Does this skill support automated scanning?

Yes, it provides implementation patterns and guidance for integrating license scanning tools into CI/CD pipelines such as GitHub Actions.

Can it distinguish between SaaS and binary distribution obligations?

Yes, it specifically analyzes obligations based on the use case, distinguishing between internal use, SaaS/network services, and mobile or desktop distribution.

How does it handle license compatibility issues?

It includes a detailed inbound-to-outbound compatibility matrix to identify conflicts, such as those between Apache-2.0 and GPL-2.0.

Does it provide templates for organizational policies?

Yes, it includes a comprehensive License Policy Template that defines approved, restricted, and prohibited license categories for teams.

Open Source License Compliance

Name: Open Source License Compliance
Author: melodic-software

bymelodic-software

•

セキュリティとテスト

Manages open source license compatibility, obligation tracking, and compliance workflows for software development projects.

The License Compliance skill provides comprehensive guidance for navigating the complexities of open source licensing throughout the software development lifecycle. It enables developers to evaluate dependencies for compatibility, understand specific distribution obligations for various license types (Permissive, Weak/Strong Copyleft), and automate the creation of attribution notices. By integrating license policy enforcement into development workflows and CI/CD pipelines, this skill helps organizations mitigate legal risks and maintain transparency in their third-party software usage.

主な機能

01Automated NOTICE and attribution file generation

02License compatibility matrix analysis

03Policy enforcement templates for organizational standards

04Obligation tracking for SaaS and binary distribution

05CI/CD integration for license scanning

0612 GitHub stars

ユースケース

01Implementing automated license auditing in CI/CD pipelines

02Evaluating new open source dependencies for license conflicts

03Generating attribution files and NOTICES for project releases

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add melodic-software/claude-code-plugins license-compliance

For use in Claude.ai and ChatGPT

Download Skill