# licenses

> Checks the license of each installed dependency against the allowed list. An allowed-package record with a reason accepts one package.

Checks the license of each installed dependency against the allowed list. An allowed-package record with a reason accepts one package. The [Dependencies and licenses guide](/checks/dependencies/) explains the setup.

## Checks

| Check                                                     | Stage  | Level         | What it does                                                                                            |
| --------------------------------------------------------- | ------ | ------------- | ------------------------------------------------------------------------------------------------------- |
| [`licenses/allowed`](/reference/checks/licenses/allowed/) | `push` | `recommended` | Compares the license of each installed npm or Python package with the allowed list and package records. |

## Settings

| Setting                                                                      | What it sets                                                                         |
| ---------------------------------------------------------------------------- | ------------------------------------------------------------------------------------ |
| [`licenses.allowed`](/reference/gspot-toml/#licenses.allowed)                | The SPDX license IDs a dependency may report.                                        |
| [`licenses.allowed_package`](/reference/gspot-toml/#licensesallowed_package) | Packages accepted under a license outside the list: name, exact version, and reason. |

## Selected when

gspot selects it in a scope with filenames `package.json`, `pyproject.toml`.

## Tools and versions

| Tool                        | Version |
| --------------------------- | ------- |
| license-checker-rseidelsohn | `5.0.1` |
| pip-licenses                | `5.5.5` |