Analyze dependency licenses and recommend compliance actions.
npx skills add https://github.com/Bossmann007/claude-legal-br --skill oss-review-bossmann007
Please help me install this Agent Skill. Skill: oss-review Source: https://github.com/Bossmann007/claude-legal-br/tree/main/ip-legal/skills/oss-review Command: npx skills add https://github.com/Bossmann007/claude-legal-br --skill oss-review-bossmann007
This Skill helps in verifying the compliance of open source licenses for a list of dependencies, a single library, or output code, aiding in the review of manifests, SBOMs, or repositories for copyleft obligations and license compatibility.
Run /ip-legal:oss-review ~/code/meu-projeto/package.json to check license compliance of your project's dependencies.
High-intent search queries and answers about installing and using this skill.
To check open source license compliance, you can run a review against a manifest file like package.json. The Skill analyzes your list of dependencies, classifies their license families, and identifies copyleft obligations or unknown licenses to ensure compliance.
The best way to verify license compatibility is by analyzing the license profile and deployment model of your dependencies. This process maps specific license obligations to your deployment scenario and recommends actions like fulfilling, replacing, or removing problematic libraries.
Dependency analysis handles unknown open source licenses by flagging them during the classification process. It identifies these gaps in your SBOM or manifest and explicitly recommends seeking a formal legal review to mitigate compliance risks before deployment.
Yes, you can use this to review an SBOM for copyleft obligations. It processes software bills of materials and repository files to verify license compliance against a configured practice profile, ensuring all open source obligations are accurately mapped.
Yes, you need to configure a practice profile to analyze open source licenses. The practice profile defines the specific compliance rules and deployment models used to classify dependencies, map obligations, and generate accurate action recommendations.
When a dependency violates license compliance, recommended actions include fulfilling the license obligations, replacing the library with a compatible alternative, removing the dependency entirely, or seeking a formal legal review to resolve complex scenarios.
stakworkAnalyze open source dependencies for license obligations and compatibility risks.
jrhueiuengClassify dependency licenses and map copyleft obligations to deployment models.
yachelaClassify license families and map obligations by deployment model.
PolliticalSolutionsClassifies license families and maps compliance obligations to a deployment model, returning a structured legal memo.
