3 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
License-compliance verdict for one package and its whole transitive dependency tree. Resolves the deps.dev graph plus the declared SPDX license of every node, finds copyleft contamination points, and returns a target-and...
License-compliance verdict for a whole dependency list or parsed manifest in one call. Accepts name-at-version strings, a parsed package.json, a requirements.txt list or go.mod imports, resolves each declared SPDX licens...
Pure-compute license-compatibility verdict, no network. Give a list of SPDX ids or one SPDX expression with AND, OR and WITH plus a target license and a distribution model, and get the matrix verdict of safe, attribution...