license-comply
github.com
Spec sheet
- Purpose
- Scans Python project dependencies for open-source licenses and analyzes compliance risks based on project type.Read 7 Oct 2026 · github.com
- Integrations
- Looks up license metadata through the PyPI JSON API and supports optional AI summaries using Claude or OpenAI, which require an API key.Read 7 Oct 2026 · github.com
- Support
- The project invites bug reports and feature requests through GitHub issues and welcomes pull requests.Read 7 Oct 2026 · github.com
- Maker
- The project says it was built by Sam Clearwater, a technology and AI lawyer.Read 7 Oct 2026 · github.com
- AI summaries
- Optional executive summaries use Claude by default or OpenAI and require an API key.Read 7 Oct 2026 · github.com
- Caching
- PyPI lookup results are cached locally for seven days by default.Read 7 Oct 2026 · github.com
- Custom policies
- Policy files let organizations allow, deny, or flag licenses for review.Read 7 Oct 2026 · github.com
- Dependency discovery
- Reads dependencies from pyproject.toml or requirements.txt and scans installed transitive dependencies by default.Read 7 Oct 2026 · github.com
- Ecosystem limitation
- It supports Python packages and does not yet support npm, Go modules, or other ecosystems.Read 7 Oct 2026 · github.com
- Intended audience
- The author says the tool is intended to help lawyers and compliance professionals who may not have deep software engineering backgrounds understand what it does and why.Read 7 Oct 2026 · github.com
- Legal limitation
- The project says its output is not legal advice and recommends consulting qualified legal counsel for situation-specific advice.Read 7 Oct 2026 · github.com
- License expression support
- It handles SPDX OR and AND expressions but not complex nested expressions.Read 7 Oct 2026 · github.com
- Limits
- The tool relies on declared PyPI metadata rather than scanning license files, supports Python packages only, and does not detect copied code.Read 7 Oct 2026 · github.com
- Metadata limitation
- The tool relies on PyPI metadata rather than scanning the actual text of package LICENSE files, so inaccurate or missing metadata may produce incorrect results.Read 7 Oct 2026 · github.com
- Policy rules
- A customizable policy engine lets organizations allow, deny, or flag licenses for review.Read 7 Oct 2026 · github.com
- Report formats
- Reports can be generated in terminal, Markdown, HTML, and JSON formats.Read 7 Oct 2026 · github.com
- Reports
- Generates terminal, Markdown, HTML, and JSON reports, with CI mode and exit codes for build pipelines.Read 7 Oct 2026 · github.com
- Risk analysis
- Findings are rated clean, notice, warning, or critical and include plain-English explanations and remediation steps.Read 7 Oct 2026 · github.com
- Risk reports
- Reports findings as clean, notice, warning, or critical, with plain-English explanations and remediation steps.Read 7 Oct 2026 · github.com
- Security reporting
- The security policy asks users to report vulnerabilities through GitHub private vulnerability reporting and says not to open a public issue for them.Read 7 Oct 2026 · github.com
Plans and prices
Open source Free Python packages only · requires Python 3.9 or later Read 7 Oct 2026 · github.com
Open-source Free Python dependencies only · Python 3.9+ Read 7 Oct 2026 · github.com
Where Specifiction places it
- Open Source License Compliance Software#11 of 288.0
Alternatives to license-complyAll alternatives →
FOSSology Free plan 8.8 Visit 
FossID Workbench 8.2 Visit 
Double Open Compliance Free plan 8.1 Visit