{"id":20632424,"url":"https://github.com/chrimaeon/gradle-licenses-plugin","last_synced_at":"2026-02-15T20:12:13.048Z","repository":{"id":41997166,"uuid":"172532264","full_name":"chrimaeon/gradle-licenses-plugin","owner":"chrimaeon","description":"This Gradle plugin provides tasks to generate a HTML / XML / Json file with the licenses used from the libraries.","archived":false,"fork":false,"pushed_at":"2026-02-15T09:50:46.000Z","size":1101,"stargazers_count":17,"open_issues_count":1,"forks_count":2,"subscribers_count":1,"default_branch":"master","last_synced_at":"2026-02-15T15:52:03.969Z","etag":null,"topics":["android","gradle","gradle-plugin","gradle-task","java","kotlin","license","license-management"],"latest_commit_sha":null,"homepage":"","language":"Kotlin","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chrimaeon.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-02-25T15:29:37.000Z","updated_at":"2025-08-22T16:00:33.000Z","dependencies_parsed_at":"2024-01-23T21:41:56.661Z","dependency_job_id":"65d6646d-0a3c-4e68-ad40-0924afc732e4","html_url":"https://github.com/chrimaeon/gradle-licenses-plugin","commit_stats":null,"previous_names":[],"tags_count":29,"template":false,"template_full_name":null,"purl":"pkg:github/chrimaeon/gradle-licenses-plugin","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chrimaeon%2Fgradle-licenses-plugin","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chrimaeon%2Fgradle-licenses-plugin/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chrimaeon%2Fgradle-licenses-plugin/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chrimaeon%2Fgradle-licenses-plugin/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chrimaeon","download_url":"https://codeload.github.com/chrimaeon/gradle-licenses-plugin/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chrimaeon%2Fgradle-licenses-plugin/sbom","scorecard":{"id":279052,"data":{"date":"2025-08-11","repo":{"name":"github.com/chrimaeon/gradle-licenses-plugin","commit":"ec3e37101ceb02bebc2b7037c9dd2bf48cabe3b3"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 0/15 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/create_release.yml:1","Warn: no topLevel permission defined: .github/workflows/main.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: gradle/wrapper/gradle-wrapper.jar:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/create_release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/create_release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create_release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/create_release.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/create_release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/create_release.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/main.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/main.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/chrimaeon/gradle-licenses-plugin/main.yml/master?enable=pin","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   3 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 15 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T15:15:57.323Z","repository_id":41997166,"created_at":"2025-08-17T15:15:57.324Z","updated_at":"2025-08-17T15:15:57.324Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29487979,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-15T19:29:10.908Z","status":"ssl_error","status_checked_at":"2026-02-15T19:29:10.419Z","response_time":118,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["android","gradle","gradle-plugin","gradle-task","java","kotlin","license","license-management"],"created_at":"2024-11-16T14:16:09.696Z","updated_at":"2026-02-15T20:12:13.042Z","avatar_url":"https://github.com/chrimaeon.png","language":"Kotlin","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Gradle Licenses Plugin [![Build \u0026 Test](https://github.com/chrimaeon/gradle-licenses-plugin/actions/workflows/main.yml/badge.svg)](https://github.com/chrimaeon/gradle-licenses-plugin/actions/workflows/main.yml) [![codecov](https://codecov.io/gh/chrimaeon/gradle-licenses-plugin/branch/master/graph/badge.svg?token=XY0G488B3B)](https://codecov.io/gh/chrimaeon/gradle-licenses-plugin)\n\n[![License](https://img.shields.io/badge/license-Apache%202.0-brightgreen.svg?style=for-the-badge)](http://www.apache.org/licenses/LICENSE-2.0)\n[![Gradle Plugin](https://img.shields.io/badge/Gradle-9.0%2B-%2302303A.svg?style=for-the-badge\u0026logo=Gradle)](https://gradle.org/)\n[![gradlePluginPortal](https://img.shields.io/maven-metadata/v/https/plugins.gradle.org/m2/com/cmgapps/licenses/com.cmgapps.licenses.gradle.plugin/maven-metadata.xml.svg?label=Gradle%20Plugin%20Portal\u0026style=for-the-badge\u0026logo=Gradle)](https://plugins.gradle.org/plugin/com.cmgapps.licenses)\n\nThis Gradle plugin provides tasks to generate a file with the licenses used from the project's dependencies.