Some licenses might be acceptable, others might not be. In a bigger organization, it is important to keep track of that and not to integrate open source software which you actually cannot (legally).

I'm interested in a Python package which takes a requirements.txt and a whitelist / blacklist of licenses. If any package in the requirements.txt does not match the whitelist/blacklist, it should fail (and thus one could integrate it in a CI pipeline).

Addtionally, it would be nice if it could output a list of packages with their licenses.

What I've seen

  • pip-licenses: Seems to act only on installed packages.
  • liccheck: I cannot run it #58
  • liccheck2: It's the same maintainer / points to the same git repository as liccheck. I'm not sure what is going on there.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.