Classify open-source licenses and map obligations to deployment models.
npx skills add https://github.com/gtgspot/clegal --skill oss-review-gtgspot
Please help me install this Agent Skill. Skill: oss-review Source: https://github.com/gtgspot/clegal/tree/main/ip-legal/skills/oss-review Command: npx skills add https://github.com/gtgspot/clegal --skill oss-review-gtgspot
Open source license compliance for a dependency list, a single library, or outbound code, to determine license families, obligations, and whether a library can ship.
Provide the project manifest or repository path to analyze; I will classify licenses, surface deployment obligations, and prepare a readiness memo.
High-intent search queries and answers about installing and using this skill.
Open-source license compliance is checked by identifying and classifying licenses in a dependency list or codebase to surface obligations. This process validates actual license texts, maps requirements to deployment models, and outputs a structured readiness memo.
Copyleft open-source licenses are classified as weak or strong based on their obligation levels. Strong copyleft requires derivative works to open-source under the same license, while weak copyleft applies obligations to the original library but not necessarily the entire outbound codebase.
Yes, you can analyze manifests like package.json, requirements.txt, and go.mod to determine if a library can ship. The analysis reads actual license texts, flags libraries requiring replacement or attorney review, and prepares per-package guidance for engineering and legal teams.
Open-source license obligations vary significantly between SaaS, distributed binary, internal, and embedded deployment models. The compliance review maps specific license requirements to your exact deployment method, flagging obligations like attribution or source code disclosure.
An open-source legal review for outbound code identifies and classifies all included dependencies to determine if the code can ship. It validates actual license texts, maps obligations, and outputs a structured memo with clear remediation and escalation guidance.
ashtonianAudit software dependencies across Go, Node.js, Python, Rust, and containers.
jrhueiuengClassify dependency licenses and map copyleft obligations to deployment models.
do360nowAnalyzes SBOM files for format, metadata completeness, dependency risks, and license conflicts.
DCx7C5Automate Snyk-based scans of package manifests and lockfiles in CI/CD pipelines.
