Licence Compliance

ts-legalcheck

Evaluates licence obligations in project context and detects conflicts automatically. Supports individual licence policies and generates compliance evidence.

ts-legalcheck

At a Glance

Conflict Detection

Identifies licence conflicts automatically — e.g. GPL components in proprietary code or incompatible licence combinations.

Policy Engine

Define your own licence policies per project or organisation. Automatic enforcement with every scan.

Compliance Evidence

Generates attribution-ready documents: NOTICE files, licence lists and obligation reports.

Context-Aware

Evaluates licences in project context: linking type, distribution form and target platform all influence the assessment.

Continuous Compliance

Checking with every build — not just before release. Shift left for licence compliance.

Curated Knowledge Base

Curated licence database with over 500 licences, obligations and meta groups. Continuously updated.

The Challenge

Open-source licences are not a free pass. Every licence comes with obligations — from simple attribution (MIT) to copyleft sharing (GPL). In a project with hundreds of dependencies, licence conflicts can easily be overlooked.

How LegalCheck Works

LegalCheck analyses the licence information of every dependency in the context of your project. It considers the linking type (static/dynamic), the distribution form (SaaS/on-premise) and your individual licence policies.

The result: a clear traffic-light system with concrete recommendations. Green means compliant, yellow requires review, red blocks the release.

Open Source

The LegalCheck solver is open source — code and licence logic:

trustsource / ts-legalcheck

A solver to evaluate licence obligations based on the actual circumstances of use

Python AGPL-3.0
license-complianceobligationsSPDXpolicyPython