technology sovereignty
A full assessment of every technology in the Mukoko stack, evaluated for licensing, governance risk, and self-hosting capability.
Full Sovereignty Assessment
Every technology evaluated across licensing, governance, forkability, and self-hosting dimensions.
| Technology | Role | License | Governance | Risk | Forkable | Self-Hostable |
|---|---|---|---|---|---|---|
| Next.js | UI framework | MIT | corporate-open | low | Yes | Yes |
| Capacitor | Native wrapper | MIT | corporate-open | low | Yes | Yes |
| RxDB | Local database layer | Apache-2.0 | independent | low | Yes | Yes |
| SQLite | Mobile storage engine | Public Domain | public-domain | none | Yes | Yes |
| IndexedDB / Dexie | Browser storage | Web Standard / MIT | w3c | none | Yes | Yes |
| PouchDB | Client-side sync | Apache-2.0 | independent | low | Yes | Yes |
| Supabase / PostgreSQL | Relational cloud database | Apache-2.0 | corporate-open | low | Yes | Yes |
| Apache CouchDB | Cloud document sync | Apache-2.0 | apache-foundation | none | Yes | Yes |
| Redpanda | Event streaming | BSL / Apache-2.0 | independent | low | Yes | Yes |
| Apache Flink | Stream processing | Apache-2.0 | apache-foundation | none | Yes | Yes |
| Apache Doris | Analytical / open data | Apache-2.0 | apache-foundation | none | Yes | Yes |
| MongoDB | Document database (removed) | SSPL | corporate-proprietary | removed | No | No |
Risk Rating Legend
Removed Technologies
Technologies that were evaluated and removed from the stack due to licensing, governance, or sovereignty concerns.
MongoDB switched its license in 2018 from AGPL to SSPL (Server Side Public License). The Open Source Initiative does not recognise SSPL as a genuine open source license. For a platform built on sovereignty and open source principles, this is disqualifying.
Replacement
Apache CouchDB
Migration Path
Weather observation data maps directly to CouchDB documents. The data access layer switches from Motor/Mongoose to CouchDB HTTP API or the nano Node.js client. RxDB on the device handles local caching and sync transparently. The migration unlocks the open data story — once observations flow through the Flink anonymisation pipeline into Doris, Mukoko can publish a public API for community-sourced weather data.