NOTICE

NeMo Platform
Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.

Licensed under the Apache License, Version 2.0.

================================================================================
Third-Party / Vendored Code
================================================================================

This repository includes vendored third-party components listed below.
Each component retains its original license, which can be found in the
respective directory.

--------------------------------------------------------------------------------
packages/garak_api/
  Garak v0.14.1 — LLM vulnerability scanner
  Copyright (c) 2023-2024 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
  License: Apache-2.0
  Home: https://github.com/NVIDIA/garak

  The following files are vendored from the upstream garak project and
  modified for standalone use within NeMo Platform:

    garakapi/_config.py        — from garak/_config.py (v0.14.1)
    garakapi/_plugins.py       — from garak/_plugins.py (v0.14.1)
    garakapi/exception.py      — from garak/exception.py (v0.14.1)
    garakapi/resources/plugin_cache.json — from garak/resources/plugin_cache.json (v0.14.1)

  These files carry "Portions Copyright" SPDX headers and are licensed
  under Apache-2.0 by the upstream garak project.

--------------------------------------------------------------------------------
plugins/nemo-switchyard/vendor/switchyard/
  Switchyard vendored snapshot at commit 9407922
  Home: https://github.com/NVIDIA-dev/switchyard
  License: Apache-2.0

  This repository vendors a subset of the upstream Switchyard project for
  use by the `nemo-switchyard` plugin. The vendored package metadata records
  this as version `0.1.0+vendored.9407922`.

  Only `switchyard.lib` and `switchyard.telemetry` are included here. The
  upstream CLI, server, and experimental subpackages are intentionally
  omitted because NeMo Platform does not depend on them.

  The vendored snapshot retains its own LICENSE and NOTICE files in:
    plugins/nemo-switchyard/vendor/switchyard/

--------------------------------------------------------------------------------
services/guardrails/callouts/internal/server/
  callout_server.go and callout_server_test.go
  Copyright 2024 Google LLC
  License: Apache-2.0
  Modifications by NVIDIA: Added OpenTelemetry instrumentation and minor edits.

  Originally derived from Google's Envoy external processing examples.
  Both files retain the original Google Apache-2.0 header with an
  additional NVIDIA modification header.

--------------------------------------------------------------------------------
services/auditor/third-party/
  Garak v0.14.1 — LLM vulnerability scanner
  License: Apache-2.0
  Home: https://github.com/NVIDIA/garak

  This directory contains a pyproject.toml and lockfile used to collect
  Garak and its transitive dependencies for license auditing. No vendored
  source code is present; Garak is installed at build time from PyPI.

--------------------------------------------------------------------------------
web/packages/studio/src/generated/styles.css
  Generated stylesheet copied from NVIDIA Kaizen UI Foundations CDN assets:
    https://webassets.nvidia.com/kaizen-ui-foundations/0.607.4/base-external.css
    https://webassets.nvidia.com/kaizen-ui-foundations/0.607.4/components.css

  The base-external.css portion includes Lucide icon CSS/SVG data mapped to
  NVIDIA icon class names.

  Lucide Icons CSS
  Copyright (c) for portions of Lucide are held by Cole Bemis 2013-2022
  as part of Feather (MIT). All other copyright (c) for Lucide are held
  by Lucide Contributors 2022.
  License: ISC
  Home: https://lucide.dev

  This generated file includes Lucide icon definitions with names remapped
  to NVIDIA icon names. The original ISC license notice is preserved inline.
  The file is regenerated by scripts/fetch-styles.ts from upstream CDN sources.