AgentLicense Guard

About AgentLicense Guard

Flags a disallowed open-source license the moment an agent adds the dependency, not at a later audit.

Price: $15 one-time

Included free

• npm + pip manifest scanning against live registry license data
• Configurable allow/deny list

Unlocked with a license

• go.mod / Cargo.toml support
• Shareable .licenserc.json team policy file

Getting a license

Open the AgentLicense Guard sidebar (activity bar icon) and click Get License. After purchase you'll receive a license key — paste it into the sidebar and click Activate License. Keys are machine-locked; use Move to another machine… in the sidebar before reinstalling on a new device.

How license checks work

License data is looked up live (no bundled offline snapshot yet) against registry.npmjs.org for npm packages and pypi.org's JSON API for pip packages, cached in memory for the session. Results are compared against agentlicenseGuard.deniedLicenses, or — with a license activated — against the deny list in a workspace .licenserc.json when one exists. Violations are reported as diagnostics on the manifest file plus a summary notification, and checks re-run automatically whenever a manifest file is saved.

With a license, go.mod and Cargo.toml are also scanned. Cargo dependencies are checked against crates.io. Go module license checks are lighter-touch: proxy.golang.org can confirm a module/version resolves but doesn't expose license metadata, so Go dependencies are reported as unchecked rather than pass/fail — Maven support is not implemented in this release.

Roadmap (not implemented yet)

• Maven manifest support.
• Snippet-level "looks copied from a licensed source" heuristic — planned as an unimplemented v3 stretch goal.