{"categories":[{"label":"Build Tools","url":"https://skillfed.io/packages/category/software-development-build-tools"}],"enrichment":{"capability":"Scans Python project dependencies in requirements.txt or pyproject.toml and validates their licenses against a configurable policy of authorized and unauthorized licenses.","skillfed_tags":["compliance","license-audit","ci-cd"],"use_cases":["Enforce corporate license policies in CI/CD by blocking builds when dependencies violate approved licenses","Audit open-source projects before distribution to ensure compliance with GPL, MIT, Apache, or other license requirements","Detect GPL-licensed transitive dependencies that may trigger copyleft obligations in your project","Generate license compliance reports for legal review before shipping a product","Prevent accidental adoption of incompatible licenses by catching violations at pre-commit time"],"what_it_does":"liccheck is a command-line tool that audits Python project dependencies against a license compliance policy. It reads a requirements.txt or pyproject.toml file, inspects the licenses of all installed packages and their transitive dependencies, and reports violations based on three configurable strictness levels: Standard (at least one authorized license), Cautious (no unauthorized licenses even if one authorized exists), and Paranoid (all licenses must be authorized). The tool requires packages to be installed in the same Python environment where it runs, since it uses pkg_resources to access package metadata.\n\nYou define compliance rules in an INI or TOML configuration file, listing authorized licenses, unauthorized licenses, and exceptions for specific packages. The tool supports both exact string matching and regex patterns for license names. It outputs a summary of compliant packages, forbidden packages, unknown licenses, and dependency chains for violations, making it useful for legal review, CI/CD pipelines, and pre-commit hooks.","worth_installing":"Yes. liccheck is a stable, actively maintained tool with low install friction and no security vulnerabilities. It solves a real compliance problem with minimal dependencies and clear output. Install it if your project needs to enforce license policies or audit dependencies for legal compliance."},"id":"liccheck","links":{"html":"https://skillfed.io/packages/liccheck","md":"https://skillfed.io/packages/liccheck.md","pypi":"https://pypi.org/project/liccheck/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2023-09-22","license_spdx":null,"license_treatment":"permissive","name":"liccheck","python_support":"supports_current","summary":"Check python packages from requirement.txt and report issues"},"popularity":{"monthly_downloads":2013403,"position":3363,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"0.9.2"}