English Français العربية

io.github.bighippoman/license-compliance

Official registry Security

Scan npm dependencies for license compliance issues. Catch GPL contamination.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package license-compliance-mcp
Claude Code 
claude mcp add license-compliance -- npx -y license-compliance-mcp@1.0.2
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "license-compliance": {
            "command": "npx",
            "args": [
                "-y",
                "license-compliance-mcp@1.0.2"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. license-compliance-mcp
  2. Tools
  3. Install
  4. How It Works
  5. Requirements

license-compliance-mcp

MCP server that scans npm project dependencies for license compliance issues. Catch GPL contamination before code ships.

Tools

check-licenses

Scan a project's npm dependencies against a license policy and get a detailed compliance report.

Parameters:

  • path (required) — Absolute path to the project root
  • policy (optional, default: "permissive") — Policy preset or custom SPDX expression
    • "permissive" — Only MIT, ISC, BSD, Apache-2.0, etc.
    • "weak-copyleft" — Adds LGPL, MPL-2.0, EPL-2.0
    • "copyleft" — Adds GPL, AGPL
    • Custom: "(MIT OR Apache-2.0)" — Any valid SPDX expression
explain-license

Get a plain-language explanation of any SPDX license — permissions, conditions, limitations, compatibility, and gotchas.

Parameters:

  • license (required) — SPDX identifier (e.g., "MIT", "GPL-3.0-only", "Apache-2.0")

Install

Claude Code
claude mcp add license-compliance -- npx -y license-compliance-mcp
Claude Desktop / Cursor

Add to your config (claude_desktop_config.json or .cursor/mcp.json):

{
  "mcpServers": {
    "license-compliance": {
      "command": "npx",
      "args": ["-y", "license-compliance-mcp"]
    }
  }
}

How It Works

  1. Scans node_modules using license-checker-rseidelsohn
  2. Normalizes license strings to valid SPDX using spdx-correct
  3. Evaluates each package against the policy using spdx-satisfies
  4. Traces dependency chains to show how problematic packages entered the project
  5. Generates a markdown report grouped by severity (critical > warning > info)

Requirements

  • Node.js >= 18
  • Project must have node_modules installed (npm install)

Frequently asked questions

What is io.github.bighippoman/license-compliance?

Scan npm dependencies for license compliance issues. Catch GPL contamination.

How do I install io.github.bighippoman/license-compliance?

It runs on your machine. In Claude Code: claude mcp add license-compliance -- npx -y license-compliance-mcp@1.0.2. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.bighippoman/license-compliance need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.bighippoman/license-compliance open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.bighippoman/license-compliance?

It is published by bighippoman. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.