Last updated: November 7, 2026. This is an English translation; the Spanish text prevails.
NEXUS is proprietary software of ZENISO SOFTWORKS, but it includes third-party components that are governed by their own licenses. This page lists everything third-party that ships with NEXUS 2.0, since 2.0.1, for Windows (the app, the dedicated server and NexusBridge) and for Android, with its license and the versions it shipped in. It also publishes, to download, the full text of all those notices (section 7), the source code of the TAP driver (section 1) and that of FFmpeg and WebRTC for what shipped up to 2.0.26 (section 3). Versions up to 2.0.26 carried only part of the notices inside; since 2.0.28, the app carries all of them in Settings > About > Third-party software > View licenses (the Licenses screen) and, on Windows, also in the THIRD-PARTY-NOTICES.txt file next to the executable. For versions before 2.0.1, write to us at legal@zenisosoftworks.com. Nothing in the Terms of Use limits the rights these licenses give you over those components.
- What it is: the virtual network driver NexusBridge uses on Windows. Copyright (C) 2002-2014 OpenVPN Technologies, Inc.; the NSIS installer, Copyright (C) 2014 OpenVPN Technologies, Inc. and (C) 2012 Alon Bar-Lev.
- License: GNU General Public License, version 2 (GPL-2.0). Full text: https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt (also included in each source archive below, as COPYRIGHT.GPL, together with the project's COPYING notice).
- What is distributed: the 9.27.0 driver files exactly as OpenVPN publishes them, unmodified and with their Microsoft signature (tap0901.sys, tap0901.cat and OemVista.inf), in NEXUS for Windows: in the tap\ folder from 2.0.1 to 2.0.26, and in bridge\tap\ since 2.0.22. It is a separate program: NEXUS installs it on Windows and NexusBridge uses it through its device interface. No NEXUS program contains driver code.
- Earlier versions: up to NEXUS 2.0.21, including the versions before 2.0, NEXUS also included OpenVPN's installer tap-windows-9.24.7-I601-Win10.exe, unmodified (TAP-Windows 9.24.7, same project and same license).
- The notice inside: Windows packages since 2.0.28 carry this notice, with the offer, in the Licenses screen and next to the driver (LICENSE-tap-windows6.txt). For earlier versions, this page applies.
Corresponding source code, to download. These are the archives GitHub generates for those commits of OpenVPN's official repository (https://github.com/OpenVPN/tap-windows6), unmodified:
- TAP-Windows6 9.27.0 (tag 9.27.0, commit 0cad8664c2a51832df61f2e1853b6da317d1c129): https://nexus.zenisosoftworks.com/nexus/legal/fuentes/tap-windows6-9.27.0.tar.gz · SHA-256 5e807ab86740b654a2a63866b8749f582f16258d8e4dbcb6813be488ec59dde3
- TAP-Windows 9.24.7 (commit eb764efe1579dc0d9d64a64186b16491af37de88; that version has no tag): https://nexus.zenisosoftworks.com/nexus/legal/fuentes/tap-windows6-9.24.7.tar.gz · SHA-256 e072bda8212f19dba569cfb4be00ff95f14d615d2b30650ce3f9b88fdc6e617d
About 9.24.7: that version has no tag in OpenVPN's repository. Commit eb764ef is the only one with version 9.24.7 and was the last one on the master branch when OpenVPN signed that installer (on September 7, 2022, according to its signature timestamp). Since the installer cannot be rebuilt identically, the match cannot be verified byte for byte: it is the best possible one.
Written offer: for at least three years after we last distribute each of these versions, anyone can ask us for a complete copy of its corresponding source code, free of charge, by writing to legal@zenisosoftworks.com. The offer stands even if the download above is not available.
Shipped in the app (next to lannexus.exe) and, where it applies, in the dedicated server (wan_server folder), in every version since 2.0.1 unless stated otherwise.
- WebRTC (real-time voice and video, libwebrtc.dll): The WebRTC project authors / Google LLC. BSD-3-Clause license, with Google's additional patent grant. Since 2.0.28, NEXUS builds libwebrtc.dll from the WebRTC M144 source code (webrtc-sdk, m144_release branch, commit ec20be4) with only the VP8 and Opus codecs, also in wan_server. Up to 2.0.26 it was the WebRTC M144 build published by the flutter-webrtc 1.4.0 project, unmodified.
