AURA / Documentation / Modules

Dependencies & licenses

AURA uses native libraries for rendering, windows, media and runtime services. This overview lists the versions selected by the build and links to license texts. System libraries depend on the target environment; a custom Skia build can replace the configured package.

Framework libraries

The module column identifies the part of the framework using each library. AURA_WITH_UI, AURA_WITH_NET and AURA_WITH_SCRIPT control their respective groups.

Dependency	Version	Purpose	License / license text	Module
SDL3	3.4.18	Windows, input, GL context	zlib	`UI`
Skia / skia-pack	m144-e2e6623374-4	2D rendering, text, SVG and images	BSD-3-Clause + third-party components	`UI`
Rive runtime	0.1.656	Rive animations	MIT	`UI`
libvpx	1.17.0	VP9 video	BSD-3-Clause	`UI`
libwebm	1.0.0.32	WebM containers / mkvparser	BSD-3-Clause	`UI`
Nayuki qrcodegen	1.8.0	QR code generation	MIT	`UI`
libcurl	8.23.0	HTTP(S) client	curl	`Net`
cpp-httplib	0.64.0	HTTP(S) server	MIT	`Net`
OpenSSL	System	TLS and cryptography	Apache-2.0 (OpenSSL ≥ 3)	`Net`
zlib	System	Compression	Zlib	`Core / Net`
nlohmann/json	3.11.3	JSON behind AuraJson	MIT	`Core`
rapidyaml	0.16.0	YAML behind AuraJson	MIT	`Core`
pugixml	1.14	XML behind AuraXml	MIT	`Core`
QuickJS-ng	0.17.0	JavaScript engine	MIT	`Script`
Lua	5.4.9	Lua engine	MIT	`Script`

The curl license is a distinct permissive license. The Apache-2.0 entry for OpenSSL applies to version 3 and later; an older system OpenSSL uses the license text shipped with that version.

Optional components

Dependency	Version	Purpose	License / license text	Module
libheif	≥ 1.14 (System)	HEIF/HEIC images	LGPL-3.0-or-later	`AURA_WITH_HEIF`
libde265	System / decoder plugin	HEVC decoder for libheif	LGPL-3.0-or-later	`HEIF`
CEF / Chromium	156.0.14 / Chromium 156.0.8078.48	Web pages in the scene graph	BSD-3-Clause + third-party components	`AURA_WITH_WEBVIEW`

HEIF: AURA_WITH_HEIF is enabled by default. CMake looks for libheif through pkg-config; support is disabled if it is unavailable. AURA links libheif dynamically. The actual decoder depends on the installed libheif plugins; libde265 is the HEVC decoder in the documented setup. These libraries are LGPL-licensed.
WebView: AURA_WITH_WEBVIEW is disabled by default. CEF includes Chromium and other third-party components with their own license notices. The CEF license alone does not describe every part of the distribution.

Text, codecs and other transitive dependencies

Skia includes HarfBuzz for text shaping (MIT), ICU for Unicode processing (Unicode license), image codecs and other libraries. Their scope and versions depend on the selected skia-pack or custom Skia build. Each component has its own license text in the Skia checkout and binary distribution. The same applies to plugins, system libraries and Chromium.

The table is an overview of directly integrated libraries, not a complete component-level SBOM for a particular shipped application.

Tests, demo and website

Dependency	Version	Purpose	License / license text	Module
doctest	2.4.11	Unit tests	MIT	`AURA_TESTS`
DejaVu Sans	2.37	Gallery, demo and visual tests	Bitstream Vera / DejaVu Public Domain	`Tests / Demo`
markdown-it-py	3.0.0	Static website build	MIT	`Website`
mdurl	0.1.2	URL helpers for markdown-it-py	MIT	`Website`

The demo also includes an MIT-licensed Rive fixture from rive-runtime; attribution and license are in examples/demo/assets/NOTICE. Its WebM test video is a synthetic FFmpeg test pattern. At runtime the website requires no JavaScript library, CDN service or remotely loaded fonts. markdown-it-py and mdurl are used only to generate the static pages.

Sources and snapshot

Versions: cmake/AuraDependencies.cmake, cmake/SDL3.cmake, cmake/Skia.cmake, cmake/Rive.cmake, cmake/Video.cmake, cmake/Curl.cmake and cmake/Cef.cmake. License texts were checked against locally used source packages and upstream information. Local license downloads are unchanged copies from those sources. Snapshot: 1 November 2026.

Documentation source: cmake/*.cmake · third-party LICENSE files · Download Markdown