Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Socket
Sign inDemoInstall

license-report

Package Overview
Dependencies
Maintainers
2
Versions
28
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

license-report

creates a short report about project's dependencies (license, url etc)


Version published
Weekly downloads
33K
increased by6.02%
Maintainers
2
Weekly downloads
 
Created
Source

license report tool

generate license report of a project's dependencies

install

npm install -g license-report

usage

simple:
cd your/project/
license-report

by default, license-report outputs all licenses from dependencies and devDependencies. To specify one or the other, use --only

license-report --only=dev
license-report --only=prod
explicit package.json:
license-report --package=/path/to/package.json
customize a field's label:

Used as column headers in table / csv / html output. For html output the labels of all fields in the output must be unique.

license-report --department.label=division
customize a fields default value:

Only applicable for the fields in the list later in this document (look for "Fields with data set in the configuration of license-report")

license-report --department.value=ninjaSquad
another registry:
license-report --registry=https://myregistry.com/
different outputs:
license-report --output=table
license-report --output=json
license-report --output=csv
license-report --output=html

# replace default ',' separator with something else
license-report --output=csv --delimiter="|" 

# output csv headers (fields) on first row
license-report --output=csv --csvHeaders

# use custom stylesheet for html output
license-report --output=html --html.cssFile=/a/b/c.css

# see the output immediately in your browser, use hcat (npm i -g hcat)
license-report --output=html | hcat
select fields for output:
# set options with command line options and config file
license-report --output=csv --config license-report-config.json
# example of config file for backward compatible output:
{
  "fields": [
    "department",
    "relatedTo",
    "name",
    "licensePeriod",
    "material",
    "licenseType",
    "link",
    "comment",
    "installedVersion",
    "author"
  ]
}
exclude:
license-report --exclude=async --exclude=rc

screenshots

screenshot screenshot1

available fields

Fields with data of the installed packages:

fieldnamecolumn titledata source
namenamename of the package
licenseTypelicense typetype of the license of the package (e.g. MIT)
linklinklink to the repository of the package
remoteVersionremoteVersionlatest available version of the package (can be different from the installed version)
installedVersioninstalledVersioninstalled version of the package (can be different from the remote version)
commentcommentdeprecated (replaced by field 'remoteVersion'); will be removed in a future version
authorauthorauthor of the package

Fields with data set in the configuration of license-report:

fieldnamecolumn titleset value
departmentdepartment--department.value=kessler
relatedTorelated to--relatedTo.value=stuff
licensePeriodlicense period--licensePeriod.value=perpetual
materialmaterial / not material--material.value=material

debug

export DEBUG=license-report*

see lib/config.js for more details

use rc for further customization

ironSource logo

FAQs

Package last updated on 02 Feb 2021

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc