# Dependencies and License Compliance

MoonRule is licensed under the Apache License 2.0. Its production dependency surface is intentionally small and declared in `moon.mod`.

| Module | Declared version | Purpose | License | Source |
|---|---:|---|---|---|
| `moonbitlang/core` | provided by the MoonBit toolchain | JSON, strings, collections, testing and benchmarking primitives | Apache-2.0 | <https://github.com/moonbitlang/core> |
| `moonbitlang/x` | `0.4.47` | filesystem and process arguments used by the CLI | Apache-2.0 | <https://github.com/moonbitlang/x> |

No third-party images, fonts, generated media, copied parser sources, or bundled binary assets are included in the repository. Example JSON data is project-authored and contains no real personal information or secrets.

Dependency versions are controlled through `moon.mod` and resolved by the MoonBit package manager. Before a release, maintainers should review dependency changes, run the complete CI workflow, and confirm that declared licenses remain compatible with Apache-2.0 distribution.