License Compliance

ts-legalcheck

Evaluates license obligations in project context and detects conflicts automatically. Supports individual license policies and generates compliance evidence.

ts-legalcheck

At a Glance

Conflict Detection

Identifies license conflicts automatically - e.g. GPL components in proprietary code or incompatible license combinations.

Policy Engine

Define your own license policies per project or organization. Automatic enforcement with every scan.

Compliance Evidence

Generates attribution-ready documents: NOTICE files, license lists and obligation reports.

Context-Aware

Evaluates licenses in project context: linking type, distribution form and target platform all influence the assessment.

Continuous Compliance

Checking with every build - not just before release. Shift left for license compliance.

Curated Knowledge Base

Curated license database with over 500 licenses, obligations and meta groups. Continuously updated.

The Challenge

Open-source licenses are not a free pass. Every license comes with obligations - from simple attribution (MIT) to copyleft sharing (GPL). In a project with hundreds of dependencies, license conflicts can easily be overlooked.

How LegalCheck Works

LegalCheck analyses the license information of every dependency in the context of your project. It considers the linking type (static/dynamic), the distribution form (SaaS/on-premise) and your individual license policies.

The result: a clear traffic-light system with concrete recommendations. Green means compliant, yellow requires review, red blocks the release.

Open Source

The LegalCheck solver is open source - code and license logic:

trustsource / ts-legalcheck

A solver to evaluate license obligations based on the actual circumstances of use

Python AGPL-3.0
license-complianceobligationsSPDXpolicyPython