ensures that software projects remain legally compliant by automatically verifying that all direct and transitive dependencies use licenses approved by the organization.
license-compliance-auditor
通过自动验证所有直接和间接依赖项是否使用组织批准的许可证，确保软件项目保持法律合规性。
When to Use
适用场景
Dependency Onboarding: Run when adding a new library to a project.
CI/CD Gates: Use as a blocking step in pipelines to prevent merging code with non-compliant licenses (e.g., preventing GPL in a proprietary product).
Release Preparation: Audit the entire dependency tree before a major release.