Licences
Read from composer.lock and package-lock.json when this page was served. Those files last changed on 29 July 2026.
Two different things are listed on this page, and mixing them up is the usual mistake. The first is the monitoring engine we publish, which you are free to take. The second is the set of libraries the hosted service runs on, which we did not write and whose authors are owed a mention.
1. The UptimeEZ engine, MIT licensed
The engine that runs the checks is published under the MIT licence at github.com/coeurduweb/uptimeez. You may use it, modify it, redistribute it and sell it, commercially included, on one condition: the notice below travels with it.
MIT License
Copyright (c) 2026 Laurent, Cœur du Web
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
The engine itself has no third party code in it. There is no composer.json in its repository and no vendor directory: nothing to install, nothing to audit, nobody else to credit. That was a design constraint rather than an accident, because the engine has to run on the shared hosting the sites it watches already live on. It is also the reason this section is four paragraphs long and the next one is two hundred names.
2. What the hosted service runs on
The site you are reading, the customer accounts, the billing and the back office are a Laravel application. It is not the engine, it is not MIT, and it is not published. It does stand on 202 third party libraries: 192 PHP packages that run on the server, and 10 JavaScript packages whose code is sent to your browser. Build tools and test tools are deliberately left out, because their code never reaches you.
| Licence | Packages | What it asks of us |
|---|---|---|
| MIT | 179 | Keep the copyright notice with any copy. |
| BSD-3-Clause | 8 | Keep the notice, and do not use the authors name to endorse anything. |
| Apache-2.0 | 4 | Keep the notice, state your changes, and a patent grant comes with it. |
| BSD-3-Clause or GPL-2.0-only or GPL-3.0-only | 3 | Either one, at our choice. We rely on the BSD terms. |
| BSD-2-Clause | 2 | Keep the copyright notice with any copy. |
| LGPL-2.1-or-later | 2 | Weak copyleft: changes to the library itself would have to be published. |
| GPL-3.0-only | 1 | Copyleft. Distributing a modified copy would mean publishing it. |
| LGPL-2.1 | 1 | Weak copyleft: changes to the library itself would have to be published. |
| LGPL-3.0-or-later | 1 | Weak copyleft: changes to the library itself would have to be published. |
| MIT or Apache-2.0 | 1 | Either one, at our choice. Keep the notice in both cases. |
No package under a network copyleft licence, checked against both lock files as this page was served. That family is the one that matters for a hosted service: it would require publishing the source of the whole application, and this page would say so rather than let anyone find out later.
3. Every package, by licence
The full list, folded so it does not bury the rest of the page. Each name links to its public record, where the licence we state can be checked against the one its author declares.
6 of the packages below are named by their library only, without the publisher segment of their identifier, because we do not print another product name on our own pages. Nothing is left out of the counts above: they are still counted, still classed under their licence, still shown with their version, and their link is a search on that name rather than a package page. Their full identifiers are in composer.lock inside the deployed build, next to each licence text in the vendor directory, which is where a licence requires the notice to travel.
