5 ms·
I made a small tool to check the licenses of your installed npm dependencies, which you can execute it by running this on the root of your project: npx leg
by franciscop 9y ago
I made a small tool to check the licenses of your installed npm dependencies, which you can execute it by running this on the root of your project:
npx legally
It will search for licenses in the LICENSE file, Readme.md and package.json (and alt spellings) and make a small report of: what licenses are in use, and some anomalies. The repo:
https://github.com/franciscop/legally https://github.com/franciscop/legally
- 0xfeba 9y agoNice. We may use this. TBH, licenses in NPM seem like such an afterthought. And the past few companies I've worked at all took advantage of it, greatly. Mostly with SaaS, so they should be OK, but also with commercially distributed software.
- BillinghamJ 9y agoHow so? It’s baked right into the package metadata system, API, website, etc.
- deleted 9y ago[deleted]
- Vinnl 9y agoInteresting, GitHub recently released a similar tool in Ruby [0], and GitLab uses license_finder [1]. [0] https://github.com/github/licensed https://github.com/github/licensed [1] https://github.com/pivotal/LicenseFinder https://github.com/pivotal/LicenseFinder
- franciscop 9y agoI proposed it and offered myself to implement it into npm, but it was ignored and closed by a bot :( https://github.com/npm/npm/issues/14270 https://github.com/npm/npm/issues/14270
- deadbunny 9y agoAm I being blind or have you released a tool that checks licenses with no license? I mean, I enjoy a good joke but seriously.
- franciscop 9y agoIt is right here under "license": https://github.com/franciscop/legally/blob/master/package.json https://github.com/franciscop/legally/blob/master/package.js... Just added it as a separated file as well.