licenses/allowed
Compares the license of each installed npm or Python package with the allowed list and package records.
Part of the licenses configuration, at the recommended level. It runs at the push stage, once for the repository. gspot runs this check itself.
A license the project cannot accept arrives silently with a transitive dependency.
What to do
Section titled “What to do”Replace the package, or write a [[licenses.allowed_package]] record by hand with its name, exact version, and a reason naming the license.
Example
Section titled “Example”A dependency with a license outside licenses.allowed reports a finding for that version. Replace it, or write a [[licenses.allowed_package]] record with its name, version, and the license in a reason.
Turn it off
Section titled “Turn it off”Turn it off for some files, with a reason:
gspot ignore licenses/allowed --paths "<glob>" --reason "<why>"