kilotronic/Vendored License Check
Enforce that every vendored asset file committed to the repo is declared with an allow-listed SPDX license.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| manifest | Path to the TOML manifest, relative to root-dir. | no | vendored-assets.toml |
| root-dir | Repository root that roots/manifest are relative to. | no | . |
| roots | Vendored root directories to scan (comma- or space-separated). Falls back to manifest [config].roots. | no | "" |
| allow | Allowed SPDX ids (comma- or space-separated). Falls back to manifest [config].allow, then a built-in permissive set. | no | "" |
| deny | Explicitly denied SPDX ids (comma- or space-separated). Falls back to manifest [config].deny. | no | "" |
| python-version | Python version to run the gate with (>=3.11 required for tomllib). | no | 3.12 |
Outputs
no outputs