Skip to content
XADEN

Credits and licenses

What Xaden builds on

Xaden stands on other people’s work. This page names it, links to it and states the license, so you can see what you depend on and who made it. Licenses are read from each project’s own repository; they can differ between versions, and the license of the version you install applies. This is a factual list, not legal advice.

The people behind the assistant’s data

Xaden was built with the help of an AI assistant, which is why a tool of this size came together so fast. What such an assistant knows, it knows from people: the authors of open-source code and its documentation, the writers of books, articles, tutorials and standards, everyone who answered a question in a forum or reported and fixed a bug in the open, and the teachers who explained it first. Most of them are not named anywhere and did not know their work would end up here. Their knowledge is in every part of Xaden. Thank you! ❤️

Tools Xaden runs

Xaden bundles none of these. You or the CI workflow that xaden project adopt writes install them, and Xaden only starts them as separate programs and reads their output. Each entry reads: name, license.

Security and review

  • ShellCheck: GPL-3.0. Lints shell scripts. Started as a separate program, never linked or bundled.
  • Gitleaks: MIT. Scans for secrets.
  • Semgrep: LGPL-2.1. Static analysis with Xaden’s own local rules. The rules of the Semgrep registry that a CI run may add are under the Semgrep Rules License v1.0, not LGPL.
  • actionlint: MIT. Checks GitHub Actions workflows.
  • zizmor: MIT. Finds security problems in GitHub Actions workflows.
  • Bandit: Apache-2.0. Security linter for Python.
  • pip-audit: Apache-2.0. Audits Python dependencies for known vulnerabilities.

Python

  • Ruff: MIT. Linter and formatter.
  • mypy: MIT. Type checker.
  • pytest: MIT. Test runner.

JavaScript and TypeScript

Optional tools Xaden only suggests

A TIP: in the full check names these when they would fit your project. Xaden installs none of them.

  • jscpd: MIT. Finds copy-pasted code.
  • Vulture: MIT. Finds dead Python code.
  • Hypothesis: MPL-2.0. Property-based tests for Python.
  • mutmut: BSD-3-Clause. Mutation testing for Python.
  • Knip: ISC. Finds unused files and exports in JavaScript projects.
  • fast-check: MIT. Property-based tests for JavaScript.
  • StrykerJS: Apache-2.0. Mutation testing for JavaScript.

The assistant add-ons the Admin Guide lists, such as Ponytail or Caveman, carry their own licenses; they are named with theirs in Requirements and platforms.

Standards and works Xaden builds on

Jobs To Be Done and Given–When–Then are ways of working that Xaden’s requirements use; the Clean Code rules follow the practices described in Robert C. Martin’s book Clean Code. They are ideas credited here, not text Xaden reproduces.

This site

  • Hugo: Apache-2.0. Builds the site.
  • Tailwind CSS: MIT. The stylesheet. Its license banner stays in the built CSS.
  • Hugoplate: MIT. The layout structure of the theme derives from it.
  • Cinzel: SIL OFL 1.1. Copyright 2020 The Cinzel Project Authors. License text.
  • Inter: SIL OFL 1.1. Copyright 2016 The Inter Project Authors. License text.

The fonts are served from this site, from the @fontsource packages. The site is hosted on GitHub Pages; the privacy notice says what that means for your data.

Names

The names of assistants and tools, such as Claude Code, Codex, Cursor and GitHub Copilot, belong to their owners. Xaden says that it works with them and nothing more; it is not affiliated with or endorsed by any of them.

To report a missing credit or a wrong license, write to hello@xaden.dev.