
Security News
Vite+ Joins the Push to Consolidate JavaScript Tooling
Evan You announces Vite+, a commercial, Rust-powered toolchain built on the Vite ecosystem to unify JavaScript development and fund open source.
browserify-licenses
Advanced tools
Extracts licenses of third party modules used in a browserify bundle
Extracts licenses of third party modules used in a browserify bundle
Browserify License Extractor list all files that will be included in a Browerify bundle to determines which third party modules are really bundled, and then it extracts the corresponding licenses to various formats.
npm install -g browserify-licenses
Usage: brlicenses [options]
Options:
--browserify, -b Extract licenses used in a bundle using Browserify to find
included modules (this option can be ommited)
--webpack, -w Extract licenses from a Webpack profile file
--modules, -m Extract licenses of the given modules
--json, -j Extract licenses of the given JSON files (previously
generated with the --format=json option)
--format, -f Output format [choices: "table", "short", "full", "json"]
[default: "table"]
--output, -o Output file (print to stdout by default)
--ignore, -i Ingore the given modules in the output
--version, -v Show version number
--help, -h Show help
brlicenses app/index.js
brlicenses --browserify app/index.js # equivalent to the previous one
brlicenses --modules lodash q abitbol
brlicenses app/index.js \
--json additional-licenses.json \
--format=full \
--output=CREDITS.txt
webpack --profile --json > profile.json
brlicenses --webpack profile.json
Table formatting (to get a quick overview):
brlicenses app/index.js
┌─────────────┬─────────┬──────────────┬──────────────┐
│ Module Name │ Version │ License │ License File │
├─────────────┼─────────┼──────────────┼──────────────┤
│ abitbol │ 1.0.4 │ BSD-3-Clause │ Yes │
│ keyboardjs │ 0.4.3 │ BSD License │ Yes │
│ lodash │ 4.13.1 │ MIT │ Yes │
│ photonui │ 1.5.0 │ BSD-3-Clause │ Yes │
│ stonejs │ 2.2.0 │ BSD-3-Clause │ Yes │
│ uuid │ 2.0.2 │ MIT │ Yes │
└─────────────┴─────────┴──────────────┴──────────────┘
6 modules
Full output includes complete license:
brlicenses --format=full app/index.js
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
abitbol v1.0.4 - License BSD-3-Clause
downloaded from <https://www.npmjs.com/package/abitbol>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Copyright (c) 2015, Wanadev <http://www.wanadev.fr/>
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
* Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
* Neither the name of Wanadev nor the
names of its contributors may be used to endorse or promote products
derived from this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL WANADEV BE LIABLE FOR ANY
DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
keyboardjs v0.4.3 - License BSD License
downloaded from <https://www.npmjs.com/package/keyboardjs>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Copyright 2011 Robert Hurst. All rights reserved.
[... output truncated for this example ...]
yargs
dependencyFAQs
Extracts licenses of third party modules used in a browserify bundle
The npm package browserify-licenses receives a total of 57 weekly downloads. As such, browserify-licenses popularity was classified as not popular.
We found that browserify-licenses demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Evan You announces Vite+, a commercial, Rust-powered toolchain built on the Vite ecosystem to unify JavaScript development and fund open source.
Security News
Ruby Central’s incident report on the RubyGems.org access dispute sparks backlash from former maintainers and renewed debate over project governance.
Research
/Security News
Socket researchers uncover how threat actors weaponize Discord across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.