Skip to content

Add licensegate to OSS and Dependency management - #137

Open
agustinnb wants to merge 1 commit into
sottlmarek:masterfrom
agustinnb:add-licensegate
Open

agustinnb wants to merge 1 commit into
sottlmarek:masterfrom
agustinnb:add-licensegate

Conversation

@agustinnb

Copy link
Copy Markdown

Tool: licensegate (disclosure: I'm the author; this PR was prepared by an automated agent on my behalf)
Topic: OSS and Dependency management
Why: the section lists SBOM writers (cdxgen, Syft) and compliance suites (ORT) but no small gate for the npm case. licensegate reads package-lock.json, resolves SPDX expressions and LICENSE texts offline, judges each license by how the project ships (SaaS, distributed app, library or internal: AGPL blocks a SaaS, LGPL blocks a bundled app, both are fine internally), exits non-zero in CI on what blocks, and writes a CycloneDX SBOM and a third-party notices file. MIT, zero dependencies, runs with npx; also available as a GitHub Action.

One table row added at the end of the section, same format as the other rows (stars badge).

🤖 Generated with Claude Code

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant