how to automate dependency license checks without manual research

#api #webdev #devtools #opensource

the problem

manually reviewing licenses for each project dependency can be tedious and error-prone. with dozens of packages and disparate license info, keeping track is a hassle.

the solution

dependency-license-audit automates this process. it fetches your package manifest files like package.json or requirements.txt, then cross-references their dependencies against public license databases. this provides a quick overview of license types.

cURL example:

bash
curl -X GET 'https://dependency-license-audit.apimesh.xyz/check?project_url=https://github.com/youruser/yourproject'

potential output:

{
"dependencies": {
"react": "MIT",
"express": "Apache-2.0",
"lodash": "MIT"
}
}

how it works

it fetches your project's dependency files based on a provided URL or repo path, then searches for license info via public APIs. this process is fast and straightforward, giving you license awareness with minimal effort.