PHP packages, on our server (192)
MIT (170)
- barryvdh/laravel-dompdf v3.1.2
- blade-ui-kit/blade-heroicons 2.7.0
- blade-ui-kit/blade-icons 1.10.0
- brick/math 0.14.8
- carbonphp/carbon-doctrine-types 2.1.0
- chillerlan/php-settings-container 3.3.0
- chrome-php/chrome v1.15.0
- chrome-php/wrench v1.8.0
- composer/semver 3.4.4
- danharrin/date-format-converter v0.3.1
- danharrin/livewire-rate-limiting v2.2.0
- dflydev/dot-access-data v3.0.3
- doctrine/deprecations 1.1.6
- doctrine/inflector 2.1.0
- doctrine/lexer 3.0.1
- dragonmantank/cron-expression v3.6.0
- egulias/email-validator 4.0.4
- evenement/evenement v3.0.2
- filament-country-field 1.2.0
- filament/actions v5.6.7
- filament/filament v5.6.7
- filament/forms v5.6.7
- filament/infolists v5.6.7
- filament/notifications v5.6.7
- filament/query-builder v5.6.7
- filament/schemas v5.6.7
- filament/spatie-laravel-media-library-plugin v5.6.7
- filament/support v5.6.7
- filament/tables v5.6.7
- filament/widgets v5.6.7
- fruitcake/php-cors v1.4.0
- graham-campbell/result-type v1.1.4
- guzzlehttp/guzzle 7.15.2
- guzzlehttp/promises 2.5.1
- guzzlehttp/psr7 2.13.0
- guzzlehttp/uri-template v1.0.7
- intervention/gif 4.2.4
- intervention/image 3.11.8
- jeffgreco13/filament-breezy v3.2.5
- kirschbaum-development/eloquent-power-joins 4.3.2
- laragear/meta v5.2.0
- laragear/meta-model v3.0.0
- laragear/two-factor v4.0.0
- laravel-money 1.1.0
- laravel-open-graphy 1.3.0
- laravel-recaptcha 1.1.1
- laravel/framework v13.16.1
- laravel/horizon v5.47.2
- laravel/prompts v0.3.18
- laravel/sanctum v4.3.2
- laravel/sentinel v1.1.0
- laravel/serializable-closure v2.0.13
- laravel/socialite v5.28.0
- laravel/tinker v3.0.2
- laravel/ui v4.6.3
- league/csv 9.28.0
- league/flysystem 3.34.0
- league/flysystem-local 3.31.0
- league/mime-type-detection 1.16.0
- league/oauth1-client v1.11.0
- league/uri 7.8.1
- league/uri-components 7.8.1
- league/uri-interfaces 7.8.1
- livewire/livewire v4.3.1
- maennchen/zipstream-php 3.2.2
- masterminds/html5 2.10.1
- mobiledetect/mobiledetectlib 4.11.0
- moneyphp/money v4.9.0
- monolog/monolog 3.10.0
- mpociot/versionable 4.4.8
- mtdowling/jmespath.php 2.9.1
- nesbot/carbon 3.12.3
- nicmart/tree 0.10.1
- nunomaduro/termwind v2.4.0
- openspout/openspout v4.32.0
- paragonie/constant_time_encoding v3.1.3
- paragonie/random_compat v9.99.100
- phpdocumentor/reflection-common 2.2.0
- phpdocumentor/reflection-docblock 6.0.3
- phpdocumentor/type-resolver 2.0.0
- phpseclib/phpseclib 3.0.55
- phpstan/phpdoc-parser 2.3.2
- pragmarx/google2fa v9.0.0
- pragmarx/google2fa-qrcode v4.0.0
- propaganistas/laravel-phone 6.0.3
- psr/clock 1.0.0
- psr/container 2.0.2
- psr/event-dispatcher 1.0.0
- psr/http-client 1.0.3
- psr/http-factory 1.1.0
- psr/http-message 2.0
- psr/log 3.0.2
- psr/simple-cache 3.0.0
- psy/psysh v0.12.23
- purifier 1.0.0
- ralouphie/getallheaders 3.0.3
- ramsey/collection 2.1.1
- ramsey/uuid 4.9.2
- resend/resend-php v0.12.0
- ryangjchandler/blade-capture-directive v1.1.1
- sabberworm/php-css-parser v9.4.0
- spatie/browsershot 5.4.0
- spatie/crawler 8.5.0
- spatie/image 3.9.4
- spatie/image-optimizer 1.8.1
- spatie/invade 2.1.0
- spatie/laravel-cookie-consent 3.5.0
- spatie/laravel-flash 1.10.2
- spatie/laravel-medialibrary 11.23.0
- spatie/laravel-one-time-passwords 1.1.1
- spatie/laravel-package-tools 1.93.1
- spatie/laravel-permission 6.25.0
- spatie/laravel-sitemap 7.4.0
- spatie/laravel-sluggable 3.8.1
- spatie/robots-txt 2.5.4
- spatie/shiki-php 2.4.0
- spatie/temporary-directory 2.3.1
- spomky-labs/cbor-php 3.2.3
- spomky-labs/pki-framework 1.4.2
