Detailed Information

jeap-frontend-license-checker is a command line tool that checks the licenses of the installed npm dependencies of a frontend project against a license policy, and generates the third-party notice file listing those dependencies. The accepted permissive licenses ship with the tool, so a project without configuration is already checked against the jEAP policy and only declares the exceptions it actually needs. License information is read from the package manifests, falling back to recognising well-known license texts in a package's license file. SPDX license expressions are evaluated, and a dual licensed package is accepted through its permissive alternative while the decision stays visible in the report. Exception keys support version and scope wildcards for scoped packages, so a dependency update of an exempted package does not break the build. The tool has no runtime dependencies.