# licenses/allowed

> Compares the license of each installed npm or Python package with the allowed list and package records.

Compares the license of each installed npm or Python package with the allowed list and package records.

Part of the [`licenses`](/reference/configurations/licenses/) configuration, at the `recommended` [level](/start/concepts/#levels). It runs at the `push` [stage](/start/concepts/#stage), once for the repository. gspot runs this check itself.

## Why

A license the project cannot accept arrives silently with a transitive dependency.

## What to do

Replace the package, or write a \[\[licenses.allowed\_package]] record by hand with its name, exact version, and a reason naming the license.

## Example

A dependency with a license outside `licenses.allowed` reports a finding for that version. Replace it, or write a `[[licenses.allowed_package]]` record with its name, version, and the license in a reason.

## Turn it off

Turn it off for some files, with a reason:

```shell
gspot ignore licenses/allowed --paths "<glob>" --reason "<why>"
```