Skip to content

ci: check npm dependency licenses - #1

Merged
PHPCraftdream merged 1 commit into
mainfrom
ci/license-compliance
Nov 2, 2026
Merged

PHPCraftdream merged 1 commit into
mainfrom
ci/license-compliance

Conversation

@PHPCraftdream

Copy link
Copy Markdown
Contributor

Summary

  • Check every npm lockfile dependency against an exact license allow list.
  • Reject missing metadata and unapproved compound expressions, with regression assertions in CI.

Limitations

License metadata alone does not establish compliance with distribution, notice, or attribution obligations.

Verification

GitHub CI pending. No local tests or builds were run.

🤖 Generated with Claude Code

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@PHPCraftdream
PHPCraftdream marked this pull request as ready for review November 2, 2026 12:29
@PHPCraftdream
PHPCraftdream merged commit 9ed57f8 into main Nov 2, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant