Does this skill support automated scanning?

Yes, it provides implementation patterns and guidance for integrating license scanning tools into CI/CD pipelines such as GitHub Actions.

Can it distinguish between SaaS and binary distribution obligations?

Yes, it specifically analyzes obligations based on the use case, distinguishing between internal use, SaaS/network services, and mobile or desktop distribution.

How does it handle license compatibility issues?

It includes a detailed inbound-to-outbound compatibility matrix to identify conflicts, such as those between Apache-2.0 and GPL-2.0.

Does it provide templates for organizational policies?

Yes, it includes a comprehensive License Policy Template that defines approved, restricted, and prohibited license categories for teams.

Open Source License Compliance

Name: Open Source License Compliance
Author: melodic-software

bymelodic-software

•

セキュリティとテスト

Manages open source license compatibility, obligation tracking, and compliance workflows for software development projects.

概要

The License Compliance skill provides comprehensive guidance for navigating the complexities of open source licensing throughout the software development lifecycle. It enables developers to evaluate dependencies for compatibility, understand specific distribution obligations for various license types (Permissive, Weak/Strong Copyleft), and automate the creation of attribution notices. By integrating license policy enforcement into development workflows and CI/CD pipelines, this skill helps organizations mitigate legal risks and maintain transparency in their third-party software usage.

主な機能

Automated NOTICE and attribution file generation
License compatibility matrix analysis
Policy enforcement templates for organizational standards
Obligation tracking for SaaS and binary distribution
CI/CD integration for license scanning
12 GitHub stars

ユースケース

Implementing automated license auditing in CI/CD pipelines
Evaluating new open source dependencies for license conflicts
Generating attribution files and NOTICES for project releases

概要

主な機能

Automated NOTICE and attribution file generation
License compatibility matrix analysis
Policy enforcement templates for organizational standards
Obligation tracking for SaaS and binary distribution
CI/CD integration for license scanning
12 GitHub stars

ユースケース

Implementing automated license auditing in CI/CD pipelines
Evaluating new open source dependencies for license conflicts
Generating attribution files and NOTICES for project releases