> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orbit.devotel.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Open source attribution

> Required notices for the open source software Orbit by Devotel uses or redistributes

# Open source attribution

Orbit by Devotel is built on top of several open source projects. This
page satisfies Apache-2 License §4 and similar redistribution-notice
requirements for every OSS component shipped as part of the platform.

The notices below are the minimum required by the upstream licenses.
Full upstream `LICENSE` and `NOTICE` files are vendored alongside each
component in the Orbit source tree and are NOT stripped or modified.

***

## Orbit Media

**Upstream:** [`livekit/livekit`](https://github.com/livekit/livekit) — the
LiveKit OSS Selective Forwarding Unit.

**Upstream license:** Apache License 2.0.

**What Orbit ships:** a Devotel fork (`@orbit/media-server`) deployed
into our GKE cluster as the SFU media plane for multi-party voice,
video rooms, and server-side recording. A matching browser SDK is
published as [`@orbit/media-client`](https://www.npmjs.com/package/@orbit/media-client).

**Required notice (Apache-2 §4):**

> Copyright 2021–present LiveKit, Inc.
>
> Licensed under the Apache License, Version 2.0 (the "License"); you
> may not use this file except in compliance with the License. You may
> obtain a copy of the License at
>
> [http://www.apache.org/licenses/LICENSE-2.0](http://www.apache.org/licenses/LICENSE-2.0)
>
> Unless required by applicable law or agreed to in writing, software
> distributed under the License is distributed on an "AS IS" BASIS,
> WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
> implied. See the License for the specific language governing
> permissions and limitations under the License.
>
> Portions of this work have been modified by Devotel for the Orbit
> platform; modifications are tracked in the `@orbit/media-server`
> repository changelog and remain Apache-2 licensed.

***

## drachtio

**Upstream:** [`drachtio/drachtio-server`](https://github.com/drachtio/drachtio-server) —
the SIP signaling server we run as the Orbit SBC alongside Jambonz.

**Upstream license:** MIT License.

**What Orbit ships:** unmodified `drachtio-server` builds packaged
into our `sbc-sip` StatefulSet; configured via Jambonz and a thin
Orbit-side wrapper.

**Required notice (MIT):**

> Copyright (c) Dave Horton and drachtio.org contributors.
>
> Permission is hereby granted, free of charge, to any person
> obtaining a copy of this software and associated documentation files
> (the "Software"), to deal in the Software without restriction,
> including without limitation the rights to use, copy, modify, merge,
> publish, distribute, sublicense, and/or sell copies of the Software,
> and to permit persons to whom the Software is furnished to do so,
> subject to the following conditions:
>
> The above copyright notice and this permission notice shall be
> included in all copies or substantial portions of the Software.

***

## rtpengine

**Upstream:** [`sipwise/rtpengine`](https://github.com/sipwise/rtpengine) — the
RTP/SRTP media proxy we use for codec transcoding and NAT traversal
on PSTN-to-SIP bridging.

**Upstream license:** GNU General Public License v3 (GPLv3).

**What Orbit ships:** unmodified `rtpengine` builds running as a
sidecar to the SBC. Orbit does NOT link `rtpengine` source into any
proprietary binary — it runs as a separate process with a documented
NG control protocol, so the GPL boundary is preserved.

**Required notice (GPLv3 §5):**

> Copyright (C) 2010–present Sipwise GmbH.
>
> This program is free software: you can redistribute it and/or modify
> it under the terms of the GNU General Public License as published by
> the Free Software Foundation, either version 3 of the License, or
> (at your option) any later version.
>
> This program is distributed in the hope that it will be useful, but
> WITHOUT ANY WARRANTY; without even the implied warranty of
> MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
> General Public License for more details.

***

## Jambonz

**Upstream:** [`jambonz/jambonz-feature-server`](https://github.com/jambonz/jambonz-feature-server)
and the surrounding component family (`jambonz-api-server`,
`sbc-sip-server`, etc.).

**Upstream license:** MIT License.

**What Orbit ships:** Jambonz running in our voice-edge GKE cluster as
the call-control layer between the carrier and Orbit Media / AI agent
runtimes. We add an Orbit-side helm chart and a few configuration
overlays; no upstream source modifications are redistributed.

**Required notice (MIT):**

> Copyright (c) Dave Horton and the Jambonz contributors.
>
> Permission is hereby granted, free of charge, to any person
> obtaining a copy of this software and associated documentation files
> (the "Software"), to deal in the Software without restriction,
> including without limitation the rights to use, copy, modify, merge,
> publish, distribute, sublicense, and/or sell copies of the Software,
> and to permit persons to whom the Software is furnished to do so,
> subject to the following conditions:
>
> The above copyright notice and this permission notice shall be
> included in all copies or substantial portions of the Software.

***

## coturn

**Upstream:** [`coturn/coturn`](https://github.com/coturn/coturn) —
TURN/STUN relay used by browser softphone clients behind symmetric
NAT.

**Upstream license:** BSD 3-Clause "New" or "Revised" License.

**What Orbit ships:** unmodified `coturn` builds, deployed via the
helm chart at `infrastructure/helm/coturn/`.

**Required notice (BSD-3-Clause):**

> Copyright (c) 2011, 2012, 2013 Citrix Systems and other contributors.
> All rights reserved.
>
> Redistribution and use in source and binary forms, with or without
> modification, are permitted provided that the following conditions
> are met:
>
> 1. Redistributions of source code must retain the above copyright
>    notice, this list of conditions and the following disclaimer.
> 2. Redistributions in binary form must reproduce the above copyright
>    notice, this list of conditions and the following disclaimer in
>    the documentation and/or other materials provided with the
>    distribution.
> 3. Neither the name of the project nor the names of its
>    contributors may be used to endorse or promote products derived
>    from this software without specific prior written permission.
>
> THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
> "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES ARE DISCLAIMED. IN NO
> EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY
> DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
> DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
> GOODS OR SERVICES) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY.

***

## Reporting an attribution gap

If you spot OSS code in any Orbit deliverable (npm package, container
image, public asset, doc) whose upstream license is not honoured on
this page, email `legal@devotel.io` with the upstream repo URL and the
location in our distribution where it appears. We treat attribution
gaps as P1 — they're fixed inside one business day and a corrected
attribution shipped with the next release.

The `infrastructure/runbooks/livekit-cloud-decom-checklist-2026-05-14.md`
runbook is the operational cutover plan that retired our use of the
hosted LiveKit Cloud service in favour of the in-house Orbit Media
fork. The Apache-2 attribution above continues to apply to every
release that ships the fork.
