ML Kit Barcode Scanning (unbundled)
com.google.android.gms:play-services-mlkit-barcode-scanning · v18.3.1 · Google Play Services Terms
Powers the inline barcode reader inside the Food logger.
Credits
Open-source licences.
OHD Connect is built on the shoulders of giants. Every library, framework and dataset we depend on, listed with upstream links and SPDX identifiers so anyone — auditors, packagers, curious users — can verify the supply chain end to end.
Apache-2.0 OR MIT OHD Connect itself is dual-licensed. Pick whichever fits your project.
Jetpack & AndroidX
The Android UI & runtime stack.
Every Compose, Lifecycle, Activity, CameraX, Health Connect, WorkManager and Security-Crypto module the app pulls in. All Apache-2.0.
Jetpack Compose (UI)
androidx.compose.ui:ui · BOM 2024.10.01 · Apache-2.0
Compose Foundation
androidx.compose.foundation:foundation · BOM 2024.10.01 · Apache-2.0
Material 3
androidx.compose.material3:material3 · BOM 2024.10.01 · Apache-2.0
Material Icons Extended
androidx.compose.material:material-icons-extended · BOM 2024.10.01 · Apache-2.0
Navigation Compose
androidx.navigation:navigation-compose · v2.8.4 · Apache-2.0
Lifecycle Runtime KTX
androidx.lifecycle:lifecycle-runtime-ktx · v2.8.7 · Apache-2.0
Activity Compose
androidx.activity:activity-compose · v1.9.3 · Apache-2.0
Core KTX
androidx.core:core-ktx · v1.13.1 · Apache-2.0
Security Crypto
androidx.security:security-crypto · v1.1.0-alpha06 · Apache-2.0
Health Connect Client
androidx.health.connect:connect-client · v1.1.0-alpha07 · Apache-2.0
CameraX (core / camera2 / lifecycle / view)
androidx.camera:camera-* · v1.4.1 · Apache-2.0
WorkManager
androidx.work:work-runtime-ktx · v2.9.1 · Apache-2.0
Google Play Services
ML Kit & barcode scanning.
The unbundled barcode scanner and the fullscreen code-scanner UI used as a fallback when CameraX can't be bound. Both ship under the Google Play Services terms — link below.
Google Code Scanner
com.google.android.gms:play-services-code-scanner · v16.1.0 · Google Play Services Terms
Fullscreen scanner fallback when CAMERA permission is denied.
Other libraries
Identity, FFI, Kotlin runtime.
AppAuth-Android
net.openid:appauth · v0.11.1 · Apache-2.0
OIDC code-flow + PKCE against your storage authorisation server.
JNA (Java Native Access)
net.java.dev.jna:jna · v5.14.0 · Apache-2.0
Dual-licensed Apache-2.0 OR LGPL-2.1+; OHD elects the Apache option.
Guava (Android)
com.google.guava:guava · v33.3.1-android · Apache-2.0
ListenableFuture plumbing for CameraX.
Kotlin Standard Library
org.jetbrains.kotlin:kotlin-stdlib · v1.9+ · Apache-2.0
Kotlin Coroutines
org.jetbrains.kotlinx:kotlinx-coroutines-core · v1.8+ · Apache-2.0
Tooling & tests
Test runners and screenshot harnesses.
JUnit 4
junit:junit · v4.13.2 · EPL-1.0
AndroidX Test (ext:junit / rules)
androidx.test.* · v1.2.1 / v1.6.1 · Apache-2.0
Espresso Core
androidx.test.espresso:espresso-core · v3.6.1 · Apache-2.0
UI Automator
androidx.test.uiautomator:uiautomator · v2.3.0 · Apache-2.0
Paparazzi
app.cash.paparazzi · Gradle plugin · Apache-2.0
Layout-rendered screenshot tests for the design-system components.
Native dependencies
The Rust core inside the .so.
Each Android ABI in the APK ships a single shared object built from the OHD storage workspace. That binary statically links a long tail of Rust crates — rusqlite (SQLCipher), uniffi, connectrpc, quinn (HTTP/3), openssl-src, and others. Rather than mirror every transitive crate version here, the canonical list lives in the storage workspace.
OHD Storage core
storage/Cargo.toml · Apache-2.0 OR MIT
Full transitive crate list resolves out of storage/Cargo.lock.
Generate a fresh attribution sheet with cargo about or
cargo-deny licenses against that workspace.
Data sources
Public datasets we read at runtime.
OHD Connect queries one external dataset today: Open Food Facts, for product lookup in the Food logger. The data is under ODbL — please respect attribution if you build on top of the same query path.
Open Food Facts
data.openfoodfacts.org · rolling · ODbL-1.0
Product attributes, nutritional metadata, and barcode-to-product resolution.
OHD Connect itself
Apache-2.0 OR MIT.
Pick whichever licence fits your project. The full text of both lives in the repository.