New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

license-ci-checker

Package Overview
Dependencies
Maintainers
1
Versions
6
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

license-ci-checker

Checks the compatiblity of your license with your dependencies licenses

1.2.0
latest
Source
npm
Version published
Weekly downloads
0
Maintainers
1
Weekly downloads
 
Created
Source

License CI Checker

license npm version npm downloads

Build Status vulnerabilities

code style: prettier

Disclaimer

I'm not a Lawyer and have very little knowledge about licenses. This code is super simpel, but should help against obvious license violations. I am not responsible for possible misjudgments, false explanations and descriptions

Install

# npm
npm install --save-dev license-ci-checker

# yarn
yarn add -D license-ci-checker

Usage examples

package.json
{
	"scripts": {
		"test-licenses": "license-ci-checker --production"
	}
}
command line
license-ci-checker --production

Options

Most options are passed through from npm-license-crawler.

paramdefaultdescription
--start directory-path["./"]path to the directory the license search should start from. If omitted the current working directory is assumed. Can be declared multiple for multiple entry points.
--exclude directory-path[]path to a directory to be excluded (and its subdirectories) from the search (behaves like --start)
--unknownfalseshow only licenses that can't be determined or have been guessed.
--dependenciesfalseshow only third-party licenses, i.e., only list the dependencies defined in package.json.
--productionfalseshow only production dependencies
--developmentfalseshow only development dependencies
--onlyDirectDependenciesfalseshow only direct dependencies licenses, i.e., don't list dependencies of dependencies.
--omitVersionfalseomit version numbers in result (e.g. "npm-license-crawler@0.1.5" becomes "npm-license-crawler")
--relativeLicensePathfalseoutput the relative file path for license files.
--allow[]list of packages that doen't throw an error regardless of there license. Like with the --start argument, you can specify it mutliple times

How does it work?

Licenses can be categorized with a hierarchie. This package checks which license you are using and in which category it belongs. Then it crawls all your licenses dependencies and checks if there licenses are in the same category as yours or below. If not, it throws an error.

License compatiblity

(currently, the implementation is a bit simpler, as explained above)

license categories source: https://janelia-flyem.github.io/

license compatibility source: https://raw.githubusercontent.com/HansHammel/license-compatibility-checker/

Keywords

license

FAQs

Package last updated on 22 Mar 2019

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts