How do I check the license of an npm or PyPI package?
Last updated
TL;DR: Example: a package declaring MIT, shipped commercially: Yes. Packages declare their license in registry metadata. a2ally reads it for you: pass the package page URL as source_url.
Is example: a package declaring MIT, shipped commercially allowed under MIT License?
Yes. Every use you described is granted by MIT, and nothing you described is prohibited.
License: MIT License (MIT, curated)
Duties: attribution, license_notice
What else should I know?
- A declared license is the publisher's claim; check the LICENSE file for anything unusual. Packages with no declared license have no grant: no license found is not permission.
What are the sources?
How can I check it myself (free, no key)?
{
"tool": "check_license",
"arguments": {
"license": "MIT",
"intended_use": {
"commercial_use": true,
"redistribution": true
}
}
}Computed from a2ally's license profiles; not legal advice. JSON · Markdown
Get a free API key in one call
No card and no email needed. 100 free credits; the license and policy checks stay free without a key.
curl -s -X POST https://www.a2ally.com/v1/accounts/signup -H "Content-Type: application/json" -d '{"accept_terms":true}'
export A2ALLY_API_KEY=rs_... # the api_key from the reply (shown once)
curl -s https://www.a2ally.com/v1/licenses/check -H "Authorization: Bearer $A2ALLY_API_KEY" \
-H "Content-Type: application/json" -d '{"license":"MIT","intended_use":{"commercial_use":true}}'