OPEN SOURCE · 开源依赖
Full open-source disclosure.
We stand on the shoulders of dozens of OSS projects. This page is inscinstech.ai's public dependency and license-compliance declaration — verifiable any time by customers, auditors, and legal teams.
01 — COMMITMENT
Our commitment.
inscinstech.ai is built by Inscinstech (苏州英赛斯智能科技有限公司). We commit to:
- Full disclosure — every OSS dependency in production is listed on this page (version · license · purpose · upstream repo).
- Preserve original copyrights — all forks and wrappers retain upstream LICENSE files and copyright notices; nothing is stripped.
- No false in-house claims — we clearly distinguish "in-house (proprietary)" / "built on (fork)" / "depends on (direct dependency)" in both marketing and technical docs.
- Compliant downstream distribution — private-deploy bundles include the full LICENSE, NOTICE, and an offline snapshot of this page.
- Quarterly updates — this page is updated whenever a dependency changes. The last-updated date is at the bottom.
02 — RUNTIME WRAPPING
Core runtime + brand wrapping.
Which brand names are marketing wrappers, which are direct dependencies, which are forks — visible at a glance.
| inscinstech.ai brand | Upstream OSS | License | Relationship | Notes |
|---|---|---|---|---|
| inCore | Hermes Agent (Nous Research) | MIT | Fork + SaaS wrapping | inCore is a fork of Hermes Agent with 21 CFR Part 11 audit, multi-tenant isolation, and IBS integration. Compatible with upstream; PRs synced quarterly. |
| InBeacon · Intelligence agent | Multiple OSS dependencies (see below) | various | In-house + OSS deps | InBeacon is an Inscinstech product that depends on OSS crawling, parsing, NER, and vector search as infrastructure. |
| InPrism · Search agent | PaperQA2 · Haystack · MinerU · GROBID | Apache 2.0 / MIT | Direct dependency | InPrism's literature RAG is built on PaperQA2 + Haystack; PDF parsing uses MinerU + GROBID. |
| InAnvil · Design + Evaluation agent | BioPhi · IgFold · ProteinMPNN · Boltz-2 · ViennaRNA · BLAST+ · AbNumber + Inscinstech-proprietary calibration | MIT / Apache 2.0 / BSD / Public domain / Academic | Direct dependency + Inscinstech proprietary calibration | InAnvil v0.3 ships 5 design modules + 6 evaluation modules. Proprietary components: OligoMS synthesizability scorer · NestoPure purification recommendation · BsAb expression yield · CMC v2.2 calibration. |
| InForge · CMC process agent | Inscinstech CMC v2.2 knowledge base (proprietary) + OSS deps | — | Primarily in-house + OSS deps | InForge's core moat is Inscinstech's CMC v2.2 knowledge base (82+ entries, proprietary), FDA review docs distillation (proprietary), and the Skills system. OSS deps are infrastructure only. |
03 — FULL MATRIX
Full dependency matrix.
Grouped by purpose. Versions reflect the actual production environment at the time of this page's last update.
3.1 Agent runtime & orchestration
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| Hermes Agent | v0.10.x | MIT | github.com/NousResearch/hermes-agent | inCore foundation (fork) |
| Temporal | 1.22+ | MIT | github.com/temporalio/temporal | GxP long workflows · 21 CFR Part 11 audit |
| LangChain (limited use) | 0.x | MIT | github.com/langchain-ai/langchain | Selective chain orchestration |
| Model Context Protocol (MCP) | 1.x | MIT | github.com/modelcontextprotocol | External Skill / tool wiring |
3.2 LLM gateway & inference
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| FastAPI | 0.110+ | MIT | github.com/tiangolo/fastapi | LLM Gateway service |
| LiteLLM | 1.x | MIT | github.com/BerriAI/litellm | Multi-LLM routing abstraction |
| BGE-M3 | latest | MIT | huggingface.co/BAAI/bge-m3 | Self-hosted embedding model |
| bge-reranker-v2-m3 | latest | MIT | huggingface.co/BAAI/bge-reranker-v2-m3 | Reranker model |
3.3 Data collection & parsing
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| Crawl4AI | 0.4+ | Apache 2.0 | github.com/unclecode/crawl4ai | Intelligent crawler |
| Playwright | 1.40+ | Apache 2.0 | github.com/microsoft/playwright | Browser automation |
| Scrapy | 2.11+ | BSD-3 | github.com/scrapy/scrapy | Structured crawler |
| MinerU | 0.x | Apache 2.0 | github.com/opendatalab/MinerU | CN PDF / table / formula parsing |
| Docling | 1.x | MIT | github.com/DS4SD/docling | EN PDF parsing |
| GROBID | 0.8+ | Apache 2.0 | github.com/kermitt2/grobid | Academic PDF metadata extraction |
| GLiNER | 0.2+ | Apache 2.0 | github.com/urchade/GLiNER | Generic NER |
| spaCy | 3.7+ | MIT | github.com/explosion/spaCy | NLP pipeline |
3.4 Retrieval & RAG
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| PaperQA2 | 5.x | Apache 2.0 | github.com/Future-House/paper-qa | Scientific literature RAG (InPrism core) |
