Is this tool suitable for enterprise compliance audits?

Yes, it provides a repeatable and verifiable way to document the licenses of all Python dependencies, aiding in legal reviews and compliance reporting.

Does it work with specific versions of Python packages?

Yes, you can provide a specific version number to find the license associated with that particular release, which is critical for projects with version-specific licensing changes.

How does the Python License Finder ensure data accuracy?

The skill follows a deterministic process, first checking official PyPI metadata and then falling back to direct source code inspection to verify the actual license file in the repository.

What happens if a package has no license listed on PyPI?

The skill will use its secondary fallback method: it locates the source repository URL, performs a shallow clone, and searches for files matching license naming patterns to find the answer.

Python License Finder

Name: Python License Finder
Author: opendatahub-io

byopendatahub-io

•

Security & Testing

Identifies license information for Python packages by analyzing PyPI metadata and verifying source code repositories.

About

The Python License Finder skill provides a deterministic workflow for identifying the specific licenses governing Python packages. It utilizes a robust two-step approach: first, it programmatically inspects PyPI metadata; if information is missing, it automatically discovers the source repository and performs a shallow clone to locate and verify LICENSE or COPYING files. This tool is indispensable for developers and compliance officers who need to ensure legal standards are met within their Python dependency tree.

Key Features

Deterministic PyPI metadata inspection for rapid license identification
Automated Git repository discovery for packages with missing metadata
Support for version-specific license analysis to ensure release accuracy
Efficient shallow cloning to extract license files without full history downloads
Pattern-based searching for standard license filenames like COPYING and COPYRIGHT
12 GitHub stars

Use Cases

Automating open-source compliance audits for Python projects
Performing Software Composition Analysis (SCA) during development
Verifying redistribution rights for third-party dependencies

About

Key Features

Deterministic PyPI metadata inspection for rapid license identification
Automated Git repository discovery for packages with missing metadata
Support for version-specific license analysis to ensure release accuracy
Efficient shallow cloning to extract license files without full history downloads
Pattern-based searching for standard license filenames like COPYING and COPYRIGHT
12 GitHub stars

Use Cases

Automating open-source compliance audits for Python projects
Performing Software Composition Analysis (SCA) during development
Verifying redistribution rights for third-party dependencies