- Home
- Open Source License Compliance Software
- Licensable
Licensable
What it is
Licensable is a web service for open-source license insights and compliance reporting on GitHub repositories. It examines manifests and metadata to map dependencies, then flags possible license obligations and checks compatibility with the repository's license. If multiple licenses apply, it chooses the most permissive option. Checks can show success, a neutral result when some dependency licenses may be unknown, or failure for an incompatible license. Supported ecosystems include Python, npm, Yarn, pnpm, Rust, Ruby, Go, CocoaPods, Gradle, Maven, and NuGet. To begin, users install it through GitHub, select organizations and repositories, and open a pull request. Access is limited to repositories users grant. Its privacy policy says OAuth scopes are read-only, communications use HTTPS, and source code is not persistently stored unless enabled. Repository metadata and results are retained only as needed to provide the service or as required by law. Licensable says results are best effort, may be incomplete or incorrect, and are not legal advice.
For and against
For
- Free for public repositories
- Supports a range of package ecosystems
- Read-only OAuth scopes, according to its privacy policy
- Users grant access to specific repositories
Against
- Private repository access is free during open beta
- Results may be incomplete or incorrect
- Results are not legal advice
The verdict
Licensable offers GitHub-based dependency license checks at no listed cost. Treat its findings as best effort rather than legal advice, and note that private-repository access is identified as beta.
Who it suits
Licensable suits developers or teams checking open-source license obligations in GitHub repositories. It may help teams that want automated dependency analysis and compliance reporting.
Plans and prices
Private repositories (beta)
Free for private repositories during open beta
Read 7 Oct 2026 · licensable.io
Public repositories
Free for public repositories
Read 7 Oct 2026 · licensable.io
On the record
- Check results
- A check can report success, neutral when some dependency licenses may be unknown, or failure when a dependency license is incompatible with the repository license.licensable.io · read 7 Oct 2026
- Data retention
- The privacy policy says repository metadata and analysis results are retained only as long as needed to provide the service or as required by law.licensable.io · read 7 Oct 2026
- Data sources
- Licensable enriches license data with external sources such as ClearlyDefined and curated datasets.licensable.io · read 7 Oct 2026
- Dependency scanning
- It scans repositories for manifests or metadata files to capture the dependency tree.licensable.io · read 7 Oct 2026
- GitHub access
- It accesses GitHub repository metadata, dependency information, and source code for compliance analysis, with access limited to repositories the user grants.licensable.io · read 7 Oct 2026
- GitHub setup
- Users install Licensable through GitHub, select organizations and repositories, then open a pull request to start.licensable.io · read 7 Oct 2026
- License analysis
- It flags potential license obligations and checks compatibility with the project’s license.licensable.io · read 7 Oct 2026
- License selection
- When multiple licenses apply, it automatically selects the most permissive option.licensable.io · read 7 Oct 2026
- Limitations
- Licensable says its results are best effort, may not be fully correct or exhaustive, and are not legal advice.licensable.io · read 7 Oct 2026
- Purpose
- Licensable provides open-source license insights and compliance reporting for GitHub repositories.licensable.io · read 7 Oct 2026
- Security
- The privacy policy says OAuth scopes are read-only, communications use HTTPS, and source code is not persistently stored unless explicitly enabled.licensable.io · read 7 Oct 2026
- Support
- The terms list [email protected] for questions or feedback.licensable.io · read 7 Oct 2026
- Supported ecosystems
- Its documented lockfile and manifest support includes Python, npm, Yarn, pnpm, Rust, Ruby, Go, CocoaPods, Gradle, Maven, and NuGet.licensable.io · read 7 Oct 2026
