DEV Community

Maximus Beato
Maximus Beato

Posted on Originally published at apimesh.xyz

how to automate dependency license checks without manual research

the problem

manually reviewing licenses for each project dependency can be tedious and error-prone. with dozens of packages and disparate license info, keeping track is a hassle.

the solution

dependency-license-audit automates this process. it fetches your package manifest files like package.json or requirements.txt, then cross-references their dependencies against public license databases. this provides a quick overview of license types.

cURL example:

bash
curl -X GET 'https://dependency-license-audit.apimesh.xyz/check?project_url=https://github.com/youruser/yourproject'

potential output:

{
"dependencies": {
"react": "MIT",
"express": "Apache-2.0",
"lodash": "MIT"
}
}

how it works

it fetches your project's dependency files based on a provided URL or repo path, then searches for license info via public APIs. this process is fast and straightforward, giving you license awareness with minimal effort.

try it

get a free preview or start at €0.005 per check. see license details before you ship.

try dependency-license-audit now

Top comments (0)