Technology Stack - Releases 1.2.1.0 and Subsequent
This page lists the current baseline technology stack used to build MOSIP. We prioritise free and open-source components with a clear long-term support (LTS) path. In deployments, many components can be swapped for equivalent open-source or commercial alternatives, based on your architecture and operational needs.
Operating System
Ubuntu Server
24.04
Creative Commons License v 3.0
No
No
NA
Infrastructure
Cloud - Azure/AWS
NA - Cloud tool
Commercial
Yes
Depends on Deployment Arch.
Depends on Deployment Arch.
Development - Language Runtime
Java SE 21
OpenJDK 21
GPL-2.0 + CPE
No
Yes
NA
Development - Expression language
mvel2
2.5.2.Final
Apache License Version 2.0, January 2004
Development - Scheduling
quartz
2.3.2
Apache License Version 2.0, January 2004
Development - Internalization
nv-i18n
1.29
Apache License 2.0
Development - UI Application framework
JavaFx
OpenJFX 11.0.2
GPL v2 + Classpath
No
Yes
NA
Development - Application Framework
Vert.x
3.9.13
Apache License 2.0
No
Yes
NA
Development - Application Framework
Spring
6.1.x
Apache License 2.0
No
Yes
NA
Development - Utilities
Apache commons(60+ to be considered)
Latest version
Apache License 2.0
No
Yes
NA
Development - Data Grid
Apache Ignite
2.3.0
Apache License 2.0
No
Yes
NA
Development - Object Mapper
Orika
1.5.2
Apache License 2.0
No
Yes
NA
Development - validator
Hibernate validator
8.0.1.Final
Apache Software License 2.0
No
Yes
NA
Development - Encryption
BouncyCastle
1.78
Adaptation of MIT X11 License
No
Yes
NA
Development - JSON marshal/unmarshal
Jackson
2.15.4
Apache License 2.0
No
Yes
NA
Development - Unit Testing
Junit
5.x and above
Common Public License - v 1.0
No
No
NA
Development - Log
logback
1.4.14
GNU Lesser GPL Version 2.1
No
Yes
NA
Development - Templating
velocity
1.7
Apache License 2.0
No
Yes
NA
Development - IDE
Eclipse
Latest version
Eclipse Public License Version 2.0
No
No
NA
Development - Unit Testing
Karma
4.1.0
MIT License
No
No
NA
Development - Unit Testing
Jasmine
3.4.0
MIT License
No
No
NA
Development - API Documentation
Swagger
2.0.7
Apache License 2.0
No
No
NA
Development - Application Server
Tomcat server
10.x
Apache License 2.0
No
Yes
NA
Development - Orchestration
Apache Camel
2.23.0
Apache License 2.0
No
Yes
NA
Development - Database
H2 DB
2.2.224
MPL and EPL
No
Yes
NA
Development - Database
PostgreSQL
Server: 15
Postgresql License
Yes
No
NA
Development - Database
Derby DB
10.13.1.1
Apache License 2.0
Development - Database Modeling tool
PG Data Modeler
0.9.3
Commercial
No
Yes
Nominal
DevOps tools
Jira
6.4 and above
Not Open source
Testing tools
Java profiler
13.0.7
Open Source License
No
NA
DevOps tools
SonarLint
v3.5
GNU GPL
DevOps tools
GitHub
NA - Cloud tool
Commercial - Github
DevOps tools
SonarQube
6.7.3 LTS
GNU GPL
DevOps tools
Maven
3.9.x
Apache License 2.0
DevOps tools
Docker
18.03.x CE
Apache 2.0
DevOps tools
Ansible
2.2
GNU GPL v3.0
DevOps tools
Github actions
NA - Cloud tool
DevOps tools
Travis
NA - Cloud tool
MIT License
DevOps tools
Glowroot
NA - Cloud tool
Apache License 2.0
DevOps tools
Prometheus
2.45.0
Apache License 2.0
DevOps tools
Grafana
1.24.6
Apache License 2.0
DevOps tools
Python
3.x
PSF License
Messaging
ActiveMQ
2.39.0 and 1.1.5
Apache License 2.0
Messaging
Apache Kafka
3.2.1-debian-11-r9
Apache License 2.0
Caching
Hazelcast
NA
Apache License 2.0
Object Store
MinIO
2025.2.28-debian-12-r1
GNU AGPL v3
Web Server/HTTP proxy server
Nginx
1.24.0 (Ubuntu)
2-clause BSD license
IAM
KeyCloak
7.1.18
Apache License 2.0
DevOps tools
RKE2
v1.28.9+rke2r1
Apache License 2.0
DevOps tools
Helmsman
v3.17.1
Apache License 2.0
DevOps tools
istioctl
v1.22
Apache License 2.0
DevOps tools
Terraform
v1.8.5
BUSL 1.1
DevOps tools
ELK Elasticsearch
v7.17.2
Elastic License 2.0 (ELv2) and SSPL 1.0 (dual-licensed)
DevOps tools
ClamAV
1.3.0_base
GNU GPL v2
DevOps tools
helm
v4.1.0
Apache License 2.0
SecOps tools
Burp suite Professional +
2025.11.16
PortSwigger - Burp suite Professional + / V1.7.33
Yes
No
Cost Of License
SecOps tools
Owasp zap
2.17.0
Apache License 2.0
No
No
NA
SecOps tools
postman
11.82.1
Postman Commercial License
Yes
No
NA
SecOps tools
drozer
2.x
BSD License
No
No
NA
SecOps tools
mobsf
4.4x
GPL v3
No
No
NA
SecOps tools
gitguardian
1.20.x
Proprietary
Yes
No
NA
SecOps tools
codeql
2.15.x
Apache 2.0
Yes
No
NA
SecOps tools
snyk
1.1302.1
Proprietary
Yes
No
NA
SecOps tools
codacy
V1.11.8
Proprietary
Yes
No
NA
SecOps tools
metasploit framework
6.4x
BSD Clause 3
No
No
NA
SecOps tools
gennymotion
3.4x
Proprietary
Yes
No
NA
SecOps tools
syft
1.40.x
Apache 2.0
No
No
NA
SecOps tools
Trivy
0.49.x
Apache 2.0
No
No
NA
SecOps tools
Grype
0.78.x
Apache 2.0
Yes
No
NA
SecOps tools
Frida
16.x
GNU GPL v 3.0
No
No
NA
SecOps tools
Gitleaks
8.18x
MIT License
No
No
NA
SecOps tools
TruffleHog
3.63.x
GNU GPL v 3.0
No
No
NA
SecOps tools
docker scout
Docker Desktop 24.x LTS
Proprietary
Yes
No
NA
SecOps tools
deduce
1.0.8
LGPL v 2.1
No
No
NA
SecOps tools
Openssl
3.0.13
Apache License 2.0
No
Yes
NA
Last updated
Was this helpful?