News for hackers. Stuff that matters.

A comment on Always Review Your Dependencies, AGPL Edition. Parent comment

Re:Always Review Your Dependencies, AGPL Edition by robbya on Monday January 06, 2020 @07:13AM (#21968541)
Agreed. I found this project helpful for automating dependency checks: https://github.com/pivotal/LicenseFinder

I actually played around with turning it into a GitHub action for further usability improvement, although it needs more work: https://github.com/ralexander-phi/license_approval

[ Parent | on HN ]
Re:Always Review Your Dependencies, AGPL Edition by jsjohnst on Monday January 06, 2020 @07:39AM (#21968652)
Pivotal Lab’s license finder used to be my go to recommendation (and still is if “free” is an absolute requirement), but if a company takes license management seriously, I’d recommend checking out FOSSA[0] instead. It’s significantly better and fairly reasonably priced.

[0] https://fossa.com/

[ Parent | on HN ]