Changelog¶

0.3.0 (2026-04-19)¶

[tool.license-audit.ignored-packages] configuration for exempting specific packages from policy evaluation

Reference documentation pages covering tool comparison, how detection works, and known limitations

Improved terminal rendering for recommend, check, and report commands with clearer formatting and shared layout helpers
Streamlined README and user guide, including an expanded CI integration guide
Internal refactor of the analyzer, policy engine, classifier, data store, SPDX normalizer, recommender, sources, and environment provisioning into class-based implementations (no change to CLI behavior or output contracts)

License detection for all transitive dependencies using PEP 639 metadata, trove classifiers, and configurable overrides
Pairwise compatibility analysis using the OSADL compatibility matrix (123 licenses)
License recommendations based on dependency constraints
Compliance report generation in Markdown, JSON, and third-party notices formats
Policy checks with configurable levels (permissive, weak-copyleft, strong-copyleft, network-copyleft)
Dependency group filtering (main, dev, optional:<name>, group:<name>) to scope analysis to specific groups
SPDX normalization with 50+ common PyPI license string aliases
Support for uv.lock, pyproject.toml, requirements.txt, and live virtual environments
Refreshable OSADL data via license-audit refresh
Configuration via [tool.license-audit] in pyproject.toml