magpie-dependency-license-audit

Name: magpie-dependency-license-audit
Availability: InStock
Author: The Apache Software Foundation

Audit dependency licenses and classify them against configurable policies.

79|76|Updated Apr 28, 2026

Search Tags:#dependency management #code audit #license classification #license audit #licensing compliance

Ready to run

npx skills add https://github.com/apache/magpie --skill magpie-dependency-license-audit

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: magpie-dependency-license-audit
Source: https://github.com/apache/magpie/tree/main/skills/dependency-license-audit
Command: npx skills add https://github.com/apache/magpie --skill magpie-dependency-license-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pip-licenses, license-checker, cargo-deny, cargo-license, license-maven-plugin, dependency-license-report, trivy, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of auditing license compliance in a project's dependency tree, ensuring adherence to policies like the Apache Software Foundation's.

Core Features & Use Cases

License Audit: Inspects direct and transitive dependencies for license compliance.
Policy-Based Classification: Categorizes licenses into allowed, weak copyleft, or forbidden based on configurable policies.
Use Case: For maintainers needing to ensure their project complies with ASF licensing standards or for identifying license conflicts.

Quick Start

Run the magpie-dependency-license-audit skill on your project to check for license compliance.

Frequently Asked Questions about magpie-dependency-license-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my project's dependency tree for license compliance?▼

To audit your dependency tree for license compliance, run the skill to inspect direct and transitive dependencies, classify detected licenses against a policy, and report any issues.

What is the best way to classify weak copyleft licenses against a policy?▼

The best way to classify weak copyleft licenses is to use a policy-based classification system that categorizes detected licenses into allowed, weak copyleft, or forbidden to identify potential conflicts.

Can I use this license audit to check a project against Apache Software Foundation standards?▼

Yes, you can use this license audit to check a project against Apache Software Foundation standards by ensuring your dependency tree adheres to the ASF's specific licensing compliance policies.

Does this license audit tool support multiple dependency managers like pip and cargo?▼

Yes, this license audit supports multiple dependency managers and ecosystems by utilizing tools like pip-licenses, license-checker, and cargo-deny to analyze and detect licenses across your project.

Do I need trivy and license-maven-plugin installed to detect transitive dependency licenses?▼

You need tools like trivy and license-maven-plugin installed to accurately detect and analyze direct and transitive dependency licenses across the various supported ecosystems in your project.