Standing on other people’s shoulders.

https://github.com/jgraph/drawio

The drawio web editor is bundled into Blueprintr at /drawio/ and served from our own origin. drawio is distributed under the JGraph License 2.0, which is the Apache License 2.0 with additional clauses covering trademarks and a field-of-use restriction. Blueprintr is not affiliated with or endorsed by JGraph Ltd. The names “drawio”, “draw.io”, and “diagrams.net” are trademarks of JGraph Ltd. and are used here solely to describe the origin of the editor. Section 10 of that licence prohibits using drawio as part of an app that integrates with Atlassian’s Confluence or Jira, so Blueprintr does not render drawio diagrams on those surfaces: where a blueprint is embedded in Confluence or Jira, its drawio diagrams are removed server-side and a notice is shown in their place. Vellum, Excalidraw and Mermaid diagrams are unaffected.

https://github.com/blueprintr-io/vellum-core

Vellum is the structured diagram editor served at /vellum/ and powering Blueprintr’s blueprint canvases and live collaboration. The upstream vellum-core project is released under PolyForm Noncommercial 1.0.0; Blueprintr embeds it commercially with the author’s permission, since Vellum and Blueprintr share the same author. Copyright (c) 2026 Josh Morris.

https://github.com/excalidraw/excalidraw

Used for hand-drawn-style diagrams and reusable icon libraries. Copyright (c) 2020 Excalidraw. Excalidraw in turn bundles Rough.js, points-on-curve, nanoid, clsx and @braintree/sanitize-url, each under the MIT licence, and the webfonts credited under “Typefaces” below.

https://github.com/mermaid-js/mermaid

Used for text-to-diagram rendering, both in Blueprintr itself and inside the bundled drawio webapp. Copyright (c) 2014–2022 Knut Sveidqvist.

https://github.com/jgraph/drawio/tree/v24.7.17

Blueprintr self-hosts the exact commit-pinned upstream drawio webapp, including its generic and vendor stencil libraries. JGraph licenses the art it provides under CC-BY-4.0 and states that it checked third-party-origin icons for use in that project; its release also warns that additional terms may apply. Copyright permission does not grant trademark rights. Vendor stencils are therefore an accepted AMBER dependency of the intact drawio component, not Blueprintr-owned or generally reusable brand assets. Use them descriptively, preserve their appearance, and do not imply endorsement.

https://github.com/jgraph/drawio/tree/v24.7.17

The editor imagery under /drawio/img/ and the starter diagram templates under /drawio/templates/ carry the licence notices supplied in the pinned upstream distribution. JGraph-provided works are CC-BY-4.0; third-party marks remain subject to their owners’ terms. The template licence text is at /drawio/templates/LICENSE.

Signed-in Vellum users can access a default-deny catalogue containing only reviewed AWS, Microsoft, Kubernetes, Red Hat, Lucide, generic network, flowchart, and Blueprintr/Vellum subsets. Pack files are kept outside the public static origin and are delivered through an authenticated editor API. Each response and placed shape carries its actual licence, source, policy version, and usage constraints. Raw standalone icon export is disabled; whole-diagram exports are allowed only where the pack’s reviewed terms permit them. The in-editor attributions panel shows the applicable notices. Visual exports do not currently add an automatic attribution footer, so no licence that depends on such a footer is admitted on that assumption. Signed-in users can also read the catalogue’s complete licence and NOTICE texts in the authenticated third-party notices.

https://iconify.design

Vellum can search Iconify’s public catalogue on demand. Those sets are not bundled at rest; results are fetched when you search and each tile shows that icon’s own licence. Where an icon you choose requires attribution, it is added to the document’s attributions panel.

The drawio editor and the curated Vellum catalogue can depict products and services from third-party vendors. These icons and the names they represent are trademarks of their respective owners and are used here to allow architects to describe architectures that incorporate those products. Blueprintr is not affiliated with, endorsed by, or sponsored by any of these vendors. Use of a vendor’s icons remains subject to that vendor’s current icon and brand-asset guidelines. Fortinet, Cisco, Google Cloud, Oracle, VMware, CNCF Landscape, and other unapproved Vellum packs are not in the production catalogue. See “Diagrams you create” at the foot of this page.

https://github.com/jgraph/mxgraph

The graph-drawing library drawio is built on, shipped inside the bundle at /drawio/mxgraph/. Copyright (c) JGraph Ltd.

https://github.com/mathjax/MathJax

Shipped inside the drawio webapp at /drawio/math/ for rendering LaTeX in diagrams. Copyright (c) The MathJax Consortium.

