# Third-party licences — NFC Crypto Kit 1.0.0

The kit's own code is the author's work, licensed to you under the Envato licence you bought. It uses the open-source packages below; each keeps its own licence. The full licence text of each Dart package is in its folder in your pub cache after `flutter pub get` (`~/.pub-cache/hosted/pub.dev/<package>-<version>/`), and of each Python package in `apps/card_studio/.venv` after the first start.

Direct dependencies only, with the versions resolved in each app's `pubspec.lock`. Their own dependencies are listed in the same lock files.

## NFC Crypto (apps/nfc_crypto)

| Package | Version | Licence |
|---|---|---|
| Flutter SDK, Dart SDK | 3.41 / 3.11 | BSD-3-Clause |
| bip32 | 2.0.0 | MIT |
| bip39 | 1.0.6 | BSD-3-Clause |
| bs58 | 1.0.2 | MIT |
| cached_network_image | 3.4.1 | MIT |
| connectivity_plus | 6.1.5 | BSD-3-Clause |
| crypto | 3.0.7 | BSD-3-Clause |
| device_info_plus | 10.1.2 | BSD-3-Clause |
| dio | 5.9.2 | MIT |
| ed25519_edwards | 0.3.1 | Apache-2.0 |
| encrypt | 5.0.3 | BSD-3-Clause |
| eth_sig_util | 0.0.9 | MIT |
| fl_chart | 0.69.2 | MIT |
| flutter_secure_storage | 10.0.0 | BSD-3-Clause |
| flutter_svg | 2.2.4 | MIT |
| flutter_zxing | 2.3.0 | MIT |
| google_fonts | 6.3.3 | BSD-3-Clause |
| hex | 0.2.0 | MIT |
| http | 1.6.0 | BSD-3-Clause |
| intl | 0.20.2 | BSD-3-Clause |
| local_auth | 3.0.1 | BSD-3-Clause |
| path_provider | 2.1.5 | BSD-3-Clause |
| pointycastle | 3.9.1 | MIT |
| provider | 6.1.5+1 | MIT |
| qr_flutter | 4.1.0 | BSD-3-Clause |
| reown_walletkit | 1.2.0 | Apache-2.0 |
| share_plus | 12.0.1 | BSD-3-Clause |
| shared_preferences | 2.5.4 | BSD-3-Clause |
| shimmer | 3.0.0 | BSD-3-Clause |
| url_launcher | 6.3.2 | BSD-3-Clause |
| wallet | 0.0.13 | MIT |
| web | 1.1.1 | BSD-3-Clause |
| web3dart | 2.7.3 | MIT |

## CryptoCard Wallet (apps/cryptocard_wallet)

| Package | Version | Licence |
|---|---|---|
| Flutter SDK, Dart SDK | 3.41 / 3.11 | BSD-3-Clause |
| bip32 | 2.0.0 | MIT |
| bip39 | 1.0.6 | BSD-3-Clause |
| hex | 0.2.0 | MIT |
| http | 1.6.0 | BSD-3-Clause |
| pinenacl | 0.6.0 | MIT |
| pointycastle | 3.9.1 | MIT |
| qr_flutter | 4.1.0 | BSD-3-Clause |
| shared_preferences | 2.5.6 | BSD-3-Clause |
| url_launcher | 6.3.3 | BSD-3-Clause |
| web3dart | 2.7.3 | MIT |

## NFC Recovery (apps/nfc_recovery)

| Package | Version | Licence |
|---|---|---|
| Flutter SDK, Dart SDK | 3.41 / 3.11 | BSD-3-Clause |
| bip39 | 1.0.6 | BSD-3-Clause |
| cupertino_icons | 1.0.9 | MIT |
| pointycastle | 3.9.1 | MIT |
| url_launcher | 6.3.3 | BSD-3-Clause |

## Card Studio (apps/card_studio)

Installed by the launchers from `requirements-core.txt` and `requirements.txt` on first start (not bundled in the ZIP). Versions below are the ones pip resolved when this list was made; yours may be newer.

| Package | Version | Licence |
|---|---|---|
| argon2-cffi | 25.1.0 | MIT |
| argon2-cffi-bindings | 26.1.0 | MIT |
| cryptography | 50.0.2 | Apache-2.0 OR BSD-3-Clause |
| cffi | 2.1.1 | MIT-0 |
| pycparser | 3.12 | BSD-3-Clause |
| pyscard | 2.3.2 | LGPL-2.1-or-later |
| pywebview (optional) | ≥ 5 | BSD-3-Clause |
| PyInstaller (optional, only if you package the studio) | — | GPL-2.0 with a bootloader exception that allows packaging proprietary apps |

`pyscard` is LGPL. Card Studio uses it as an unmodified library installed by pip, which the LGPL allows. If you package Card Studio as an app with PyInstaller and distribute it, include the pyscard licence and let users replace the library, as the LGPL requires.

## Native code inside packages

- `flutter_zxing` includes the zxing-cpp barcode library (Apache-2.0).
- `reown_walletkit` is the WalletConnect (Reown) SDK (Apache-2.0).

## Services

The apps call third-party APIs under each provider's own terms: public RPC endpoints (publicnode, drpc, Tenderly gateways, Ankr, the networks' own RPCs), mempool.space and blockstream.info, Jupiter, 0x, 1inch, Reown, Etherscan-family explorers, Alchemy, Birdeye and CoinGecko. API keys and their terms are yours.

## Documentation

These docs use the Geist and Geist Mono fonts (SIL Open Font License 1.1), loaded from Google Fonts.