Full bundled license / notice

color-convert 2.0.1 — MIT

Full bundled license / notice

color-name 1.1.4 — MIT

Full bundled license / notice

debug 4.4.3 — MIT

Full bundled license / notice

decamelize 1.2.0 — MIT

Full bundled license / notice

dijkstrajs 1.0.3 — MIT

Full bundled license / notice

ecdsa-sig-formatter 1.0.11 — Apache-2.0

Full bundled license / notice

emoji-regex 8.0.0 — MIT

Full bundled license / notice

fast-sha256 1.3.0 — Unlicense

Full bundled license / notice

find-up 4.1.0 — MIT

Full bundled license / notice

get-caller-file 2.0.5 — ISC

Full bundled license / notice

http_ece 1.2.0 — MIT

Full upstream license / notice

https-proxy-agent 7.0.6 — MIT

Full bundled license / notice

inherits 2.0.4 — ISC

Full bundled license / notice

is-fullwidth-code-point 3.0.0 — MIT

Full bundled license / notice

jose 6.2.12 — MIT

Full bundled license / notice

jwa 2.0.1 — MIT

Full bundled license / notice

jws 4.0.1 — MIT

Full bundled license / notice

locate-path 5.0.0 — MIT

Full bundled license / notice

minimalistic-assert 1.0.1 — ISC

Full bundled license / notice

minimist 1.2.8 — MIT

Full bundled license / notice

ms 2.1.3 — MIT

Full bundled license / notice

p-limit 2.3.0 — MIT

Full bundled license / notice

p-locate 4.1.0 — MIT

Full bundled license / notice

p-try 2.2.0 — MIT

Full bundled license / notice

path-exists 4.0.0 — MIT

Full bundled license / notice

pdfjs-dist 6.4.299 — Apache-2.0

Full bundled license / notice

pngjs 5.0.0 — MIT

Full bundled license / notice

postgres 3.4.9 — Unlicense

Full upstream license / notice

qrcode 1.5.4 — MIT

Full bundled license / notice

require-directory 2.1.1 — MIT

Full bundled license / notice

require-main-filename 2.0.0 — ISC

Full bundled license / notice

safe-buffer 5.2.1 — MIT

Full bundled license / notice

safer-buffer 2.1.2 — MIT

Full bundled license / notice

set-blocking 2.0.0 — ISC

Full bundled license / notice

standardwebhooks 1.0.0 — MIT

Full upstream license / notice

string-width 4.2.3 — MIT

Full bundled license / notice

strip-ansi 6.0.1 — MIT

Full bundled license / notice

web-push 3.6.7 — MPL-2.0

Full bundled license / notice

which-module 2.0.1 — ISC

Full bundled license / notice

wrap-ansi 6.2.0 — MIT

Full bundled license / notice

y18n 4.0.3 — ISC

Full bundled license / notice

yargs 15.4.1 — MIT

Full bundled license / notice

yargs-parser 18.1.3 — ISC

Full bundled license / notice

iOS app

The reviewed shipping Xcode app uses KoturStudio Swift code and Apple system frameworks, including SwiftUI, PDFKit, AuthenticationServices, CryptoKit and LocalAuthentication. No separately bundled third-party Swift package was found in its project configuration. Apple frameworks and system software remain subject to Apple’s applicable notices. Shared hosted services use the server components listed above.

Android app

The inventory also identifies third-party provider SDKs, whose linked terms may not be open-source licenses. The native app uses AndroidX / Jetpack Compose, Kotlin libraries, OkHttp/Okio, Firebase Messaging and PDFium Android. Firebase Messaging is used for optional push notifications; Firebase Analytics is not enabled. The resolved release runtime inventory below includes transitive and metadata/constraint entries; shrinking may remove unused code.

Apache License 2.0 · PDFium Android and PDFium copyright / BSD notices

androidx.activity:activity 1.10.1

The Apache Software License, Version 2.0

androidx.activity:activity-compose 1.10.1

The Apache Software License, Version 2.0

androidx.activity:activity-ktx 1.10.1

The Apache Software License, Version 2.0

androidx.annotation:annotation 1.9.1

The Apache Software License, Version 2.0

androidx.annotation:annotation-experimental 1.4.1

The Apache Software License, Version 2.0

androidx.annotation:annotation-jvm 1.9.1

The Apache Software License, Version 2.0

androidx.appcompat:appcompat 1.2.0

The Apache Software License, Version 2.0

androidx.appcompat:appcompat-resources 1.2.0

The Apache Software License, Version 2.0

androidx.arch.core:core-common 2.2.0

The Apache Software License, Version 2.0

androidx.arch.core:core-runtime 2.2.0

The Apache Software License, Version 2.0

androidx.autofill:autofill 1.0.0

The Apache Software License, Version 2.0

androidx.biometric:biometric 1.1.0

The Apache Software License, Version 2.0

androidx.browser:browser 1.8.0

The Apache Software License, Version 2.0

androidx.collection:collection 1.5.0

The Apache Software License, Version 2.0

androidx.collection:collection-jvm 1.5.0

The Apache Software License, Version 2.0

androidx.collection:collection-ktx 1.5.0

The Apache Software License, Version 2.0

androidx.compose:compose-bom 2025.04.01

The Apache Software License, Version 2.0

androidx.compose.animation:animation 1.8.0

The Apache Software License, Version 2.0

androidx.compose.animation:animation-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.animation:animation-core 1.8.0

