# Technology Stack - Releases 1.2.1.0 and Subsequent

This page lists the current baseline technology stack used to build MOSIP. We prioritise free and open-source components with a clear long-term support (LTS) path. In deployments, many components can be swapped for equivalent open-source or commercial alternatives, based on your architecture and operational needs.

<table><thead><tr><th width="148.703125">Domain</th><th width="128.03515625">Tools/Technologies</th><th width="123.48828125">Version</th><th width="160.9921875">Licence Type</th><th width="82.16015625">Commercial</th><th width="89">Production</th><th width="91">Cost</th><th data-hidden data-type="number">1</th></tr></thead><tbody><tr><td>Operating System</td><td>Ubuntu Server</td><td>24.04</td><td>Creative Commons License v 3.0</td><td>No</td><td>No</td><td>NA</td><td>2</td></tr><tr><td>Infrastructure</td><td>Cloud - Azure/AWS</td><td>NA - Cloud tool</td><td>Commercial</td><td>Yes</td><td>Depends on Deployment Arch.</td><td>Depends on Deployment Arch.</td><td>3</td></tr><tr><td>Development - Language Runtime</td><td>Java SE 21</td><td>OpenJDK 21</td><td>GPL-2.0 + CPE</td><td>No</td><td>Yes</td><td>NA</td><td>4</td></tr><tr><td>Development - Expression language</td><td>mvel2</td><td>2.5.2.Final</td><td>Apache License<br>Version 2.0, January 2004</td><td></td><td></td><td></td><td>5</td></tr><tr><td>Development - Scheduling</td><td>quartz</td><td>2.3.2</td><td>Apache License<br>Version 2.0, January 2004</td><td></td><td></td><td></td><td>6</td></tr><tr><td>Development - Internalization</td><td>nv-i18n</td><td>1.29</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>8</td></tr><tr><td>Development - UI Application framework</td><td>JavaFx</td><td>OpenJFX 11.0.2</td><td>GPL v2 + Classpath</td><td>No</td><td>Yes</td><td>NA</td><td>10</td></tr><tr><td>Development - Application Framework</td><td>Vert.x</td><td>3.9.13</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>11</td></tr><tr><td>Development - Application Framework</td><td>Spring</td><td>6.1.x</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>12</td></tr><tr><td>Development - Utilities</td><td>Apache commons(60+ to be considered)</td><td>Latest version</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>13</td></tr><tr><td>Development - Data Grid</td><td>Apache Ignite</td><td>2.3.0</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>14</td></tr><tr><td>Development - Object Mapper</td><td>Orika</td><td>1.5.2</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>15</td></tr><tr><td>Development - validator</td><td>Hibernate validator</td><td>8.0.1.Final</td><td>Apache Software License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>16</td></tr><tr><td>Development - Encryption</td><td>BouncyCastle</td><td>1.78</td><td>Adaptation of MIT X11 License</td><td>No</td><td>Yes</td><td>NA</td><td>17</td></tr><tr><td>Development - JSON marshal/unmarshal</td><td>Jackson</td><td>2.15.4</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>18</td></tr><tr><td>Development - Unit Testing</td><td>Junit</td><td>5.x and above</td><td>Common Public License - v 1.0</td><td>No</td><td>No</td><td>NA</td><td>20</td></tr><tr><td>Development - Log</td><td>logback</td><td>1.4.14</td><td>GNU Lesser GPL Version 2.1</td><td>No</td><td>Yes</td><td>NA</td><td>21</td></tr><tr><td>Development - Templating</td><td>velocity</td><td>1.7</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>22</td></tr><tr><td>Development - IDE</td><td>Eclipse</td><td>Latest version</td><td>Eclipse Public License Version 2.0</td><td>No</td><td>No</td><td>NA</td><td>24</td></tr><tr><td>Development - Unit Testing</td><td>Karma</td><td>4.1.0</td><td>MIT License</td><td>No</td><td>No</td><td>NA</td><td>25</td></tr><tr><td>Development - Unit Testing</td><td>Jasmine</td><td>3.4.0</td><td>MIT License</td><td>No</td><td>No</td><td>NA</td><td>26</td></tr><tr><td>Development - API Documentation</td><td>Swagger</td><td>2.0.7</td><td>Apache License 2.0</td><td>No</td><td>No</td><td>NA</td><td>27</td></tr><tr><td>Development - Application Server</td><td>Tomcat server</td><td>10.x</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>28</td></tr><tr><td>Development - Orchestration</td><td>Apache Camel</td><td>2.23.0</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>29</td></tr><tr><td>Development - Database</td><td>H2 DB</td><td>2.2.224</td><td>MPL and EPL</td><td>No</td><td>Yes</td><td>NA</td><td>31</td></tr><tr><td>Development - Database</td><td>PostgreSQL</td><td>Server: 15</td><td>Postgresql License</td><td>Yes</td><td>No</td><td>NA</td><td>32</td></tr><tr><td>Development - Database</td><td>Derby DB</td><td>10.13.1.1</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>33</td></tr><tr><td>Development - Database Modeling tool</td><td>PG Data Modeler</td><td>0.9.3</td><td>Commercial</td><td>No</td><td>Yes</td><td>Nominal</td><td>34</td></tr><tr><td>DevOps tools</td><td>Jira</td><td>6.4 and above</td><td>Not Open source</td><td></td><td></td><td></td><td>47</td></tr><tr><td>Testing tools</td><td>Java profiler</td><td>13.0.7</td><td>Open Source License</td><td>No</td><td>NA</td><td></td><td>48</td></tr><tr><td>DevOps tools</td><td>SonarLint</td><td>v3.5</td><td>GNU GPL</td><td></td><td></td><td></td><td>49</td></tr><tr><td>DevOps tools</td><td>GitHub</td><td>NA - Cloud tool</td><td>Commercial - Github</td><td></td><td></td><td></td><td>50</td></tr><tr><td>DevOps tools</td><td>SonarQube</td><td>6.7.3 LTS</td><td>GNU GPL</td><td></td><td></td><td></td><td>51</td></tr><tr><td>DevOps tools</td><td>Maven</td><td>3.9.x</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>52</td></tr><tr><td>DevOps tools</td><td>Docker</td><td>18.03.x CE</td><td>Apache 2.0</td><td></td><td></td><td></td><td>53</td></tr><tr><td>DevOps tools</td><td>Ansible</td><td>2.2</td><td>GNU GPL v3.0</td><td></td><td></td><td></td><td>54</td></tr><tr><td>DevOps tools</td><td>Github actions</td><td>NA - Cloud tool</td><td></td><td></td><td></td><td></td><td>55</td></tr><tr><td>DevOps tools</td><td>Travis</td><td>NA - Cloud tool</td><td>MIT License</td><td></td><td></td><td></td><td>56</td></tr><tr><td>DevOps tools</td><td>Glowroot</td><td>NA - Cloud tool</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>57</td></tr><tr><td>DevOps tools</td><td>Prometheus</td><td>2.45.0</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>58</td></tr><tr><td>DevOps tools</td><td>Grafana</td><td>1.24.6</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>59</td></tr><tr><td>DevOps tools</td><td>Python</td><td>3.x</td><td>PSF License</td><td></td><td></td><td></td><td>60</td></tr><tr><td>Messaging</td><td>ActiveMQ</td><td>2.39.0 and 1.1.5</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>61</td></tr><tr><td>Messaging</td><td>Apache Kafka</td><td>3.2.1-debian-11-r9</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>62</td></tr><tr><td>Caching</td><td>Hazelcast</td><td>NA</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>63</td></tr><tr><td>Object Store</td><td>MinIO</td><td>2025.2.28-debian-12-r1</td><td>GNU AGPL v3</td><td></td><td></td><td></td><td>64</td></tr><tr><td>Web Server/HTTP proxy server</td><td>Nginx</td><td>1.24.0 (Ubuntu)</td><td>2-clause BSD license</td><td></td><td></td><td></td><td>65</td></tr><tr><td>IAM</td><td>KeyCloak</td><td>7.1.18</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>66</td></tr><tr><td>DevOps tools</td><td>RKE2</td><td>v1.28.9+rke2r1</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>67</td></tr><tr><td>DevOps