{"uid":"cap_PA8bLDxn4LyC9_v6BDaOr","slug":"sicher-halowerk-com-license-check-154add3c","name":"sicher.halowerk.com License Check","description":"Looks up the declared licence of each package through deps.dev and sorts the result by the only question that matters for a closed, sold product: what does this licence demand. Permissive licences need attribution. Weak copyleft affects changes to the library itself. Strong copyleft can force disclosure of the whole work on distribution. Network copyleft such as AGPL and SSPL bites on operating the software as a service, which is the sharpest case for a paid API.","url":"https://sicher.halowerk.com/v1/license-check","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"usage":{"enum":["saas","distributed","internal"],"type":"string","default":"saas","description":"How you use the code. saas = operated as a network service, which is what triggers AGPL."},"packages":{"type":"array","items":{"type":"object","required":["name"],"properties":{"name":{"type":"string","maxLength":200,"minLength":1},"version":{"type":"string","maxLength":60,"description":"Exact version. The default version is used if omitted."},"ecosystem":{"type":"string","maxLength":30}},"additionalProperties":false},"maxItems":80,"minItems":1,"description":"Packages to check."},"ecosystem":{"type":"string","default":"npm","maxLength":30,"description":"Default ecosystem."}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_oIyLFCSgduaJIZJi5hYDu","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Looks up the declared open-source licence for each submitted package via deps.dev and categorises it by copyleft obligation level relevant to commercial and SaaS distribution.","exampleAgentPrompt":"Can you check the licences on these npm packages — react@18.2.0, lodash@4.17.21, and agpl-licensed-lib@1.0.0 — and tell me which ones would be a problem for a closed-source, sold product, especially anything that bites on running a paid API?","exampleUseCases":[{"title":"Pre-launch SaaS licence audit","prompt":"Before we launch our paid API next week, can you check all our Go dependencies and flag any that have AGPL, SSPL, or other network-copyleft licences that could force us to open-source the service?"},{"title":"OSS attribution list for shipped product","prompt":"We're about to ship version 2 of our desktop app — can you scan these npm packages and tell me which ones are permissive licences requiring attribution so I can build the credits screen?"},{"title":"Acquisition due diligence licence scan","prompt":"We're doing due diligence on a startup and I have their requirements.txt dependencies — can you check each package's licence and categorise them by how risky they are for a closed, commercially sold product?"}],"resultDescription":"Returns each package with its declared licence identifier (e.g. MIT, Apache-2.0, GPL-3.0, AGPL-3.0), a classification of the licence obligation level (permissive/attribution-only, weak copyleft, strong copyleft, network copyleft), and a plain-language summary of what that licence demands in the context of a closed, sold, or SaaS-operated product.","failureModes":["Package not found on deps.dev — unknown or private package returns an error or null licence","Package version not found — specific pinned version unavailable in the index","Licence field missing in package metadata — some packages declare no licence, returned as unknown","Rate or payload limits exceeded — very large package lists may be rejected or truncated","Network copyleft classification ambiguity — dual-licensed packages may require manual review"],"whenToPreferThis":"Prefer this endpoint when you need a licence-obligation-aware classification (not just the raw SPDX identifier) specifically oriented toward commercial and SaaS risk — it goes beyond raw licence lookup by categorising each licence into permissive/weak-copyleft/strong-copyleft/network-copyleft tiers that matter for a paid, closed, or operated-as-a-service product. Choose it over generic SBOM or vulnerability tools when the question is legal/licence compliance rather than security CVEs.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-15T06:35:27.580Z","isFirstParty":false}