The Apache Software License, Version 2.0

androidx.compose.animation:animation-core-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.foundation:foundation 1.8.0

The Apache Software License, Version 2.0

androidx.compose.foundation:foundation-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.foundation:foundation-layout 1.8.0

The Apache Software License, Version 2.0

androidx.compose.foundation:foundation-layout-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.material:material-icons-core 1.7.8

The Apache Software License, Version 2.0

androidx.compose.material:material-icons-core-android 1.7.8

The Apache Software License, Version 2.0

androidx.compose.material:material-ripple 1.8.0

The Apache Software License, Version 2.0

androidx.compose.material:material-ripple-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.material3:material3 1.3.2

The Apache Software License, Version 2.0

androidx.compose.material3:material3-android 1.3.2

The Apache Software License, Version 2.0

androidx.compose.runtime:runtime 1.8.0

The Apache Software License, Version 2.0

androidx.compose.runtime:runtime-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.runtime:runtime-saveable 1.8.0

The Apache Software License, Version 2.0

androidx.compose.runtime:runtime-saveable-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-geometry 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-geometry-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-graphics 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-graphics-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-text 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-text-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-tooling-preview 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-tooling-preview-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-unit 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-unit-android 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-util 1.8.0

The Apache Software License, Version 2.0

androidx.compose.ui:ui-util-android 1.8.0

The Apache Software License, Version 2.0

androidx.concurrent:concurrent-futures 1.1.0

The Apache Software License, Version 2.0

androidx.core:core 1.13.1

The Apache Software License, Version 2.0

androidx.core:core-ktx 1.13.1

The Apache Software License, Version 2.0

androidx.core:core-viewtree 1.0.0

The Apache Software License, Version 2.0

androidx.cursoradapter:cursoradapter 1.0.0

The Apache Software License, Version 2.0

androidx.customview:customview 1.0.0

The Apache Software License, Version 2.0

androidx.customview:customview-poolingcontainer 1.0.0

The Apache Software License, Version 2.0

androidx.documentfile:documentfile 1.0.0

The Apache Software License, Version 2.0

androidx.drawerlayout:drawerlayout 1.0.0

The Apache Software License, Version 2.0

androidx.emoji2:emoji2 1.4.0

The Apache Software License, Version 2.0

androidx.fragment:fragment 1.8.6

The Apache Software License, Version 2.0

androidx.fragment:fragment-ktx 1.8.6

The Apache Software License, Version 2.0

androidx.graphics:graphics-path 1.0.1

The Apache Software License, Version 2.0

androidx.interpolator:interpolator 1.0.0

The Apache Software License, Version 2.0

androidx.legacy:legacy-support-core-utils 1.0.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-common 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-common-java8 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-common-jvm 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-livedata 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-livedata-core 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-livedata-core-ktx 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-process 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-runtime 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-runtime-android 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-runtime-compose 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-runtime-compose-android 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-runtime-ktx 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-runtime-ktx-android 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel-android 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel-compose 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel-compose-android 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel-ktx 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel-savedstate 2.9.0

