Open-Source Licences

        PatchPilot is proprietary software. It incorporates and invokes the open-source
        components below, under their respective licences. Copyleft tools are invoked as
        standalone executables (never linked into PatchPilot's code), and all licence and
        notice files are retained with the distributed software.
      

Bundled & invoked components

Component	Use	Licence
MeshCentral	Remote desktop / terminal / file transfer & session recording (white-labelled)	Apache-2.0
restic	Encrypted, deduplicated file & image backup engine	BSD-2-Clause
rclone	Transport to customer cloud storage (S3/Wasabi/R2/B2/Azure/GCS)	MIT
wimlib	Bootable Windows image capture/apply (`wimlib-imagex`)	GPL-3.0 / LGPL-3.0
partclone, dd, sgdisk	Linux block-image capture (installed on demand on the target)	GPL

MeshCentral is used, configured and white-labelled under the Apache Licence 2.0, which permits commercial use, modification and redistribution; its LICENSE and NOTICE files are preserved and we do not use the MeshCentral marks to imply endorsement. wimlib is invoked as a separate binary, distributed unmodified with its COPYING licence texts, and not linked into PatchPilot.

Application dependencies (server & dashboard)

All ~180 npm dependencies are under permissive licences — a scan on 12 June 2026 found no copyleft (GPL/AGPL/SSPL) licences:

Server: MIT, Apache-2.0, BSD-2-Clause, ISC
Dashboard: MIT, Apache-2.0, ISC — React, TanStack, Radix UI, lucide-react and similar

Agent dependencies (.NET)

The cross-platform agent depends only on Microsoft packages (Microsoft.Extensions.*, System.*; MIT) and Serilog (Apache-2.0). No copyleft dependencies.

Requesting the full list

A complete machine-readable software bill of materials (SBOM) listing every dependency and its licence is available on request: legal@patchpilot.co.uk.

This notice is informational and not legal advice.