liter8 / license
A dependency is a legal contract, not an npm import.
Read the grant. Trace the boundary. Ship the notices. A software compliance gym with a deterministic engine you can inspect.
The boundary is the question
| From → to | Connection | Semantics |
|---|---|---|
| app → library | bundle | intimate |
8 tracks · 12 lessons · 16 drills · 6 audits
Inspect the grant
Parse SPDX alternatives and distinguish permission from missing evidence.
Trace the work
Explore linking, modified network services and corresponding-source obligations.
Repair the release
Edit attribution, notices and SBOMs, then check the actual artifact state.
The engine evaluates supplied facts under pinned rules. Unknown boundaries remain unresolved. No accounts, analytics or runtime AI; progress stays in your browser unless you configure your own sync server.