license-comply vs licscan
license-comply
github.com
licscan
licscan.devSide by side
| Figure | license-comply | licscan |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| Self-hosted | Yes | — |
| Plans published | 2 | 1 |
| Spec score · Open Source License Compliance Software | 8.0 (#11) | 7.7 (#13) |
| Maker | The project says it was built by Sam Clearwater, a technology and AI lawyer. | The website identifies codelake Technologies LLC as the maker. |
| Purpose | Scans Python project dependencies for open-source licenses and analyzes compliance risks based on project type. | LicScan scans project dependencies for license risk and generates SBOMs and EU CRA evidence. |
| Reports | Generates terminal, Markdown, HTML, and JSON reports, with CI mode and exit codes for build pipelines. | Output formats include table, JSON, HTML, Markdown, CycloneDX, SPDX, CRA PDF, SARIF, and JUnit. |
| Support | The project invites bug reports and feature requests through GitHub issues and welcomes pull requests. | The maker directs bug reports to GitHub issues and provides [email protected] for contact. |
Plans
In their own words
license-comply
license-comply has no write-up on Specifiction yet; its figures are above.
licscan
licscan is a free command-line tool for checking project dependencies for license risk and producing software bills of materials and EU CRA evidence. It supports Go, Node.js, PHP, Python, Ruby, Rust, and Java projects. Its configurable five-level risk model can deny, warn about, or allow licenses, with exceptions. Output formats include table, JSON, HTML, Markdown, CycloneDX, SPDX, CRA PDF, SARIF, and JUnit. CRA mode creates a PDF and an extended CycloneDX JSON SBOM containing manufacturer and product metadata. LicScan runs locally without an account, telemetry, backend connection, or phone-home behavior; the maker describes scans as deterministic for the same inputs. Its official GitHub Action can post verdicts on pull requests, fail builds for denied licenses, and upload SBOM artifacts. SARIF and JUnit outputs support other CI workflows. It runs on Linux, macOS, and Windows, with installation options including Homebrew, curl, and go install. The free open-source plan is listed at free, with $0 per scan and an Apache 2.0 license.