https://github.com/jquery/jquery

Copyright (c) OpenJS Foundation and other contributors.

https://jscolor.com

The colour picker in the drawio format panel. Written by Jan Odvarko and renamed to mxJSColor by JGraph to avoid symbol conflicts. Blueprintr redistributes JGraph’s copy unmodified — see “Reciprocal and copyleft licences” below for the source-availability statement this licence requires.

https://code.google.com/archive/p/crypto-js

AES primitives used by drawio’s encrypted-file support. Copyright (c) Jeff Mott and contributors.

https://github.com/cure53/DOMPurify

The HTML sanitiser drawio uses for label and tooltip content. Copyright (c) Cure53 and contributors.

https://github.com/nodeca/pako

zlib port used for drawio’s compressed mxfile payloads. Copyright (c) Vitaly Puzrin and Andrei Tuputcyn; the zlib-derived portions are (c) Jean-loup Gailly and Mark Adler. Both sets of terms apply.

https://github.com/Stuk/jszip

ZIP handling for drawio’s import/export paths. Copyright (c) Stuart Knightley.

https://github.com/rough-stuff/rough

Sketch-style rendering for drawio’s rough shape styles. Copyright (c) Preet Shihn.

https://github.com/steveruizok/perfect-freehand

The freehand-drawing stroke engine. Copyright (c) Steve Ruiz.

https://github.com/feross/simple-peer

WebRTC transport for drawio’s peer-to-peer sync mode. Copyright (c) Feross Aboukhadijeh.

https://github.com/fgnass/spin.js

The editor’s loading spinner. Copyright (c) Felix Gnass.

https://github.com/bridgedotnet/Bridge

The org-chart auto-layout drawio ships is compiled from C# with Bridge.NET, so the Bridge runtime travels with it. Copyright (c) 2008–2016 Object.NET, Inc.; the drawio layout adapter is Copyright (c) 2019–2020 JGraph Ltd.

https://github.com/radix-ui/primitives

Accessible dialog, popover, dropdown and tooltip primitives used by the Vellum editor chrome. Copyright (c) WorkOS.

https://github.com/pmndrs/zustand

State management inside the Vellum editor. Copyright (c) Paul Henschel.

https://github.com/colinhacks/zod

Schema validation for Vellum’s document model. Copyright (c) Colin McDonnell.

https://github.com/dagrejs/dagre

Directed-graph auto-layout used by Vellum’s arrange commands. Copyright (c) Chris Pettitt.

https://github.com/cure53/DOMPurify

HTML sanitiser used wherever Vellum renders user-authored text fragments. Copyright (c) Cure53 and contributors.

https://github.com/mattdesl/gifenc

Used to encode animated GIF exports from Vellum. Copyright (c) Matt DesLauriers.

https://github.com/fontsource/fontsource

Blueprintr’s own UI typefaces. Outfit is Copyright (c) The Outfit Project Authors; Fraunces is Copyright (c) The Fraunces Project Authors; JetBrains Mono is Copyright (c) 2020 The JetBrains Mono Project Authors. Each is distributed under OFL-1.1 and redistributed here unmodified. The Fontsource packaging is itself MIT-licensed.

https://github.com/fontsource/fontsource

The Vellum editor bundles the following families via Fontsource: Architects Daughter, Caveat, Fira Code, IBM Plex Mono, Inter, JetBrains Mono, Lora, Outfit, and Patrick Hand. Each is distributed under the SIL Open Font License 1.1 by its respective designers.

https://github.com/KaTeX/KaTeX

The KaTeX math families (Main, Math, AMS, Caligraphic, Fraktur, SansSerif, Script, Typewriter, Size1–4) ship with the KaTeX renderer and are served from our origin. Copyright (c) Khan Academy and contributors; the designs derive from the Computer Modern and AMS families.

https://github.com/excalidraw/excalidraw

The Excalidraw distribution Blueprintr bundles includes Excalifont, Assistant, Nunito, Lilita One, Comic Shanns, Cascadia Code and Liberation Sans. Each is redistributed unmodified under its own OFL-1.1 or MIT terms by its respective designers.

https://github.com/vercel/next.js

The React framework Blueprintr is built on. Copyright (c) Vercel, Inc.

https://github.com/opennextjs/opennextjs-aws

Packages the Next.js build for AWS Lambda + CloudFront. Copyright (c) the OpenNext authors.

https://github.com/facebook/react

Copyright (c) Meta Platforms, Inc. and affiliates.

https://github.com/prisma/prisma

Database ORM. Copyright (c) Prisma Data, Inc.

https://github.com/nextauthjs/next-auth

Authentication layer and Prisma session store. Copyright (c) the Auth.js authors.

https://github.com/mdx-editor/editor

The rich-text Markdown editor used for blueprint content. Built on Meta’s Lexical framework (MIT).

https://github.com/tailwindlabs/tailwindcss

Copyright (c) Tailwind Labs, Inc.

https://github.com/unifiedjs

Markdown and HTML processing toolchain. Copyright (c) Titus Wormer and contributors.

https://github.com/apostrophecms/sanitize-html

Server-side HTML sanitising for imported and user-supplied markup. Copyright (c) Apostrophe Technologies.

https://github.com/lovell/sharp

The image pipeline behind Next.js image optimisation, which runs only on Blueprintr’s servers. sharp itself is Apache-2.0, Copyright (c) Lovell Fuller; the prebuilt binaries it loads contain libvips, glib, pango, librsvg, libheif, libexif and proxy-libintl under LGPLv3, cairo under MPL-2.0, and a set of permissively licensed codecs. See “Reciprocal and copyleft licences” below.

https://github.com/mozilla/pdf.js

Extracts text and embedded images when you import a PDF. Copyright (c) Mozilla Foundation and contributors.

https://github.com/mwilliamson/mammoth.js

Converts imported .docx documents to structured HTML. Copyright (c) Michael Williamson.

https://github.com/VolodymyrBaydalka/docxjs

Renders .docx attachments in the in-app document viewer. Copyright (c) Volodymyr Baydalka.

https://github.com/NaturalIntelligence/fast-xml-parser

Parses the OOXML parts of imported .pptx decks. Copyright (c) Amit Kumar Gupta.

https://github.com/jimp-dev/jimp

Pure-JavaScript image processing for import thumbnails. Copyright (c) Oliver Moran.

https://github.com/pngjs/pngjs

PNG encoding/decoding for images extracted during document import. Copyright (c) Alexander Gorlov and contributors.

https://github.com/foliojs/pdfkit

PDF generation for blueprint and Folium exports. Copyright (c) Devon Govett.

https://github.com/Stuk/jszip

ZIP packaging for multi-file exports. Copyright (c) Stuart Knightley.

https://github.com/anthropics/anthropic-sdk-typescript

Used by Blueprintr’s Ask-AI assistant and editor-side generators. Copyright (c) Anthropic, PBC.

https://github.com/google/generative-ai-js

Google’s Generative AI SDK, retained for selected model-routing paths. Copyright (c) Google LLC.

https://github.com/stripe/stripe-node

Server-side client for subscriptions, checkout and webhook verification. Copyright (c) Stripe, Inc. Stripe is the payment processor named in clause 3 of our Terms; card details are handled by Stripe and never reach Blueprintr.

https://github.com/aws/aws-sdk-js-v3

Used by Blueprintr Continuum to introspect a customer’s AWS account and reflect live infrastructure back into Vellum diagrams. Copyright (c) Amazon.com, Inc. or its affiliates.

https://github.com/Azure/azure-sdk-for-js

Used by Blueprintr Continuum’s Azure parity path for the same purpose. Copyright (c) Microsoft Corporation.

https://github.com/yeojz/otplib

TOTP implementation for authenticator-app two-factor sign-in. Copyright (c) Gerald Yeo.

https://github.com/MasterKale/SimpleWebAuthn

WebAuthn / passkey support for hardware-key second factors. Copyright (c) Matthew Miller.

https://github.com/soldair/node-qrcode

Renders the TOTP enrolment QR codes shown in Settings.

https://github.com/panva/jose

JOSE / JWT primitives used throughout the auth and webhook stacks. Copyright (c) Filip Skokan.

https://github.com/dcodeIO/bcrypt.js

Password hashing for the email/password sign-in path.

https://github.com/yjs/yjs

The CRDT library at the heart of Vellum’s live co-editing. Copyright (c) Kevin Jahns.

https://github.com/yjs/y-protocols

The y-websocket sync / awareness protocols spoken by Blueprintr’s Cloudflare Worker collaboration backend. Copyright (c) Kevin Jahns.

https://github.com/tauri-apps/tauri

The desktop shell, auto-updater, deep-link handler, filesystem and dialog plugins. Copyright (c) 2019–present Tauri Programme within The Commons Conservancy. Tauri renders through the platform’s own webview (WKWebView on macOS, WebView2 on Windows, WebKitGTK on Linux) rather than bundling a browser engine.

