Skip to content

licenses

Checks the license of each installed dependency against the allowed list. An allowed-package record with a reason accepts one package. The Dependencies and licenses guide explains the setup.

Check Stage Level What it does
licenses/allowed push recommended Compares the license of each installed npm or Python package with the allowed list and package records.
Setting What it sets
licenses.allowed The SPDX license IDs a dependency may report.
licenses.allowed_package Packages accepted under a license outside the list: name, exact version, and reason.

gspot selects it in a scope with filenames package.json, pyproject.toml.

Tool Version
license-checker-rseidelsohn 5.0.1
pip-licenses 5.5.5