Scans your package.json dependencies and flags license compatibility issues by fetching license data from the npm registry. Exposes an audit_licenses tool that classifies packages into permissive (MIT, Apache), copyleft (GPL, AGPL), weak copyleft (LGPL, MPL), and unknown buckets, then checks for conflicts like GPL dependencies in MIT projects. Returns a JSON report with risk levels (low, medium, high) and specific warnings about viral licenses that could force you to open source your code. Analyzes up to 20 dependencies at a time. Useful when onboarding new dependencies or preparing for commercial distribution where license compliance matters.
claude mcp add --transport stdio webmoleai-mcp-check-licenses uvx mcp-check-licenses