Legal notice

Attributions and licenses

UltiSuite and all of its web apps (Ultimail, UltiDrive, UltiDocs, UltiCal, UltiMeet, Contacts, UltiAI, administration, account) are original creations by Eliott Guillaumin, protected by his copyright. All rights reserved.

Last updated: 29 June 2026 npm list generated on 2026-06-24.

GPL / AGPL: use without propagation

UltiSuite, Ultimail, UltiDrive, UltiDocs, UltiCal, UltiMeet, Contacts, UltiAI and associated web interfaces are original creations developed by Eliott Guillaumin. Their proprietary source code does not incorporate code from the services listed below.

Components under GNU (GPL) or Affero (AGPL) licenses run as separate programs: distinct containers, processes or network services. UltiSuite interacts with them only via standard protocols (HTTP, OIDC, IMAP, SMTP, WebDAV, etc.), without statically linking or embedding them in the proprietary frontend or backend.

This independent-services architecture matches the usage model described by the Free Software Foundation for separate programs: copyleft applies to each concerned program and its modifications, but does not extend to other suite applications that merely form combined use within the meaning of GPL/AGPL.

Frontend npm libraries remain under their own licenses (MIT, Apache-2.0, BSD, ISC, or LGPL). OpenPGP.js (LGPL-3.0) is served separately as a replaceable file and is not merged into the bundle. That does not turn UltiSuite into a derivative work of separately run AGPL services.

Services and integrations

Components deployed on this UltiSuite instance. Optional modules appear only when enabled.

Authentik

MIT

Identity provider (SSO/OIDC) for UltiSuite user authentication. Distinct containerized service, configured and operated separately from UltiSuite application code.

License: MIT

Rspamd

Apache-2.0

Antispam HTTP worker for the native mail edge. Filters inbound SMTP before ultid persists messages.

License: Apache-2.0

Jitsi Meet

Apache-2.0optional

Optional video conferencing via Jitsi components when the Jitsi module is enabled (UltiMeet can rely on this stack).

License: Apache-2.0

npm libraries under copyleft or dual license

OpenPGP.js (LGPL-3.0-or-later)

OpenPGP encryption for messages to external correspondents. Unmodified upstream file, served outside the application bundle.

Replaceable module at /lgpl/openpgp/openpgp.min.mjs. An interface-compatible build can replace that file without rebuilding UltiSuite. Source for this version is OpenPGP.js (see NOTICE.txt next to the file).

JSZip ((MIT OR GPL-3.0-or-later))

Client-side ZIP file manipulation (export/import). Used under the MIT option of the dual license.

JavaScript library dynamically linked in the frontend bundle; MIT license chosen, without making UltiSuite a GPL derivative work.

sharp / libvips (build) (LGPL-3.0-or-later)

Build-time image processing (icon and asset generation). Precompiled native binary, unmodified.

LGPL-compliant usage via dynamic linking of an unmodified library; does not impose GPL/LGPL on UltiSuite TypeScript/React code.

npm libraries (attribution required)

List automatically generated from frontend npm dependencies: direct dependencies (including MIT) and transitive dependencies whose license requires an attribution notice (Apache, BSD, ISC, copyleft, etc.). Regenerate with pnpm run attributions:generate.

(MIT AND Zlib)

(MIT OR GPL-3.0-or-later)

  • jszip— Stuart Knightley

(MPL-2.0 OR Apache-2.0)

  • dompurify— Dr.-Ing. Mario Heiderich, Cure53

0BSD

Apache-2.0

BSD

  • duck— Michael Williamson

BSD-2-Clause

BSD-3-Clause

CC-BY-NC-SA-4.0

CC0-1.0

ISC

LGPL-3.0-or-later

MIT

MIT AND ISC

Unlicense