Super License Scanner
Rust CLI that recursively walks JavaScript lockfiles (yarn.lock, with package-lock and pnpm planned) and resolves each dependency's license through the GitHub and npm APIs without downloading packages, multithreaded with hash-based dedupe. Built for the Pay It Forward License effort and released under the PIF license.
- BPM
- 136
- GRADE
- S
- LEVEL
- 6
- RELEASES
- 0
- YEARS
- 2025–2026
Every License In The Tree
April 10 2025: a Rust binary that tells you what's in a yarn.lock and what each piece is licensed under.
It doesn't download any packages. It parses the lockfile, and worker threads hit the GitHub and npm APIs for just the package metadata, with a hash table keeping the same package from being processed twice, which helps a lot when a tree fans out into thousands of overlapping nodes. Output is one line per dependency with its license. It only did yarn.lock.
I built it for the Pay It Forward License effort and released it under that license. One sitting, a month before tumeric started.