- stechstudio/filament-impersonate v5.6.0
- stripe/stripe-php v17.6.0
- symfony/clock v8.1.0
- symfony/console v7.4.13
- symfony/css-selector v8.1.0
- symfony/deprecation-contracts v3.7.1
- symfony/dom-crawler v8.1.0
- symfony/error-handler v8.1.0
- symfony/event-dispatcher v8.1.0
- symfony/event-dispatcher-contracts v3.7.0
- symfony/filesystem v8.1.0
- symfony/finder v8.1.0
- symfony/html-sanitizer v8.1.0
- symfony/http-client v7.4.13
- symfony/http-client-contracts v3.7.0
- symfony/http-foundation v7.4.13
- symfony/http-kernel v8.1.0
- symfony/mailer v8.1.0
- symfony/mailgun-mailer v7.4.0
- symfony/mime v8.1.0
- symfony/polyfill-ctype v1.37.0
- symfony/polyfill-intl-grapheme v1.38.1
- symfony/polyfill-intl-idn v1.38.1
- symfony/polyfill-intl-normalizer v1.38.0
- symfony/polyfill-mbstring v1.38.2
- symfony/polyfill-php80 v1.37.0
- symfony/polyfill-php83 v1.38.2
- symfony/polyfill-php84 v1.38.1
- symfony/polyfill-php85 v1.38.1
- symfony/polyfill-php86 v1.38.0
- symfony/polyfill-uuid v1.37.0
- symfony/postmark-mailer v7.4.13
- symfony/process v7.4.13
- symfony/property-access v8.1.0
- symfony/property-info v8.1.0
- symfony/routing v8.1.0
- symfony/serializer v8.1.0
- symfony/service-contracts v3.7.0
- symfony/string v8.1.0
- symfony/translation v8.1.0
- symfony/translation-contracts v3.7.0
- symfony/type-info v8.1.0
- symfony/uid v8.1.0
- symfony/var-dumper v8.1.0
- thecodingmachine/safe v3.4.0
- twilio/sdk 8.11.6
- ueberdosis/tiptap-php 2.1.1
- voku/portable-ascii 2.1.1
- web-auth/cose-lib 4.5.2
- web-auth/webauthn-lib 5.3.5
- webmozart/assert 2.4.1
BSD-3-Clause (7)
- firebase/php-jwt v7.1.0
- league/commonmark 2.8.2
- league/config v1.2.0
- nikic/php-parser v5.7.0
- scrivo/highlight.php v9.18.1.10
- tijsverkoyen/css-to-inline-styles v2.4.0
- vlucas/phpdotenv v5.6.3
Apache-2.0 (4)
- aws/aws-crt-php v1.2.7
- aws/aws-sdk-php 3.384.11
- giggsey/libphonenumber-for-php-lite 9.0.32
- phpoption/phpoption 1.9.5
BSD-3-Clause or GPL-2.0-only or GPL-3.0-only (3)
- nette/php-generator v4.2.2
- nette/schema v1.3.5
- nette/utils v4.1.4
BSD-2-Clause (2)
- bacon/bacon-qr-code v3.1.1
- dasprid/enum 1.0.7
LGPL-2.1-or-later (2)
- dompdf/php-font-lib 1.0.2
- ezyang/htmlpurifier v4.19.0
GPL-3.0-only (1)
- laravel-invoices 1.1.0
LGPL-2.1 (1)
- dompdf/dompdf v3.1.6
LGPL-3.0-or-later (1)
- dompdf/php-svg-lib 1.0.2
MIT or Apache-2.0 (1)
- chillerlan/php-qrcode 5.0.5
JavaScript packages, in your browser (10)
MIT (9)
- @alpinejs/intersect 3.15.12
- @vue/reactivity 3.1.5
- @vue/shared 3.1.5
- alpinejs 3.15.12
- clipboard 2.0.11
- delegate 3.2.0
- good-listener 1.2.2
- select 1.1.2
- tiny-emitter 2.1.0
BSD-3-Clause (1)
- highlight.js 11.11.1
4. Fonts, icons and the rest
The typeface is Poppins, by Indian Type Foundry and Jonny Pinhorn, under the SIL Open Font License 1.1. It is served from our own server rather than from Google Fonts, which is a privacy decision before it is a speed one: a monitoring tool that needs a third party to render its own pages argues against itself. The licence text travels with the files at openfontlicense.org. The logo, the brand name UptimeEZ, the copy and the screenshots on this site are ours and are not covered by any of the licences above.
5. If we got one wrong
This page states what each author declares in their own package metadata, which is the best source available and not an audit. If you are the author of something listed here and the attribution is wrong, write to support@uptimeez.com and it gets fixed at the source, in the file the page reads, rather than patched on the page.
Related: legal notice, terms of service, who builds this.