davglass / license-checker

Check NPM package licenses
Other
1.59k stars 215 forks source link

Overlooks All PnP Dependencies #250

Open Kurt-von-Laven opened 3 years ago

Kurt-von-Laven commented 3 years ago

When you run license-checker in a project that uses Plug'n'Play dependencies, the default in Yarn 2, rather than a node_modules directory, it only sees the package.json of the project itself and doesn't find any of the licenses of any of the dependencies.

ferm10n commented 1 year ago

You might want to check out this plugin for yarn https://github.com/tophat/yarn-plugin-licenses

Kurt-von-Laven commented 1 year ago

Yes, I am a contributor to that plugin. It doesn't work for us on Yarn >3.0.0 unfortunately on account of tophat/yarn-plugin-licenses#21. I recommend Pivotal's LicenseFinder to others who share this problem since support for Yarn v2+ was recently merged to address pivotal/LicenseFinder#912.