Flags a disallowed open-source license the moment an agent adds the dependency, not at a later audit.
Price: $15 one-time
Included free
npm + pip manifest scanning against live registry license data
Configurable allow/deny list
Unlocked with a license
go.mod / Cargo.toml support
Shareable .licenserc.json team policy file
Getting a license
Open the AgentLicense Guard sidebar (activity bar icon) and click Get License. After purchase you'll receive a license key — paste it into the sidebar and click Activate License. Keys are machine-locked; use Move to another machine… in the sidebar before reinstalling on a new device.
How license checks work
License data is looked up live (no bundled offline snapshot yet) against registry.npmjs.org for npm packages and pypi.org's JSON API for pip packages, cached in memory for the session. Results are compared against agentlicenseGuard.deniedLicenses, or — with a license activated — against the deny list in a workspace .licenserc.json when one exists. Violations are reported as diagnostics on the manifest file plus a summary notification, and checks re-run automatically whenever a manifest file is saved.
With a license, go.mod and Cargo.toml are also scanned. Cargo dependencies are checked against crates.io. Go module license checks are lighter-touch: proxy.golang.org can confirm a module/version resolves but doesn't expose license metadata, so Go dependencies are reported as unchecked rather than pass/fail — Maven support is not implemented in this release.
Roadmap (not implemented yet)
Maven manifest support.
Snippet-level "looks copied from a licensed source" heuristic — planned as an unimplemented v3 stretch goal.