- What libwebrtc.dll contains: webrtc-sdk's libwebrtc C++ wrapper (MIT); third-party pieces from WebRTC's own tree (Takuya Ooura's FFT, Wilco Dijkstra's square root, Mark Olesen's FFT, SpanDSP's G.711 and G.722, and sigslot: permissive licenses and public domain); pffft (BSD-style); RNNoise, CRC32C, libsrtp, libyuv and Opus (BSD-3-Clause); BoringSSL and Abseil (Apache-2.0); libvpx 1.15.2, VP8 only (BSD-3-Clause, with a patent grant); libjpeg-turbo 3.1.0 (IJG, BSD-3-Clause and Zlib; this software is based in part on the work of the Independent JPEG Group), and LLVM's libc++ (Apache-2.0 with the LLVM exception). Up to 2.0.26 it also contained libvpx's VP9, libaom 3.13.1 (BSD-2-Clause, with the AOMedia Patent License 1.0), dav1d (BSD-2-Clause), Cisco's OpenH264 (BSD-2-Clause) and FFmpeg (below).
- FFmpeg (inside libwebrtc.dll, only up to 2.0.26): part of FFmpeg, the copy maintained by Chromium (third_party/ffmpeg) built without FFmpeg's GPL parts, which WebRTC used to decode H.264 video, statically linked inside libwebrtc.dll. License: GNU Lesser General Public License, version 2.1 or later (https://www.gnu.org/licenses/old-licenses/lgpl-2.1.txt). Since 2.0.28, NEXUS no longer includes it. Its corresponding source code, and WebRTC's to relink libwebrtc.dll with another version of FFmpeg, are in section 3.
- OpenH264 (inside libwebrtc.dll, only up to 2.0.26): Cisco Systems' H.264 video encoder, built from its source code (commit 652bdb7 from WebRTC M144's DEPS), BSD-2-Clause license. It is not the OpenH264 binary Cisco publishes, so it is not covered by the H.264 patent license Cisco pays for that binary. Since 2.0.28, NEXUS no longer includes it: voice and video over WebRTC use only Opus and VP8.
- flutter_webrtc (the WebRTC plugin, flutter_webrtc_plugin.dll): MIT; includes Milo Yip's svpng (BSD-3-Clause) and, since 2.0.55, RNNoise 0.1.1 (Mozilla, Jean-Marc Valin, Xiph.Org Foundation and Mark Borgerding; BSD-3-Clause), for the microphone's «Strong» noise suppression.
- Opus (the voice audio codec, opus.dll, libopus 1.6.1): Xiph.Org, Skype Limited, Octasic, Jean-Marc Valin and others. BSD-3-Clause.
- Flutter engine (flutter_windows.dll and icudtl.dat) and its components (ANGLE, SwiftShader, Skia, HarfBuzz, ICU, zlib, libjpeg-turbo, BoringSSL and others), plus Flutter's C++ wrapper built into lannexus.exe and WanNexusDedicatedServer.exe: Google LLC and contributors. Several licenses (BSD-3-Clause, Apache-2.0, MIT, Zlib, Unicode and others).
- The Material Icons font (Google LLC): Creative Commons Attribution 4.0 International, according to the license file the Flutter SDK ships with the font. In wan_server it is cut down to the icons it uses.
- The Noto Color Emoji 2.051 font (Google Inc.), unmodified, in the app since 2.0.52 (the emoji, drawn the same everywhere): SIL Open Font License 1.1.
- The DM Sans (The DM Sans Project Authors) and Space Grotesk (The Space Grotesk Project Authors) fonts, unmodified, in the app since 2.0.84 (the text and headings of the NEXUS look): SIL Open Font License 1.1.
- Flutter plugins with their own DLL (desktop_drop and desktop_multi_window, Apache-2.0; flutter_local_notifications_windows and url_launcher_windows, BSD-3-Clause, and jni, BSD-3-Clause, with dartjni.dll in wan_server since 2.0.26; hotkey_manager_windows, screen_retriever_windows, tray_manager and window_manager, MIT), bitsdojo_window (MIT), built into lannexus.exe and WanNexusDedicatedServer.exe, and the Dart packages of the app and of the dedicated server (BSD-3-Clause, MIT, Apache-2.0 and similar). autotrie 2.0.0, built into the app, is MPL-2.0: its source code is at https://pub.dev/packages/autotrie/versions/2.0.0. Since 2.0.73, image (Brendan Duncan, MIT), built into the app and the dedicated server, rebuilds media channel photos when the dedicated server does not send them to be checked. Up to 2.0.4, wan_server also included media_kit_video_plugin.dll and volume_controller_plugin.dll (MIT; their notices are in part 3 of the file in section 7).
