Software Bill of Materials
The third-party packages in each part of Synadia NATS, from the SPDX SBOM published with its release. Licenses are as the SBOM reports them; "Other" is a license text the scan could not name.
NATS Server v2.15.2
| Package | Version | License |
|---|---|---|
| github.com/antithesishq/antithesis-sdk-go | v0.8.0-default-no-op | MIT |
| github.com/klauspost/compress | v1.20.3 | Apache-2.0, BSD-3-Clause, MIT |
| github.com/minio/highwayhash | v1.0.4 | Apache-2.0 |
| github.com/nats-io/jwt/v2 | v2.8.2 | Apache-2.0 |
| github.com/nats-io/nats-server/v2 | v2.15.2 | Apache-2.0 |
| github.com/nats-io/nkeys | v0.4.16 | Apache-2.0 |
| github.com/nats-io/nuid | v1.0.1 | Apache-2.0 |
| golang.org/x/crypto | v0.58.0 | BSD-3-Clause |
| golang.org/x/sys | v0.49.0 | BSD-3-Clause |
| golang.org/x/time | v0.16.0 | BSD-3-Clause |
| stdlib | go1.27.3 | BSD-3-Clause |