https://github.com/tauri-apps/wry

The webview and windowing crates underneath Tauri. Copyright (c) Tauri Programme within The Commons Conservancy.

https://github.com/codemirror/dev

Powers the code-snippet editors and the language-aware editors used in the wizard. Copyright (c) Marijn Haverbeke and others.

https://github.com/KaTeX/KaTeX

Math typesetting for Markdown content. Copyright (c) Khan Academy.

https://github.com/highlightjs/highlight.js

Syntax-highlighting for rendered code blocks. Copyright (c) Ivan Sagalaev and contributors.

https://github.com/kieler/elkjs

Auto-layout engine used when generating diagrams from outlines. Copyright (c) Kiel University and contributors. See “Reciprocal and copyleft licences” below for the source-availability statement EPL-2.0 requires.

https://github.com/resend/resend-node

Transactional email delivery (invites, password resets, notifications). Copyright (c) Resend.

https://github.com/lucide-icons/lucide

Icon set used throughout Blueprintr’s UI chrome. Copyright (c) Lucide contributors.

Assorted small utilities, each used under their respective permissive licences.

https://github.com/browserslist/caniuse-lite

Browser-support data consulted at build time to decide which CSS and JavaScript features to compile down. Data by Alexis Deveria (caniuse.com), packaged by the Browserslist authors.

https://github.com/kieler/elkjs

Blueprintr uses ELK.js exactly as published on the npm registry, with no modifications. The corresponding Source Code is available from the project repository above and from the published package itself (npm pack [email protected]). ELK.js is distributed on an “as is” basis by its contributors, and Blueprintr offers no warranty or additional liability on their behalf.

https://jscolor.com

jscolor 1.3.13 is bundled inside the drawio webapp. JGraph modified it only by renaming its global to mxJSColor, a change noted in the file’s own header; Blueprintr redistributes JGraph’s copy without further modification. It is served as unminified, human-readable JavaScript at /drawio/js/jscolor/jscolor.js, so the file we deliver is its own corresponding source, and it can be replaced or modified without rebuilding the rest of the application.

https://github.com/cure53/DOMPurify

Both the copy inside Vellum (3.4.1) and the copy inside drawio (3.1.5) are used under the Apache-2.0 option and are unmodified.

https://github.com/Stuk/jszip

Both the application copy (3.10.1) and the copy inside drawio are used under the MIT option. No GPL obligations are taken on.

https://github.com/nodeca/pako

pako is not a choice-of-licence package: the JavaScript is MIT and the zlib-derived portions carry the zlib licence. Blueprintr complies with both; neither imposes a source-disclosure obligation.

https://github.com/lovell/sharp-libvips

The prebuilt native binaries sharp loads include libvips, glib, pango, librsvg, libheif, libexif and proxy-libintl under LGPLv3, and cairo under MPL-2.0. These run only inside Blueprintr’s own AWS Lambda functions to resize images; they are never conveyed to you, so no distribution obligation arises. They are unmodified upstream builds, and their complete source is available from the repository above. Attribution is given here regardless.

PolyForm Noncommercial does not by itself permit commercial use. Blueprintr’s use is authorised separately by Vellum’s copyright holder, who is also Blueprintr’s author. This grant is specific to Blueprintr and confers no rights on anyone else: if you want to use vellum-core commercially, you need your own permission from the author.

If you believe a component Blueprintr distributes entitles you to its corresponding source and you cannot obtain it from the links on this page, email [email protected] and we will provide it at no charge beyond the cost of delivery.

Product names, logos, and brands referred to on Blueprintr or depicted in any bundled icon or stencil library are the property of their respective owners. Blueprintr uses them only to identify those products — so that an architect can say which service a box on a diagram represents. Their use does not imply any affiliation with, sponsorship by, or endorsement from their owners, and Blueprintr claims no rights in them. “Blueprintr”, “Vellum”, “Continuum”, “Folium”, “Atrium”, “Compendium” and “Podium” are marks of Blueprintr.

When you place a vendor’s icon in a diagram and publish it, you are the one using that vendor’s mark. Most vendors publish brand or architecture-icon guidelines that govern how their icons may be shown, recoloured, or combined; some restrict commercial reuse. Clause 5 of our Terms puts responsibility for having the rights to your content, and the third-party material in it, on you. If you believe content on Blueprintr infringes your rights, write to [email protected] and we will review it.