- Third-party headers built into lannexus.exe: Microsoft's C++/WinRT (MIT; also in flutter_local_notifications_windows.dll), AMD's AMF SDK 1.5.2 (MIT), NVIDIA's nvEncodeAPI.h (MIT) and The Khronos Group's Vulkan headers (Apache-2.0; since 2.0.52, also in liblannexus_native.so on Android). The AMD and NVIDIA video engines come with their drivers and the Vulkan loader with the driver or the system: they do not ship with NEXUS.
- nexus-sfu (the voice and camera SFU of the dedicated server in Mode 1: nexus-sfu.exe in the wan_server folder and in the console dedicated server, since 2.0.77): ZENISO SOFTWORKS code built with Go (The Go Authors, BSD-3-Clause) and the Pion WebRTC libraries (The Pion community, MIT), plus golang.org/x, google/uuid and wlynxg/anet (BSD-3-Clause), unmodified.
- The NXR2 stream viewer of the web version (in the browser, since 2.0.78): ZENISO SOFTWORKS code compiled to WebAssembly with Emscripten, which carries inside, unmodified, its runtime (MIT or University of Illinois/NCSA), the musl libc (MIT) and the dlmalloc allocator (public domain). Voice, camera and screen in the browser use the browser's own WebRTC.
- nexus_e2ee (end-to-end encryption of direct messages, since 2.0.80: nexus_e2ee.dll next to lannexus.exe, libnexus_e2ee.so on Android and nexus_e2ee.wasm on the web): ZENISO SOFTWORKS code in Rust that carries inside, statically linked and unmodified, vodozemac, matrix-pickle and prost (Apache-2.0), curve25519-dalek, ed25519-dalek, x25519-dalek and subtle (BSD-3-Clause) and crates from RustCrypto, serde, rand and the Rust standard library (MIT).
- ViGEm (virtual gamepad): the official installer ViGEmBus_1.22.0_x64_x86_arm64.exe, unmodified (Nefarius Software Solutions e.U., BSD-3-Clause), and ViGEmClient.dll 1.16.106 (Benjamin Höglinger-Stelzer, MIT; next to lannexus.exe since 2.0.10).
The libwebrtc.dll that shipped up to 2.0.26 (the app and wan_server) had FFmpeg statically linked, under the LGPL-2.1 license. Its corresponding source code is the copy of FFmpeg maintained by Chromium (https://chromium.googlesource.com/chromium/third_party/ffmpeg) at commit 583a135, the one pinned by WebRTC M144's DEPS (the same across the whole m144_release branch), with its license (COPYING.LGPLv2.1) inside. To relink libwebrtc.dll with another version of FFmpeg (LGPL-2.1, section 6) we also publish the source code of WebRTC M144 (https://github.com/webrtc-sdk/webrtc) and of the libwebrtc wrapper (https://github.com/webrtc-sdk/libwebrtc); the other dependencies are the ones pinned by that WebRTC commit's DEPS, all public. These are the archives git archive generates for those commits, unmodified:
- FFmpeg (Chromium's copy), chromium/third_party/ffmpeg, commit 583a135878d38065ef1e3d08cd80b7fbe76e0a7b: https://nexus.zenisosoftworks.com/nexus/legal/fuentes/chromium-ffmpeg-583a135878d3.tar.gz · SHA-256 db06e852c9ba2eea85c0c9b9409f6a5cb6ccfbb984ecc421841f9ff483ac213c
- WebRTC (webrtc-sdk, m144_release), M144, commit ec20be4f944f94f21940007561f9127e303da4c2: https://nexus.zenisosoftworks.com/nexus/legal/fuentes/webrtc-sdk-webrtc-ec20be4f944f.tar.gz · SHA-256 37d420032bf9ae1b8b37d99c3a41dacb73f5945b2b25910841865170f545f38e
- libwebrtc (webrtc-sdk's C++ wrapper), m144 (PR #134), commit 7864c549b5391ebea7996ed1e44a34e4b6a49966: https://nexus.zenisosoftworks.com/nexus/legal/fuentes/webrtc-sdk-libwebrtc-7864c549b539.tar.gz · SHA-256 96d0c7d9698f8c267da2f2247daa9f37d05f5a1d3b92b3c342b0dbb88f8556c3
About the match: libwebrtc.dll is the build flutter-webrtc 1.4.0 published on March 17, 2026, and the project did not publish which commits it used. The FFmpeg commit is the only one WebRTC M144 uses. The WebRTC and wrapper commits are the ones that were published that day and whose headers match that build's; since the DLL cannot be rebuilt identically, the match cannot be verified byte for byte: it is the best possible one.
