All the dependencies required to build grlx are listed in the [go.mod] file.
The licenses for each dependency are vendored in the [dependencies] directory, sorted by URL. This directory is automatically updated on push through GitHub actions.
Licenses associated with the specific commit you are running can be found by using grlx version and referencing the associated commit in the (publicly available) git history.
If you are using an official tagged release, the sources associated are available in the zipped archive attached to the release post.