macOS
Homebrewverifiziert · 100%
brew install licensefinderlocal Homebrew formula metadata
brew
licensefinder mit Homebrew, Nix installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für licensefinder in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Linux
Nixverifiziert · 92%
nix profile install nixpkgs#license_findernixpkgs package indexes · pkgs/by-name/li/license_finder/package.nix · Quelle: api.github.com
Überblick
Paketzusammenfassung
Find licenses for your project's dependencies
Projektlinks
Befehle und Aliase
- license_finder
Verlauf
Projektgeschichte und Nutzung
LicenseFinder is Pivotal's long-running Ruby CLI for finding dependency licenses, comparing them with approved policies, and reporting unapproved packages. It covers many project types by calling their native package managers rather than treating license scanning as a single-language problem.
Projektgeschichte
The public repository was created on 2011-01-17. The README describes a tool that works with package managers to find dependencies, detect licenses, compare them with permitted licenses, and produce actionable exception reports.
The changelog records a broadening scope over time: support for Ruby, Node, Python, Java, Go, CocoaPods, Swift Package Manager, Rust Cargo, PHP Composer, Conda, Flutter, and other ecosystems appears across releases. Release 7.0.0 in 2022 added Ruby 3 support, Flutter scanning, and SPDX identifier reporting.
Adoptionsgeschichte
LicenseFinder spread through CLI, RubyGems, Homebrew, Docker, and pre-commit workflows. Its Docker image bundles package managers so CI jobs can scan mixed-language repositories without installing every ecosystem tool on the host.
Wie es verwendet wird
Users run license_finder after installing project dependencies. The tool records approvals and permitted licenses, exits non-zero for unapproved dependencies, and can run in CI to catch new dependency-license work items.
Warum Paket-Nerds sich dafür interessieren
LicenseFinder is important to package people because it exposes the practical mess of license metadata: every package manager has different files, commands, and metadata conventions, so the tool's value is in its adapters and decision record as much as in license detection.
Zeitleiste
- 2011-01-17: GitHub repository created.
- 2021-06-25: v6.14.1 changelog entry includes a command-injection fix for CocoaPods projects.
- 2022-03-04: v7.0.0 adds Ruby 3 support, Flutter scanning, and SPDX identifier reporting.
- 2022-11-28: v7.1.0 adds a pre-commit hook.
- 2024-05-07: v7.2.0 adds Ruby 3.3 support and several package-manager compatibility updates.
Related projects
- Related projects include package-manager license commands, SPDX identifiers, pre-commit, and license-policy tools such as Licensed.
Quellen
Sicherheitslage
Risikostufe: grün
narrow executable package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- narrow executable package without higher-risk signals
Signale
- metadata:no-higher-risk-signals
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Installiert mit 1 Laufzeitabhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
config/license_finder.ymldoc/dependency_decisions.yml
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
license_finder | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-08
Manager-Version7.2.1
Manager aktualisiert2026-06-22
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://github.com/pivotal/LicenseFinder
- InfoNo cached GitHub release or tag data was available.https://github.com/pivotal/LicenseFindernone Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:licensefinder |
|---|---|
| Version | 7.2.1 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/licensefinder |
| Homepage | https://github.com/pivotal/LicenseFinder |
| Repository | https://github.com/pivotal/LicenseFinder |
| Upstream-Dokumentation | https://github.com/pivotal/LicenseFinder#readme |
| Lizenz | MIT |
| Quellarchiv | https://github.com/pivotal/LicenseFinder.git |
| Zuletzt aktualisiert | 2026-06-22T14:05:10-07:00 |
| Pulse | updated |
| Abhängigkeiten | ruby |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | licensefinder |
| Version Scheme | 0 |
| Revision | 1 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Nix92%
license_finder
nix profile install nixpkgs#license_finder- installed executable or alias match
- Abgeglichen nach: License Finder
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment