pivotal/LicenseFinder

Health v2 · maintenance only

Adoption not part of the score

1794 stars · 348 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

LicenseFinder is a Ruby CLI tool that scans a project's dependencies via its package manager, detects each package's license, and compares them against a user-defined whitelist to produce an actionable compliance report. It supports many ecosystems (Bundler, pip, npm, Go, Maven, Gradle, and more) and can run as a pre-commit hook or in CI.

Use cases

• audit licenses of project dependencies
• enforce an approved license whitelist in CI
• generate a license report for legal compliance
• check for GPL dependencies before shipping
• run license checks as a pre-commit hook

When to choose

• you need automated license compliance checks across multiple language ecosystems
• you want to fail builds when unapproved licenses appear
• you need a permissive-licensed, self-hostable compliance scanner

When to avoid

• you need SBOM generation with SPDX export and deep vulnerability scanning
• your package manager is unsupported or experimental
• you need actively developed tooling with frequent updates

Facets

cli-tool · maturity maintenance

security developer-tools ci-cd dependency-audit developer-tools security legal ruby cli cross-platform license-compliance dependency-scanning license-audit open-source-compliance docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="pivotal/LicenseFinder")