License Compliance

Scans your npm dependencies for license violations by walking node_modules and checking each package against configurable policies. Exposes two tools: check_licenses takes a project path and policy preset (permissive, weak-copyleft, copyleft, or custom SPDX expressions) and returns a markdown report flagging GPL contamination and other issues with full dependency chains showing how problems entered your tree. explain_license gives plain English breakdowns of any SPDX license including permissions and compatibility gotchas. Uses license-checker-rseidelsohn under the hood with SPDX normalization and satisfies logic. Runs via npx, requires an installed node_modules to scan.