wdamien/findl

Output all the third-party licenses used in your node based project.

findl

Create a report of all your production licenses currently in-use.

Why?

Sometimes companies requires you provide all your in-use licenses for a legal audit.

Install

yarn global add findl npm i -g findl

Running

In your npm or dart based project. findl

Run with a GITHUB_TOKEN

GITHUB_TOKEN=your_token_from_here_https://github.com/settings/tokens findl

Options

--deep By default only the top level packages are found. If your audit requires you list everything in use, use --deep (Only for npm based projects, ignored for dart.)

--cwd Default is process.cwd()

Building

yarn build

Dev'ing

yarn dev

findl's Issues

Missing license urls are outputting as a null url

sentry-expo (MIT)
Catch your Javascript errors for your production Expo apps!
https://github.com/expo/sentry-expo
https://null

Missing license urls are outputting as a node_modules url

Example package: @react-navigation/drawer

Output:

@react-navigation/drawer (MIT)
Drawer navigator component with animated transitions and gesturess
https://github.com/react-navigation/react-navigation
https://node_modules/@react-navigation/drawer/LICENSE

Maybe not outputting the license url would be preferable?

Some packages point to the node_modules path

@react-navigation/bottom-tabs (MIT)
Bottom tab navigator following iOS design guidelines
https://github.com/react-navigation/react-navigation
node_modules/@react-navigation/bottom-tabs/LICENSE

If it can find it, I would expect this package to point to this url (or the raw url):
https://github.com/react-navigation/react-navigation/blob/main/packages/bottom-tabs/LICENSE

Note: this might be related to #1.

Dual-license packages output double-parenthesis

pako ((MIT AND Zlib))
zlib port to javascript - fast, modularized, with browser support
https://github.com/nodeca/pako
https://github.com/nodeca/pako/blob/master/LICENSE

Notice (()) around the license codes?

Missing license

Any way we can get this one?
https://pub.dev/packages/internet_connection_checker

Descriptionless packages output empty line instead of no line

@react-native-community/hooks (ISC)

https://github.com/react-native-community/hooks
https://github.com/react-native-community/hooks/blob/master/LICENSE