Parse package manifests, lockfiles, CycloneDX and SPDX locally, normalize license expressions, apply allow, deny and review policies, and generate a third-party notice draft.
Up to 20 files, 30 MB total, 50,000 components and 5,000 findings.
Enter exact SPDX IDs or expressions separated by commas or lines. Deny takes precedence.
Turn package metadata into a reviewable SPDX policy report. Parse package manifests, lockfiles, CycloneDX and SPDX locally, normalize license expressions, apply allow, deny and review policies, and generate a third-party notice draft. The core workflow is designed to run in your current browser.
Yes. Dependency License & NOTICE Auditor opens in a modern browser and does not require desktop software installation.
Common use cases include Review dependency licenses before distributing a release; Inspect supplied SBOM license metadata without installing packages.
The core processing workflow is designed to run locally in the browser. Key capabilities include Read package.json, npm, pnpm, Yarn, CycloneDX and SPDX inputs, Validate SPDX expressions and apply explicit allow, deny and review rules, Deduplicate components and aggregate licenses, categories and status; account, comments, and anonymous analytics may still create normal site requests.
0 comments
Sign in to comment and reply.