The Apache Software License, Version 2.0

androidx.lifecycle:lifecycle-viewmodel-savedstate-android 2.9.0

The Apache Software License, Version 2.0

androidx.loader:loader 1.0.0

The Apache Software License, Version 2.0

androidx.localbroadcastmanager:localbroadcastmanager 1.0.0

The Apache Software License, Version 2.0

androidx.print:print 1.0.0

The Apache Software License, Version 2.0

androidx.profileinstaller:profileinstaller 1.4.0

The Apache Software License, Version 2.0

androidx.savedstate:savedstate 1.3.0

The Apache Software License, Version 2.0

androidx.savedstate:savedstate-android 1.3.0

The Apache Software License, Version 2.0

androidx.savedstate:savedstate-ktx 1.3.0

The Apache Software License, Version 2.0

androidx.startup:startup-runtime 1.1.1

The Apache Software License, Version 2.0

androidx.tracing:tracing 1.0.0

The Apache Software License, Version 2.0

androidx.vectordrawable:vectordrawable 1.1.0

The Apache Software License, Version 2.0

androidx.vectordrawable:vectordrawable-animated 1.1.0

The Apache Software License, Version 2.0

androidx.versionedparcelable:versionedparcelable 1.1.1

The Apache Software License, Version 2.0

androidx.viewpager:viewpager 1.0.0

The Apache Software License, Version 2.0

androidx.webkit:webkit 1.14.0

The Apache Software License, Version 2.0

com.google.android.datatransport:transport-api 3.1.0

The Apache Software License, Version 2.0

com.google.android.datatransport:transport-backend-cct 3.1.9

The Apache Software License, Version 2.0

com.google.android.datatransport:transport-runtime 3.1.9

The Apache Software License, Version 2.0

com.google.android.gms:play-services-base 18.1.0

Android Software Development Kit License

com.google.android.gms:play-services-basement 18.3.0

Android Software Development Kit License

com.google.android.gms:play-services-cloud-messaging 17.2.0

Android Software Development Kit License

com.google.android.gms:play-services-stats 17.0.2

Android Software Development Kit License

com.google.android.gms:play-services-tasks 18.1.0

Android Software Development Kit License

com.google.errorprone:error_prone_annotations 2.47.0

Apache 2.0

com.google.firebase:firebase-annotations 16.2.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-common 21.0.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-common-ktx 21.0.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-components 18.0.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-datatransport 18.2.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-encoders 17.0.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-encoders-json 18.0.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-encoders-proto 16.0.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-iid-interop 17.1.0

Android Software Development Kit License

com.google.firebase:firebase-installations 17.2.0

The Apache Software License, Version 2.0

com.google.firebase:firebase-installations-interop 17.1.1

The Apache Software License, Version 2.0

com.google.firebase:firebase-measurement-connector 19.0.0

Android Software Development Kit License

com.google.firebase:firebase-messaging 24.1.1

The Apache Software License, Version 2.0

com.google.guava:failureaccess 1.0.3

Apache License 2.0 (inherited upstream license)

com.google.guava:guava 33.6.0-android

Apache License 2.0 (inherited upstream license)

com.google.guava:listenablefuture 9999.0-empty-to-avoid-conflict-with-guava

Apache License 2.0 (inherited upstream license)

com.google.j2objc:j2objc-annotations 3.1

Apache License, Version 2.0

com.squareup.okhttp3:okhttp 4.12.0

The Apache Software License, Version 2.0

com.squareup.okio:okio 3.6.0

The Apache Software License, Version 2.0

com.squareup.okio:okio-jvm 3.6.0

The Apache Software License, Version 2.0

io.legere:pdfiumandroid 2.0.3

Apache License, Version 2.0 · The Apache Software License, Version 2.0

io.legere:pdfiumandroid-api 2.0.3

Apache License, Version 2.0 · The Apache Software License, Version 2.0

io.legere:pdfiumandroid-core 2.0.3

Apache License, Version 2.0 · The Apache Software License, Version 2.0

javax.inject:javax.inject 1

Apache License 2.0 (inherited upstream license)

org.jetbrains:annotations 23.0.0

The Apache Software License, Version 2.0

org.jetbrains.kotlin:kotlin-stdlib 2.4.10

Apache-2.0

org.jetbrains.kotlin:kotlin-stdlib-common 2.4.10

Apache-2.0

org.jetbrains.kotlin:kotlin-stdlib-jdk7 1.9.10

The Apache License, Version 2.0

org.jetbrains.kotlin:kotlin-stdlib-jdk8 1.9.10

The Apache License, Version 2.0

org.jetbrains.kotlinx:kotlinx-coroutines-android 1.10.2

Apache-2.0

org.jetbrains.kotlinx:kotlinx-coroutines-bom 1.10.2

Apache-2.0

org.jetbrains.kotlinx:kotlinx-coroutines-core 1.10.2

Apache-2.0

org.jetbrains.kotlinx:kotlinx-coroutines-core-jvm 1.10.2

Apache-2.0

org.jetbrains.kotlinx:kotlinx-coroutines-play-services 1.10.2

Apache-2.0

org.jetbrains.kotlinx:kotlinx-serialization-bom 1.8.1

Apache-2.0

org.jetbrains.kotlinx:kotlinx-serialization-core 1.8.1

Apache-2.0

org.jetbrains.kotlinx:kotlinx-serialization-core-jvm 1.8.1

Apache-2.0

org.jetbrains.kotlinx:kotlinx-serialization-json 1.8.1

Apache-2.0

org.jetbrains.kotlinx:kotlinx-serialization-json-jvm 1.8.1

Apache-2.0

org.jspecify:jspecify 1.0.0

The Apache License, Version 2.0

Questions or corrections

Contact support@koturstudio.com with the app version and component name. Bundled notices remain available in Android’s Privacy and data screen.