| Haystack | 2.x | Apache 2.0 | github.com/deepset-ai/haystack | Production RAG pipeline |
| Milvus | 2.4+ | Apache 2.0 | github.com/milvus-io/milvus | Vector database |
| Elasticsearch | 8.x | Elastic License 2.0 (source-available) | github.com/elastic/elasticsearch | Full-text search |
| GPT Researcher | 0.x | MIT | github.com/assafelovic/gpt-researcher | Multi-step research agent |
3.5 Biopharma tools (InAnvil)Antibody (D3 mAb design · D4 biosimilar · D5 BsAb · E1 / E2 evaluation)
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| BioPhi | 1.x | MIT | github.com/Merck/BioPhi | Antibody humanization · developability · OASis humanness |
| Boltz-2 | 2.x | MIT | github.com/jwohlwend/boltz | Protein structure prediction |
| IgFold | 0.x | Apache 2.0 | github.com/Graylab/IgFold | Antibody-specific structure prediction |
| ProteinMPNN | 1.x | MIT | github.com/dauparas/ProteinMPNN | Reverse sequence design · affinity maturation |
| AbNumber / ANARCI | latest | BSD-3 | github.com/oxpig/ANARCI | Antibody Kabat / Chothia / IMGT numbering |
| TAP | latest | Academic non-commercial · commercial in negotiation | opig.stats.ox.ac.uk/webapps/sabdab-sabpred/sabpred/tap/ | Antibody aggregation scoring |
| SAP | latest | Academic non-commercial · commercial in negotiation | (same source as TAP) | Antibody hydrophobicity scoring |
| TANGO / AGGRESCAN | latest | Academic | multiple | Aggregation prediction |
3.5 Biopharma tools (InAnvil)Oligonucleotide (D1 siRNA · D2 ASO · E4 oligo evaluation)
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| ViennaRNA | 2.6+ | ViennaRNA license (commercial OK) | www.tbi.univie.ac.at/RNA/ | RNA secondary structure · accessibility scoring |
| BLAST+ | 2.15+ | Public domain | blast.ncbi.nlm.nih.gov/ | Off-target whole-transcriptome scan |
| NCBI Entrez E-utilities | API | Public domain | www.ncbi.nlm.nih.gov/books/NBK25501/ | mRNA sequence retrieval |
| Biopython | 1.83+ | Biopython License (BSD-like) | github.com/biopython/biopython | Sequence utilities |
| DSIR / Reynolds / Ui-Tei / Amarzguioui algorithms | — | Academic (re-implemented) | — | siRNA candidate site selection |
| sFold algorithm | — | Academic (re-implemented) | sfold.wadsworth.org/ | Thermodynamic accessibility |
3.5 Biopharma tools (InAnvil)Inscinstech proprietary components
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| OligoMS Synthesizability Scorer | Proprietary | — | — | Based on parent OligoMS synthesis history · used by D1 / D2 / E4 |
| NestoPure Purification Recommender | Proprietary | — | — | Based on parent NestoPure purification history · D1 / D2 output |
| BsAb Expression Yield Model | Proprietary | — | — | Based on parent BsAb expression history · D5 |
| CMC v2.2 Knowledge Calibration | Proprietary | — | — | Calibrates evaluation predictions · E1–E6 |
| Modification Pattern ML Model | Proprietary (training) | — | — | siRNA / ASO modification site recommendation |
3.6 DOE & statistics
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| pyDOE3 | 1.x | MIT | github.com/relf/pyDOE3 | DOE matrix generation |
| statsmodels | 0.14+ | BSD-3 | github.com/statsmodels/statsmodels | Response surface / regression |
| BoTorch | 0.10+ | MIT | github.com/pytorch/botorch | Bayesian optimization |
| SciPy | 1.12+ | BSD-3 | github.com/scipy/scipy | Scientific computing |
3.7 Infrastructure
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| PostgreSQL | 16 | PostgreSQL License (BSD-like) | github.com/postgres/postgres | Primary relational DB |
| Redis | 7.x | BSD-3 (OSS edition) | github.com/redis/redis | Cache / pub-sub |
| RabbitMQ | 3.13+ | MPL 2.0 | github.com/rabbitmq/rabbitmq-server | Message queue |
| Spring Boot | 3.x | Apache 2.0 | github.com/spring-projects/spring-boot | IBS backend (Java 21) |
| Next.js | 15 | MIT | github.com/vercel/next.js | Frontend framework |
| Tailwind CSS | 3.4+ | MIT | github.com/tailwindlabs/tailwindcss | CSS framework |
| shadcn/ui | latest | MIT | github.com/shadcn-ui/ui | UI primitives |
| Framer Motion | 11.x | MIT | github.com/framer/motion | Frontend animation |
| Lucide | latest | ISC | github.com/lucide-icons/lucide | Icon set |
3.8 Monitoring & observability
| Project | Version | License | Repo | Used for |
|---|---|---|---|---|
| Sentry | self-hosted | BSL 1.1 / FSL | github.com/getsentry/sentry | Error monitoring |
| Grafana | 10.x | AGPL v3 / Grafana Labs license | github.com/grafana/grafana | Visualization (internal use only) |
| Loki | 3.x | AGPL v3 | github.com/grafana/loki | Log aggregation (internal use only) |
| Prometheus | 2.x | Apache 2.0 | github.com/prometheus/prometheus | Metrics |
| PostHog | self-hosted | MIT | github.com/PostHog/posthog | Product behavior analytics (self-hosted to avoid resale debate) |
04 — NOT IN USE
Projects we don't use (avoiding license traps).
