Ninebloomninebloom
Free Assessment
Ninebloom — Open Source & Asset Attribution

Attribution

Last audited 16 September 2026 · See also /license

Ninebloom is proprietary (see /license). The following third-party assets are used under their own licences and trademarks remain with their owners.

1. SDKs & Packages

PackageLicenceNotes
@radix-ui/*, @tanstack/*, tailwindcss, vaul, cmdkMITUI & routing
lucide-react 0.575.0ISCgithub.com/lucide-icons/lucide
simple-icons 16.30.0CC0-1.0Brand SVGs CC0; trademarks retained
thesvg 3.3.6 (client)MITExcel/Sheets/Zoho — brand trademarks
Manrope, Instrument Serif (Google Fonts)OFL-1.1openfontlicense.org
boto3/botocore, cryptography, geoip2, httpx, uvicornApache-2.0 / BSDServer Python
fastapi, supabase, langchain*, openaiMIT
fpdf2, psycopg*LGPL-3.0Unmodified wheels; source via upstream
pyphen (via weasyprint)GPL-2.0SaaS only; no distribution without GPL compliance

Full SBOM in THIRD_PARTY_NOTICES.md — regeneratable via npx license-checker --production + pip-licenses.

2. Images

Owned (proprietary — © Ninebloom)

  • public/ninebloom_logo*.png, ninebloom_logo.png, og-image.jpg, favicon.ico — brand marks.
  • src/assets/ninebloom-hero.jpg (247KB) + ninebloom-cta.jpg (234KB) — commissioned desert editorial, LCP hero + CTA backgrounds (index.tsx:63, etc.).
  • src/assets/avatar-*.jpg ×5 — placeholder, currently unused (blog uses Unsplash).
  • Client: src/assets/images/ninebloom-logo.png (1254×1254) + public/favicon.png — owned; auth-art.jpg — provenance unverified, treat as placeholder (see client/ATTRIBUTION_IMAGES.md). User uploads via data:image/* remain user-owned.

Unsplash — hotlinked (images.unsplash.com) — Unsplash Licence

Permits commercial use, no attribution required; forbidden to replicate Unsplash as compiled collection. Hotlinking allowed but fragile — consider vendoring to public/unsplash/.

Photo IDUsed inURL
1535713875002-d1d0cf377fdepost-11 avatarhttps://images.unsplash.com/photo-1535713875002-d1d0cf377fde
1558494949-ef010cbdcc31post-11 coverhttps://images.unsplash.com/photo-1558494949-ef010cbdcc31
1573497019940-1c28c88b4f3epost-10 avatarhttps://images.unsplash.com/photo-1573497019940-1c28c88b4f3e
1451187580459-43490279c0fapost-10 coverhttps://images.unsplash.com/photo-1451187580459-43490279c0fa
1472099645785-5658abf4ff4epost-9 avatarhttps://images.unsplash.com/photo-1472099645785-5658abf4ff4e
1450133064473-71024230f91bpost-9 coverhttps://images.unsplash.com/photo-1450133064473-71024230f91b
1544005313-94ddf0286df2post-8 avatarhttps://images.unsplash.com/photo-1544005313-94ddf0286df2
1511512578047-dfb367046420post-8 coverhttps://images.unsplash.com/photo-1511512578047-dfb367046420
1573496359142-b8d87734a5a2post-7 avatarhttps://images.unsplash.com/photo-1573496359142-b8d87734a5a2
1497215728101-856f4ea42174post-7 coverhttps://images.unsplash.com/photo-1497215728101-856f4ea42174
1519085360753-af0119f7cbe7post-6 avatarhttps://images.unsplash.com/photo-1519085360753-af0119f7cbe7
1486406146926-c627a92ad1abpost-6 cover + contacthttps://images.unsplash.com/photo-1486406146926-c627a92ad1ab
1494790108377-be9c29b29330post-5 avatarhttps://images.unsplash.com/photo-1494790108377-be9c29b29330
1556742044-3c52d6e88c62post-5 coverhttps://images.unsplash.com/photo-1556742044-3c52d6e88c62
1500648767791-00dcc994a43epost-4 avatarhttps://images.unsplash.com/photo-1500648767791-00dcc994a43e
1522071820081-009f0129c71cpost-4 cover + about/contact/startupshttps://images.unsplash.com/photo-1522071820081-009f0129c71c
1507003211169-0a1dd7228f2dpost-3 avatarhttps://images.unsplash.com/photo-1507003211169-0a1dd7228f2d
1559526324-4b87b5e36e44post-3 coverhttps://images.unsplash.com/photo-1559526324-4b87b5e36e44
1594824813590-48220c384e9cpost-2 avatarhttps://images.unsplash.com/photo-1594824813590-48220c384e9c
1519494026892-80bbd2d6fd0dpost-2 coverhttps://images.unsplash.com/photo-1519494026892-80bbd2d6fd0d
1534528741775-53994a69daebpost-1 avatarhttps://images.unsplash.com/photo-1534528741775-53994a69daeb
1509062522246-3755977927d7post-1 coverhttps://images.unsplash.com/photo-1509062522246-3755977927d7
1517245386807-bb43f82c33c4about + how-it-workshttps://images.unsplash.com/photo-1517245386807-bb43f82c33c4
1509316975850-ff9c5deb0cd9dpdp-act herohttps://images.unsplash.com/photo-1509316975850-ff9c5deb0cd9
1503676260728-1c00da094a0beducation herohttps://images.unsplash.com/photo-1503676260728-1c00da094a0b
1524178232363-1fb2b075b655education testimonialhttps://images.unsplash.com/photo-1524178232363-1fb2b075b655
1576091160550-2173dba999efhealthcare herohttps://images.unsplash.com/photo-1576091160550-2173dba999ef
1559757148-5c350d0d3c56healthcare featurehttps://images.unsplash.com/photo-1559757148-5c350d0d3c56

Master file: landing/ATTRIBUTION_IMAGES.md. No Pexels/Pixabay/Getty usage.

3. Icons & Trademarks

Generic UI — lucide-react (ISC)

~45 icons (ArrowRight, Shield, Clock, etc.) tree-shaken — not trademarks.

ISC licence

Brand — simple-icons (CC0) + thesvg (MIT)

Landing marquees: Notion, GitHub, Linear, Gmail, Figma, Zoom, Asana, Trello, HubSpot, Jira, Dropbox, Stripe, etc. via simple-icons CC0. Client integrations: Excel/Sheets/Zoho via thesvg MIT. Trademark rights remain with brand owners — nominative use only, no endorsement. See TRADEMARK_NOTICE.md.

4. Fonts

FontLicenceUsage
Manrope 400-800OFL-1.1Landing — fonts.googleapis.com/css2?family=Manrope — specimen
Instrument SerifOFL-1.1Landing headings — googleapis — specimen
System stackOSClient — ui-sans-serif, system-ui… — no webfont
Helvetica (PDF core)AFM / PDF specServer PDFs — fpdf2 core + WeasyPrint system fallback

CSP: font-src 'self' data: https://fonts.gstatic.com (landing) / font-src 'self' data: (client). Details in ATTRIBUTION_FONTS.md.

5. Raw files & regeneration

  • /LICENSE — proprietary
  • /THIRD_PARTY_NOTICES.md — full SBOM (also at client/, server/)
  • public/_headers CSP: img-src 'self' data: blob: https://images.unsplash.com — hotlinks allow-listed
  • Regenerate: node scripts/generate-attribution.mjs (license-checker) / pip-licenses (server) → ATTRIBUTION.auto.md

View Licence → · Terms · Privacy

Licence·Terms·Privacy·Contact