These files are offered at least until October 3, 2029; we also provide them at no cost if you ask at legal@zenisosoftworks.com.
Shipped in NEXUS for Android (the APK and the Google Play package):
- WebRTC for Android (libjingle_peerconnection_so.so and its Java code, from the io.github.webrtc-sdk:android 144.7559.01 package): The WebRTC project authors / Google LLC, BSD-3-Clause with Google's patent grant. It contains the same as the Windows one up to 2.0.26 except the libwebrtc wrapper, libjpeg-turbo, OpenH264 and FFmpeg (that is, with libvpx's VP9, libaom and dav1d), plus The Chromium Authors' jni_zero (BSD-3-Clause). Android's H.264 and H.265 are the phone's own (MediaCodec); NEXUS does not negotiate them over WebRTC.
- flutter_webrtc (MIT), with Android code from Shiguredo and Lyo Kato (Apache-2.0) and from react-native-webrtc (MIT).
- Flutter engine (libflutter.so and the io.flutter Android code): the same components and licenses as on Windows.
- Android libraries, all Apache-2.0: AndroidX (core, appcompat, activity, fragment, lifecycle, window, browser, media, preference, datastore and others), Kotlin and kotlinx.coroutines, Gson, audioswitch (by Twilio) and ReLinker. Also Google's protobuf-lite (BSD-3-Clause), repackaged inside androidx.datastore.
- The Material Icons, Noto Color Emoji, DM Sans and Space Grotesk fonts and the Dart plugins and packages (BSD-3-Clause, MIT, Apache-2.0 and similar), as on Windows.
- libsodium (Frank Denis, ISC): statically linked into libnexusbridge.dll in every Windows version, and since 2.0.22 also into bridge\NexusBridge.exe and Android's libnexusbridge.so.
- Asio 1.30.2 (Christopher M. Kohlhoff, Boost Software License 1.0): built into those same files. That license requires no notice for compiled code.
- MinGW-w64 runtime (the mingw-w64 CRT and winpthreads: BSD-style, MIT and BSD-3-Clause licenses): statically linked into libnexusbridge.dll from 2.0.1 to 2.0.21, together with libstdc++ and libgcc, under GPL-3.0 with the GCC Runtime Library Exception, which requires nothing for compiled code. Since 2.0.22, NexusBridge is built with Microsoft Visual C++ and contains none of this.
- Microsoft Visual C++ runtime (msvcp140.dll, msvcp140_1.dll, msvcp140_2.dll, vcruntime140.dll, vcruntime140_1.dll and concrt140.dll): Copyright (C) Microsoft Corporation. Shipped unmodified next to lannexus.exe and in wan_server, in NEXUS for Windows, as Microsoft Visual Studio redistributable code and under its license terms. bridge\NexusBridge.exe (since 2.0.22) and nexus_updater.exe have that runtime statically linked.
- devcon.exe (Windows Device Console, version 10.0.22621.382): a Microsoft Corporation tool from the Windows Driver Kit, unmodified and with Microsoft's signature, that shipped in the Windows packages from 2.0.1 to 2.0.26 (in tap\ and, since 2.0.22, in bridge\tap\) to install the TAP driver. Since 2.0.28, NEXUS no longer includes it: NexusBridge installs the driver on its own.
A text file with the copyright notices and the full license texts of everything above, to download:
- https://nexus.zenisosoftworks.com/nexus/legal/avisos/nexus-avisos-de-terceros-2026-11-06.txt · SHA-256 aaa8919e9834bb3dd16ba6aa8a1252702e94fe13f6db27787cf3c854feb26e50
It contains the same as THIRD-PARTY-NOTICES.txt of NEXUS for Windows since 2.0.28 (the native components and the Dart packages) and, separately, what shipped in earlier versions and no longer does. It also applies to the versions that did not carry these notices inside.
NEXUS servers use the IP to Country Lite database by DB-IP to find the country of an IP address and pick the nearest region. The database does not ship with the app. IP Geolocation by DB-IP: https://db-ip.com. License: Creative Commons Attribution 4.0 International (https://creativecommons.org/licenses/by/4.0/).
Questions about these licenses and source code requests: legal@zenisosoftworks.com.
ZENISO SOFTWORKS, Costa Rica.