\n\n## Usage\n\n### Integration\n\n#### Using the plugins DSL\n\n\u003cdetails open=\"open\"\u003e\n\u003csummary\u003eKotlin\u003c/summary\u003e\n\n```kotlin\nplugins {\n    id(\"com.cmgapps.licenses\") version \"6.0.0\"\n}\n```\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eGroovy\u003c/summary\u003e\n\n```groovy\nplugins {\n    id 'com.cmgapps.licenses' version '6.0.0'\n}\n```\n\u003c/details\u003e\n\n#### Using the legacy plugin application\n\n\u003cdetails open=\"open\"\u003e\n\u003csummary\u003eKotlin\u003c/summary\u003e\n\n```kotlin\nbuildscript {\n    repositories {\n        maven {\n            url = uri(\"https://plugins.gradle.org/m2/\")\n        }\n    }\n    dependencies {\n        classpath(\"com.cmgapps:gradle-licenses-plugin:6.0.0\")\n    }\n}\n\napply(plugin = \"com.cmgapps.licenses\")\n```\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eGroovy\u003c/summary\u003e\n\n```groovy\nbuildscript {\n    repositories {\n        maven {\n            url 'https://plugins.gradle.org/m2/'\n        }\n    }\n    dependencies {\n        classpath 'com.cmgapps:gradle-licenses-plugin:6.0.0'\n    }\n}\n\napply plugin: 'com.cmgapps.licenses'\n```\n\u003c/details\u003e\n\n### Tasks\n\nApplying the plugin will create tasks to generate the license report\n\nFor `\"java\"` and `\"java-library\"`\n\n* `licenseReport`\n\nFor `\"com.android.application\"`, `\"com.android.library\"`, `\"com.android.feature\"` and `\"com.android.dynamic-feature\"`\n\n* `license\u003cvariant\u003eReport`\n\nFor `\"org.jetbrains.kotlin.multiplatform\"`\n\n* `licenseMultiplatformReport` collects licenses from all targets\n* `licenseMultiplatform\u003ctarget\u003eReport` collects licenses from `common` and the specified `\u003ctarget\u003e`\n\n### Configuration\n\n#### Output Format\n\nExample:\n\n```kotlin\nlicenses {\n    reports {\n        html.enabled.set(false) // html is enabled by default\n        xml {\n            enabled.set(true)\n            outputFile.set(file(\"$buildDir/reports/licenses.xml\"))\n        }\n    }\n}\n```\n\nThe plugin can output different formats.\n\n* `HTML`\n  generates a formatted HTML website\n    * Styling\n\n      For an HTML report you can define custom stylesheet using a `File` or `String`:\n       ```kotlin\n        licenses {\n            reports {\n                html.stylesheet(\"body {background: #FAFAFA}\")\n            }     \n        }\n        ```\n      or\n        ```kotlin\n        licenses {\n            reports {\n                html.stylesheet.set(file(\"$projectDir/styles/licenses.css\"))\n            } \n        }\n        ```\n      \n    * In the default CSS style, Dark Mode for supported browsers is also enabled by default. It adds a `\u003cmeta name=\"color-scheme\" content=\"dark light\"\u003e` and a custom css theme.      \n\n      It can be disabled via\n      ```kotlin\n      licenses {\n          reports {\n              html.useDarkMode.set(false)\n          }\n      }\n      ```\n* `JSON`\n  generates a JSON file\n* `XML`\n  generates a valid XML version 1.0 file\n* `Text`\n  generates a plain text report file\n* `Mardown`\n  generates a Markdown file\n* `Custom`\n  add your own reporter as a lambda function\n  \n  \u003cdetails open=\"open\"\u003e\n  \u003csummary\u003eKotlin\u003c/summary\u003e\n    \n  ```kotlin\n    licenses {\n        custom {\n            enabled.set(true)\n            outputFile.set(buildDir.resolve(\"reports\").resolve(\"licenses.txt\"))\n            generateor.set { list -\u003e list.map { it.name }.joinToString() }\n        }\n    }\n    ```\n  \u003c/details\u003e\n\n  \u003cdetails\u003e\n  \u003csummary\u003eGroovy\u003c/summary\u003e\n  \n  ```groovy\n    licenses {\n        custom {\n            enabled.set(true)\n            outputFile.set(file(\"$buildDir/reports/licenses/licenses.txt\"))\n            def builder = { list -\u003e list.collect { it.name }.join(', ') } as com.cmgapps.license.reporter.CustomReportGenerator\n            generator.set(builder)\n        }\n   }\n   ```\n   \u003c/details\u003e\n\n#### Multi-project Builds\n\nFor multi-project build, you can add projects you want to collect license information from in the main project.\n\n\u003cdetails open=\"open\"\u003e\n\u003csummary\u003eKotlin\u003c/summary\u003e\n\n```kotlin\nlicenses {\n    additionalProjects(\":module2\", \":module3\")\n}\n```\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eGroovy\u003c/summary\u003e\n\n```groovy\nlicenses {\n    additionalProjects ':module2', ':module3'\n}\n```\n\u003c/details\u003e\n\n## License\n\n```text\nCopyright (c) 2018-2024. Christian Grach \u003cchristian.grach@cmgapps.com\u003e\n\nSPDX-License-Identifier: Apache-2.0\n```\n\n[TextResource]: https://docs.gradle.org/current/dsl/org.gradle.api.resources.TextResource.html\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fchrimaeon%2Fgradle-licenses-plugin","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fchrimaeon%2Fgradle-licenses-plugin","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fchrimaeon%2Fgradle-licenses-plugin/lists"}