find_license_violations
Identify dependency licenses in Java/Kotlin repositories, query Maven Central, and flag violations against allowed SPDX license IDs. Returns only violations and warnings.
Instructions
Check dependencies in the repo for license compliance.
Looks for pom.xml and build.gradle/build.gradle.kts in the repo root.
Queries Maven Central for each dependency's license.
Args:
repo_name: The logical name of the indexed repository.
allowed: List of SPDX license IDs to allow
(default: MIT, Apache-2.0, BSD-*, ISC, etc.).
license_overrides: Maps "group:artifact" to a license SPDX string to
bypass Maven Central lookups (useful for testing or
when a known license is not in Maven Central metadata).
Returns:
List of dicts [{group, artifact, version, license, status, reason}]
where status is "OK", "VIOLATION", "WARNING", or "UNKNOWN".
Only VIOLATION and WARNING items are returned (OK items filtered out).Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| repo_name | Yes | ||
| allowed | No | ||
| license_overrides | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |