Skip to main content
Glama
deenesjakoruzh
dongsheng123132

dsh-license-obligation-proof

by dongsheng123132
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Local

dsh-license-obligation-proof

Offline, deterministic evidence that every required compliance artifact for a supplied release decision was delivered: NOTICE, license text, source offer, source bundle, or modification notice. Inputs and reports contain hashes, obligation codes and bounded metadata only—never license bodies, copyright text, package source or secrets.

This is deliberately not another license scanner. dsh-license-guard already scans node_modules, normalizes SPDX identifiers and applies allow/deny policy. This plugin starts after scanning and expert review: it verifies that the declared component set, decisions, obligations, delivered artifact digests, distinct receipts and fresh zero-unresolved closure agree. It does not scan packages, normalize SPDX, interpret a license, or provide legal advice.

npm test
npm run check
node bin/dsh-license-obligation-proof.mjs verify examples/closed.json

DSH tools: dsh_license_obligation_inspect and dsh_license_obligation_verify. MCP exposes equivalent proof-only inline tools. Reports explicitly retain provesComponentSetExhaustive: false and provesLegalCompliance: false.

References: SPDX License Expressions and OpenChain ISO/IEC 5230.

MIT licensed.

This server cannot be installed

RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd
A
license - permissive license
Not graded
quality - not tested
C
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
–Release cycle
–Releases (12mo)
Commit activity

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

  • proofspec

    christian140903-sudo
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables defining and verifying evidence contracts for claims in READMEs, releases, or product pages using constrained verifiers and generating hash-chained receipts and reports.
    23
    MIT

  • codex-protocol-guardian

    wewq36720-cyber
    F
    license
    Not graded
    quality
    C
    maintenance
    Enforces protocol-driven development by validating requirements, designs, scope, and acceptance evidence, while maintaining immutable, traceable governance archives.

  • dsh-build-hermeticity-proof

    dongsheng123132
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables verifying that recorded build accesses stay within a declared closure by inspecting and verifying hash-only receipts, without executing builds or making network requests.
    MIT

  • dsh-artifact-promotion-proof

    dongsheng123132
    A
    license
    Not graded
    quality
    C
    maintenance
    Enables offline, deterministic verification that one immutable artifact followed a declared build-to-production promotion chain, using only hash-based evidence and failing closed on incomplete or nonconformant gate records.
    MIT

View all related MCP servers

Related MCP Connectors

  • mcp

    Generate, audit, and maintain legal policies that match what your code actually does.

  • Attester Oracle

    Verify PyPI and npm packages, symbols, and version diffs against real artifacts. Free, no account.

  • WORKS Public Verifier

    Independent static verification for exact immutable public GitHub commits.

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/dongsheng123132/dsh-license-obligation-proof'

If you have feedback or need assistance with the MCP directory API, please join our Discord server