LicenseChecker

LicenseChecker is a command line tool checking licenses of swift package libraries that your app depends on.
It can detect libraries that are not included in a whitelist specifying the license type or library name.

Execution Example

$ license-checker --source-packages-path ~/SourcePackages --white-list-path ~/white-list.json 
✔︎ abseil               Apache
✔︎ BoringSSL-GRPC       BoringSSL
✔︎ Firebase             Apache
✔︎ GoogleAppMeasurement Apache
✔︎ GoogleDataTransport  Apache
✔︎ GoogleUtilities      MIT
✔︎ gRPC                 Apache
✔︎ GTMSessionFetcher    Apache
✔︎ Kanna                MIT
✔︎ KeychainAccess       MIT
✔︎ Kingfisher           MIT
✔︎ leveldb              BSD
✔︎ LicenseList          MIT
✔︎ nanopb               zlib
✔︎ ObjectMapper         MIT
✔︎ Promises             Apache
✔︎ R.swift.Library      MIT
✔︎ Reachability         MIT
✔︎ RxGesture            MIT
✔︎ RxSwift              MIT
✔︎ SwiftProtobuf        Apache
✅ No problems with library licensing.
$

Requirements

• Written in Swift 5.10
• Compatible with macOS 14.0+
• Development with Xcode 15.4+

How to Use

0. Prepare a white list (white-list.json).

• Specify the type of license to approve.
• Specify the name of library to approve (for private libraries).

LicenseChecker supports the following licenses:

license type	white list key
Apache license 2.0	Apache
MIT License	MIT
BSD 3-clause Clear license	BSD
zLib License	zlib
BoringSSL	BoringSSL

Sample of white-list.json

{
  "licenses": [
    "Apache", 
    "MIT", 
    "BSD",  
    "zlib",
    "BoringSSL"
  ],
  "libraries": [
    "PrivateLibrary-Hoge"
  ]
}

XcodeBuildToolPlugin (for Xcode Project)

1. Put white-list.json to the project root.
2. File > Add Package Dependencies…
   
3. Search https://github.com/cybozu/LicenseChecker.git.
   
4. Use plugin in Build Phases.
   

BuildToolPlugin (for Swift Package Project)

1. Put white-list.json to the package root.

2. Add the dependency of plugin to Package.swift.

   dependencies: [
       .package(url: "https://github.com/cybozu/LicenseChecker.git", exact: "1.2.0")
   ],

3. Use plugin in the target (Package.swift).

   targets: [
       .target(
           name: "SomeFeature",
           plugins: [
               .plugin(name: "LicenseCheckerPlugin", package: "LicenseChecker")
           ]
       )
   ]

CommandPlugin & Run Script in BuildPhases (for Xcode Project)

If your project directory structure is special and you want to specify the path to white-list.json, use CommandPlugin.

1. Add binary target & plugin to Package.swift.

   targets: [
       .binaryTarget(
           name: "license-checker",
           url: "https://github.com/cybozu/LicenseChecker/releases/download/1.2.0/license-checker-macos.artifactbundle.zip",
           checksum: "4b3aacb1c2b2b91012db0b13680eba82f79a779c7271d086e12028901ada71b5"
       ),
       .plugin(
           name: "LicenseCheckerCommand",
           capability: .command(
               intent: .custom(verb: "license-checker", description: "Run LicenseChecker"),
               permissions: []
           ),
           dependencies: ["license-checker"]
       )
   ]

2. Code Plugins/LicenseCheckerCommand/main.swift.

   import Foundation
   import PackagePlugin
   
   @main
   struct LicenseCheckerCommand: CommandPlugin {
       func performCommand(context: PluginContext, arguments: [String]) async throws {
           let licenseCheckerPath = try context.tool(named: "license-checker").path
           let commandURL = URL(fileURLWithPath: licenseCheckerPath.string, isDirectory: false)
   
           let process = try Process.run(commandURL, arguments: arguments)
           process.waitUntilExit()
   
           guard process.terminationReason == .exit else {
               Diagnostics.error("Termination Other Than Exit")
               return
           }
           guard process.terminationStatus == EXIT_SUCCESS else {
               Diagnostics.error("Command Failed")
               return
           }
       }
   }

3. Add a Run Script in BuildPhases

   SOURCE_PACKAGES_PATH=`echo ${BUILD_DIR%Build/*}SourcePackages`
   xcrun --sdk macosx swift package --package-path ./RoadWarriorPackages \
     --allow-writing-to-directory ${SRCROOT} \
     license-checker -s ${SOURCE_PACKAGES_PATH} -w [Path to white-list.json]

license-checker (command help)

$ swift run license-checker -h
Building for debugging...
Build complete! (0.10s)
OVERVIEW: A tool to check license of swift package libraries.

USAGE: license-checker --source-packages-path <source-packages-path> --white-list-path <white-list-path>

OPTIONS:
  -s, --source-packages-path <source-packages-path>
                          Path to SourcePackages directory
  -w, --white-list-path <white-list-path>
                          Path to white-list.json
  --version               Show the version.
  -h, --help              Show help information.