tools</td><td>Helmsman</td><td>v3.17.1</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>68</td></tr><tr><td>DevOps tools</td><td>istioctl</td><td>v1.22</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>69</td></tr><tr><td>DevOps tools</td><td>Terraform</td><td>v1.8.5</td><td>BUSL 1.1</td><td></td><td></td><td></td><td>70</td></tr><tr><td>DevOps tools</td><td>ELK Elasticsearch</td><td>v7.17.2</td><td>Elastic License 2.0 (ELv2) and SSPL 1.0 (dual-licensed)</td><td></td><td></td><td></td><td>71</td></tr><tr><td>DevOps tools</td><td>ClamAV</td><td>1.3.0_base</td><td>GNU GPL v2</td><td></td><td></td><td></td><td>72</td></tr><tr><td>DevOps tools</td><td>docker-buildx</td><td>docker/setup-buildx-action@v3.0.0</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>73</td></tr><tr><td>DevOps tools</td><td>helm</td><td>v4.1.0</td><td>Apache License 2.0</td><td></td><td></td><td></td><td>74</td></tr><tr><td>SecOps tools</td><td>Burp suite Professional +</td><td>2025.11.16</td><td>PortSwigger - Burp suite Professional + / V1.7.33</td><td>Yes</td><td>No</td><td>Cost Of License</td><td>75</td></tr><tr><td>SecOps tools</td><td>Owasp zap</td><td>2.17.0</td><td>Apache License 2.0</td><td>No</td><td>No</td><td>NA</td><td>76</td></tr><tr><td>SecOps tools</td><td>postman</td><td>11.82.1</td><td>Postman Commercial License</td><td>Yes</td><td>No</td><td>NA</td><td>77</td></tr><tr><td>SecOps tools</td><td>drozer</td><td>2.x</td><td>BSD License</td><td>No</td><td>No</td><td>NA</td><td>78</td></tr><tr><td>SecOps tools</td><td>mobsf</td><td>4.4x</td><td>GPL v3</td><td>No</td><td>No</td><td>NA</td><td>79</td></tr><tr><td>SecOps tools</td><td>gitguardian</td><td>1.20.x</td><td>Proprietary</td><td>Yes</td><td>No</td><td>NA</td><td>80</td></tr><tr><td>SecOps tools</td><td>codeql</td><td>2.15.x</td><td>Apache 2.0</td><td>Yes</td><td>No</td><td>NA</td><td>81</td></tr><tr><td>SecOps tools</td><td>snyk</td><td>1.1302.1</td><td>Proprietary</td><td>Yes</td><td>No</td><td>NA</td><td>82</td></tr><tr><td>SecOps tools</td><td>codacy</td><td>V1.11.8</td><td>Proprietary</td><td>Yes</td><td>No</td><td>NA</td><td>83</td></tr><tr><td>SecOps tools</td><td>metasploit framework</td><td>6.4x</td><td>BSD Clause 3</td><td>No</td><td>No</td><td>NA</td><td>84</td></tr><tr><td>SecOps tools</td><td>gennymotion</td><td>3.4x</td><td>Proprietary</td><td>Yes</td><td>No</td><td>NA</td><td>85</td></tr><tr><td>SecOps tools</td><td>syft</td><td>1.40.x</td><td>Apache 2.0</td><td>No</td><td>No</td><td>NA</td><td>86</td></tr><tr><td>SecOps tools</td><td>Trivy</td><td>0.49.x</td><td>Apache 2.0</td><td>No</td><td>No</td><td>NA</td><td>87</td></tr><tr><td>SecOps tools</td><td>Grype</td><td>0.78.x</td><td>Apache 2.0</td><td>Yes</td><td>No</td><td>NA</td><td>88</td></tr><tr><td>SecOps tools</td><td>Frida</td><td>16.x</td><td>GNU GPL v 3.0</td><td>No</td><td>No</td><td>NA</td><td>89</td></tr><tr><td>SecOps tools</td><td>Gitleaks</td><td>8.18x</td><td>MIT License</td><td>No</td><td>No</td><td>NA</td><td>90</td></tr><tr><td>SecOps tools</td><td>TruffleHog</td><td>3.63.x</td><td>GNU GPL v 3.0</td><td>No</td><td>No</td><td>NA</td><td>91</td></tr><tr><td>SecOps tools</td><td>docker scout</td><td>Docker Desktop 24.x LTS</td><td>Proprietary</td><td>Yes</td><td>No</td><td>NA</td><td>92</td></tr><tr><td>SecOps tools</td><td>deduce</td><td>1.0.8</td><td>LGPL v 2.1</td><td>No</td><td>No</td><td>NA</td><td>93</td></tr><tr><td>SecOps tools</td><td>Openssl</td><td>3.0.13</td><td>Apache License 2.0</td><td>No</td><td>Yes</td><td>NA</td><td>94</td></tr></tbody></table>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.mosip.io/1.2.0/readme/technology/technology-stack/tech-stack-new.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.