For transparency we also disclose the projects we evaluated but did not adopt, and why.
| Dify | Apache 2.0 + commercial addenda — multi-tenant SaaS resale requires licensing talks. |
| FastGPT | Same as Dify. |
| n8n | Sustainable Use License — SaaS resale restricted. |
| ESM-3 (EvolutionaryScale) | Non-commercial / commercial license tiers — replaced with Boltz-2. |
| AlphaFold 3 (Google DeepMind) | Commercial restrictions; license complexity — replaced with Boltz-2. |
05 — OBLIGATIONS
License obligations summary.
Compliance obligations grouped by license type. This is the self-check list for our engineering and compliance teams, and the transparent commitment to customers.
MIT / BSD / ISC / Apache 2.0
Obligation
- Retain original copyright notice
- Retain original LICENSE file
- Apache 2.0: also retain NOTICE file if any
How we comply
- All fork repos preserve upstream LICENSE / NOTICE
- Container images and private-deploy bundles ship with THIRD_PARTY_LICENSES.txt — full text of every dependency license
- This page is the public source-of-truth declaration
Mozilla Public License 2.0 (MPL 2.0) — RabbitMQ
Obligation
- Modified MPL 2.0 files must keep MPL marker
- Modified source must be made available (only the modified files)
How we comply
- We do not modify RabbitMQ source — used as a black-box service, no MPL disclosure obligation triggered
Elastic License 2.0 — Elasticsearch
Obligation
- Cannot resell Elasticsearch as a managed service
- Cannot bypass license checks
How we comply
- ES is used internally for retrieval only; customers do not access ES APIs directly
- We do not resell ES managed service
AGPL v3 — Grafana / Loki
Obligation
- If AGPL software is offered over the network to users, the user must be offered the source
- Modified source must be made available
How we comply
- Grafana / Loki are used for internal ops monitoring only; not exposed to customers
- Customer dashboards are built on our own Next.js frontend, unrelated to Grafana
- Customers do not interact with Grafana, so AGPL's "network distribution" condition does not trigger
Academic non-commercial — TAP / SAP
Obligation
- Free for academic use; commercial requires licensing negotiation
How we comply
- Already in commercial license negotiation with Oxford OPIG; target completion by Phase 3 InAnvil launch (M6-M8)
06 — PRIVATE DEPLOYMENT
Additional obligations for private deployment.
When customers purchase Enterprise private deployment, the distribution container images and code bundles must include:
THIRD_PARTY_LICENSES.txt— complete dependency list with full license textNOTICE— attribution notice for Apache 2.0 projectsLICENSE— inCore's own license (the wrapping layer is inscinstech.ai proprietary; the Hermes Agent portion retains MIT)/security/open-sourceoffline snapshot — HTML offline version of this page
Customers do not need to make these files public to their own end-users in a private deployment, but they must retain them in the system for audit purposes.
07 — IP BOUNDARY
IP boundaries.
When you buy inscinstech.ai, what you own and what you don't.
| Asset | Owner | What the customer gets |
|---|---|---|
| Inscinstech CMC knowledge base v2.2 content | Inscinstech proprietary | Query access (by subscription tier); raw data not transferred |
| InBeacon / InPrism / InAnvil / InForge product code | Inscinstech proprietary | Usage rights (by subscription tier) |
| inCore wrapping-layer code | Inscinstech proprietary | Usage rights / private-deploy code access (Enterprise only) |
| Hermes Agent upstream code (embedded in inCore) | Nous Research, MIT | Indirect use through inCore; MIT rights inherited |
| Customer-uploaded PDFs / sequences / process data | Customer proprietary | Customer-owned; inscinstech.ai gains no rights |
| Customer Memory / Skills accumulated in inCore Profile | Customer proprietary | Customer can export / destroy / migrate |
| Agent outputs (briefs / reports / process plans) | Customer proprietary | Customer-owned; may be commercialized, redistributed, adapted |
08 — REPORTING
How to report a license issue.
If you find that: we use an OSS project not listed here; the version / license on this page differs from reality; or we have violated an OSS project's license terms — please email:
opensource@inscinstech.ai- Acknowledged within 24 hours
- Fix / explanation / adjustment within 7 business days