license-scanner

Manage third-party license compliance in your Rollup or Vite builds. Automatically discover every dependency, extract its license info, fail builds with disallowed licenses, and generate a complete “bill-of-materials” in JSON, HTML, CSV or custom formats.

Project providing insights on the metaeffekt license database.

Educational dependency scanner built in pure Go—parse go.mod and go.sum, inspect direct and indirect modules, query OSV for vulnerabilities, and summarize licenses.

Go library and CLI for fast license detection and repository scanning against ScanCode's rule corpus.

Public terms covered by the metaeffekt universe

This repo is for testing various SBOM and license scanning tools

Open-source license & compliance scanner for modern codebases — CycloneDX/SPDX SBOMs + EU CRA evidence

Catch open-source license compliance risks and generate profile-aware SBOM/SARIF reports locally.

A licence, model-weights and platform-terms scanner that returns a verdict, not a report: can I ship this, and if not, exactly which clause blocks me?

Detect open-source libraries and their licenses on web pages. Analyze compatibility risks instantly for safer development.

A Vite plugin to generate a JSON file with detailed information about third-party licenses, using rollup-plugin-license.

Proactively scans npm dependencies for license compliance, blocking restrictive licenses before they enter your codebase.

Deployment-context-aware license compliance scanner — evaluates the obligations your deployment actually triggers (SUL, BSL, SSPL, Elastic, GPL/AGPL…), not just license names. Scans codebases, lockfiles, Docker images, SSH hosts, and k8s.

Zero-dependency npm package health analyzer, license compliance scanner, and visual web studio for engineering teams.