oss-review

Analyze dependencies and licenses for open source compliance.

1|Updated Jun 27, 2026

Search Tags:#code review #open source #dependency analysis #license compliance #license classification

Ready to run

npx skills add https://github.com/bomday/projetao-tatico --skill oss-review-bomday

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: oss-review
Source: https://github.com/bomday/projetao-tatico/tree/main/claude-for-legal/ip-legal/skills/oss-review
Command: npx skills add https://github.com/bomday/projetao-tatico --skill oss-review-bomday

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you ensure open source license compliance for your codebase, dependencies, or open-source projects by providing a comprehensive review and classification of licenses.

Core Features & Use Cases

Compliance Check: Automatically scan and classify licenses of dependencies, libraries, or code.
Deployment Model Analysis: Determine the obligations based on how the code will be deployed (SaaS, binary, internal, embedded).
Outbound Code Review: Check compatibility of the chosen outbound license with embedded dependencies.
Use Case: Before releasing a project, use this Skill to ensure all dependencies comply with open source licenses and to identify any potential issues.

Quick Start

Run the oss-review skill with the path to your project's manifest file, e.g., oss-review path/to/manifest.json.

Frequently Asked Questions about oss-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check open source license compliance for my project dependencies?▼

To check open source license compliance, you can scan and classify your project's dependencies by running a review tool with the path to your manifest file. This identifies obligations based on your deployment model and checks outbound license compatibility.

What is open source license classification and how does it work?▼

Open source license classification is the process of automatically scanning and categorizing the licenses of dependencies within a codebase. It works by analyzing your project's manifest file to determine the specific obligations and restrictions for each license.

Can I check outbound license compatibility with embedded dependencies?▼

Yes, you can check outbound license compatibility with embedded dependencies. By analyzing your project's manifest file, the review process verifies if your chosen outbound license conflicts with the licenses of your embedded dependencies before release.

How do deployment models affect open source license obligations?▼

Deployment models directly affect open source license obligations by dictating specific requirements based on whether code is deployed as SaaS, binary, internal, or embedded. A compliance review analyzes your manifest to determine these exact obligations.

Do I need to configure an OSS policy before running a license compliance check?▼

Yes, you need to configure an OSS policy and a practice profile before running a license compliance check. This configuration is required to accurately determine obligations and check compatibility of outbound licenses for your project.