skills.rest
MolcajeteAI
MolcajeteAIOFFICIAL
Explore all skills by this author →
GitHub

license-compliance

Audit npm dependency licenses and enforce approved license lists.

2|1|Updated Nov 13, 2025
Search Tags:#npm#dependencies#audit#compliance#license#sbom
One-click install
npx skills add https://github.com/MolcajeteAI/plugin --skill license-compliance-molcajeteai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: license-compliance
Source: https://github.com/MolcajeteAI/plugin/tree/main/deprecated/tech-stacks/js/common/skills/license-compliance
Command: npx skills add https://github.com/MolcajeteAI/plugin --skill license-compliance-molcajeteai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires license-checker, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps developers manage and audit the licenses of their project's dependencies, preventing legal issues and ensuring compliance with open-source licenses.

Core Features & Use Cases

  • License Auditing: Automatically checks the licenses of all npm dependencies.
  • Compliance Enforcement: Provides tools to enforce a defined license policy, allowing only approved licenses.
  • Use Case: Before releasing your software, use this skill to verify that all included dependencies comply with your company's open-source license policy, flagging any non-compliant packages.

Quick Start

Run the license-checker command to list all licenses for your project's npm dependencies.

Frequently Asked Questions about license-compliance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit npm dependency licenses in a Node.js project?▼

To audit npm dependency licenses, this Skill utilizes the license-checker package to automatically identify and list the licenses of all npm dependencies within your Node.js project. It helps prevent legal issues by verifying packages against your open-source policy.

What is the best way to enforce an approved software license list for npm packages?▼

The best way to enforce an approved software license list is by defining a policy within this Skill to check npm packages. It automatically flags any non-compliant dependencies that fail to meet your company's open-source requirements.

Can I generate an SBOM and attribution files for my Node.js dependencies?▼

Yes, you can generate an SBOM and attribution files for Node.js dependencies. This Skill supports creating these reports during the license compliance audit to document all included npm packages and their respective licenses.

Does license compliance checking work with private npm registries and custom packages?▼

License compliance checking works by analyzing your project's resolved npm dependencies using the license-checker package. It identifies licenses for all included packages, allowing you to enforce your defined policy across your Node.js project.

When should I run a dependency license audit for my software release?▼

You should run a dependency license audit before releasing your software. This ensures all included npm dependencies comply with your company's open-source license policy, automatically flagging any non-compliant packages for review.

Related Skills

Explore More Legal & Compliance Skills→
cpa03cpa03

dependency-audit

Audit npm dependencies for vulnerabilities, outdated packages, and license compliance.

Community
Intermediate
luissimon96luissimon96

graph-dependency

Audit dependencies, generate SBOMs, and check license compliance for software projects.

Community
Advanced
AAbdulghanyAAbdulghany

audit-deps

Audit project dependencies for vulnerabilities, outdated packages, and license compliance.

Community
Advanced
wipcomputerwipcomputer
3

wip-license-hook

Detect dependency license changes and gate upstream merges for compliance.

Official
Advanced