ZAP is released under the Apache V2 License.
As far as we are aware all of the 3rd party code and libraries we use are compatible with this license - special cases are listed on this page.
If you think that we are infringing any licenses then please let us know asap by raising an issue.
Code: https://github.com/zaproxy/zap-extensions/tree/beta/src/org/zaproxy/zap/extension/sqliplugin
This code is a derivative of SQMap and therefore is GPL.
We have contacted the authors and they have granted us an exemption.
Code: https://github.com/zaproxy/zap-extensions/tree/beta/src/org/zaproxy/zap/extension/svndigger
The svndigger files are GPLv3.
We have contacted the authors and they have granted us an exemption.
Code: https://github.com/zaproxy/zap-extensions/tree/beta/src/org/zaproxy/zap/extension/fuzz/lib
The JBroFuzz jars are GPLv2
We have contacted the authors and they have granted us an exemption.