My companies web UI app is React/Redux/Node based. node_modules has some 900 directories in it. Before we release the app, Legal wants a review of the license status of all Open Source Software included, both server and UI.
What is an easy way to review the license type for all of the Node packages? "open each README, find the license, figure out what type it is, note it down, open next README..." is not a fun suggestion.
You can use license-checker
.
$ npm install -g license-checker
$ cd project/
$ license-checker
It then gives you a list of all dependencies and their licenses, e.g.:
├─ [email protected]
│ ├─ repository: http://github.com/chriso/cli
│ └─ licenses: MIT