Third-Party Notices — Secretary42
Secretary42 is proprietary software of insight 42 UG (haftungsbeschränkt), but it is built on, and redistributes, third-party open-source software. The proprietary licence for Secretary42 itself does not reduce any rights granted to you under the open-source licences of the components listed below.
This page summarises the most significant components. It is not exhaustive: the authoritative, machine-readable inventory is the CycloneDX SBOM generated for every release. Licence identifiers below are best-effort and are reconciled against the SBOM and each component’s own LICENSE before each release.
Bundled runtime components (redistributed in the installed app)
| Component | Role | Licence | Notes |
|---|---|---|---|
| Electron | Desktop runtime | MIT | Bundles Chromium (BSD-3-Clause + many third-party licences) and Node.js (MIT + others). Electron’s combined notices for Chromium/Node are included. |
| whisper.cpp / ggml | Local speech-to-text engine (whisper-cli/whisper-server binaries) | MIT | Upstream ggml-org/whisper.cpp. Whisper model files are
downloaded at runtime, not bundled; their own licences/notices apply. |
| ffmpeg-static / FFmpeg | Audio decoding/conversion | wrapper MIT · FFmpeg binary: LGPL-2.1+ (GPL if GPL parts enabled) | FFmpeg redistribution carries LGPL/GPL obligations (offer of source / dynamic-linking / build-flag provenance); the bundled binary’s build configuration and notice/source-offer obligations are confirmed before each GA release. |
| better-sqlite3 | Local transcription-history DB | MIT | Embeds SQLite (public domain). Native addon. |
| sherpa-onnx-node | Speaker diarization (feature gated off) | Apache-2.0 | Bundled; includes Apache-2.0 + ONNX/runtime notices. |
| macos-globe-listener | macOS Globe/Fn key listener (Swift helper) | First-party (insight 42 UG) | Uses only Apple system frameworks. |
Renderer / UI libraries (bundled in the JS app)
| Component | Licence |
|---|---|
| React / React-DOM | MIT |
Radix UI (@radix-ui/*) | MIT |
| lucide-react, clsx, class-variance-authority, tailwind-merge, tw-animate-css | MIT / ISC |
| Tailwind CSS (build-time) | MIT |
| tar, unzipper (model download/extract) | ISC / MIT |
| @sentry/electron (opt-in diagnostics only) | MIT |
Build / signing / dev tooling (NOT redistributed in the app)
Vite, Vitest, Rollup, esbuild, ESLint, electron-builder, @electron/notarize,
@electron/osx-sign, TypeScript, and the testing libraries are development/build-time
dependencies and are not shipped in the installed application.
Licence-minter service (server-side, not part of the desktop app)
Its dependency set — primarily ioredis (MIT) and nodemailer (MIT) — is inventoried in the minter’s SBOM and, for the deployed container, the Syft SBOM of its Docker image.