metrics/source/plugins/licenses/README.md

📜 Repository licenses
This plugin display repository license informations like permissions, limitations and conditions along with additional stats about dependencies.
Supported features → Full specification	📘 Repository template
	📓 Repositories
	🔑 (scopeless) read:org (optional) read:user (optional) repo (optional)
Permissions, limitations and conditions Licenses overview

🔎 Licenses analysis

Use to plugin_licenses_setup command to setup project dependencies.

Example: setup a NodeJS project using npm ci

- name: Licenses and permissions
  with:
    repo: metrics
    plugin_licenses: yes
    plugin_licenses_setup: npm ci

Dependencies will be analyzed by GitHub licensed and compared against GitHub known licenses.

⚠️ This is NOT legal advice, use at your own risk

💣 This plugin SHOULD NOT be enabled on web instances, since it allows raw command injection. This could result in compromised server!

➡️ Available options

Type	Description
plugin_licenses	Enable licenses plugin
🌐 Web instances must configure settings.json type: boolean default: no
plugin_licenses_setup	Setup command
type: string
plugin_licenses_ratio	Display used licenses ratio
type: boolean default: no
plugin_licenses_legal	Display permissions, limitations and conditions about used licenses
type: boolean default: yes

ℹ️ Examples workflows

name: Licenses and permissions
with:
  filename: metrics.plugin.licenses.svg
  token: ${{ secrets.METRICS_TOKEN }}
  base: ""
  template: repository
  repo: metrics
  plugin_licenses: yes
  plugin_licenses_setup: npm ci

name: Licenses with open-source ratio graphs
uses: lowlighter/metrics@latest
with:
  filename: metrics.plugin.licenses.ratio.svg
  token: ${{ secrets.METRICS_TOKEN }}
  base: ""
  template: repository
  repo: metrics
  plugin_licenses: yes
  plugin_licenses_setup: npm ci
  plugin_licenses_legal: no
  plugin_licenses_ratio: yes