# Third-party notices The packaged extension contains code from these production dependency families: - `vscode-languageclient`, `vscode-languageserver-protocol`, `vscode-languageserver-types`, and `vscode-jsonrpc`: MIT. - `semver` and the runtime dependency tree's `minimatch`: ISC. - `balanced-match` and `brace-expansion`: MIT. Exact versions, integrity hashes, dependency relationships, and license fields are recorded in `package-lock.json` and the CycloneDX SBOM distributed with the VSIX. Build-only and test-only dependencies are not shipped in the VSIX.