license-comply review
A focused open-source CLI for Python license discovery, policy checks, and compliance reporting.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
license-comply is an open-source command-line tool for developers, lawyers, and compliance professionals who need to assess Python dependency license risks. It discovers dependencies from pyproject.toml and requirements.txt, scans installed virtual-environment packages for transitive dependencies, retrieves license metadata through the PyPI JSON API, and classifies licenses with SPDX identifiers. The tool also handles dual-license scenarios and evaluates compatibility according to the project type.
Policy enforcement is a central strength. Teams can define custom allow, deny, and review rules, then run compliance checks in CI mode with exit codes based on the results. Obligation rollups provide a view across dependencies, while reports can be generated in terminal, Markdown, HTML, or JSON formats. GitHub Actions is listed as an integration, making the tool suitable for repository-based workflows where license checks need to participate in automated builds.
The product’s focus is narrow and clear: local Python license compliance analysis rather than a hosted, multi-language governance platform. Optional executive summaries can use Claude or OpenAI, adding a higher-level explanation layer alongside the underlying reports. SBOM export is planned, so the current workflow is centered on dependency discovery, compatibility analysis, policy decisions, obligation tracking, and report generation. Choose license-comply when a Python project needs open-source, on-premise policy checks with CI integration. Teams seeking broader language coverage or an established SBOM exchange workflow should consider a different category fit.
license-comply pros and cons
- Where it wins
- Finds direct and transitive Python dependency licenses
- Supports custom allow, deny, and review policies
- Produces terminal, Markdown, HTML, and JSON reports
- Where it doesn't
- Coverage centers on Python projects
- Uses a local CLI rather than a hosted service
- SBOM export is planned, so workflows center on reports
license-comply fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update