It is an open module (Spring needs reflective access) and requires the Spring modules its code compiles against plus the Spring Boot starters that root the runtime closure (embedded Tomcat, Thymeleaf, Jackson, Security, OAuth2 client). Built as an open shell with a panel-registration SPI ({@code uses Panel}) discovered with ServiceLoader and bridged into Spring, so additional panels are registered by adding modules to the graph, with no fork of the console. Login mechanisms plug in the same way ...