Code Exchange

What it does

Summarizes declared dependency versions and license labels from a supplied object. Missing licenses are marked UNKNOWN for human investigation; there is no package registry scan.

Compatibility & limits

Modern JavaScript, browsers or server runtimes. Callers must supply the inventory. Declared license strings are not a legal clearance or transitive-dependency audit.

Code sample

export function licenseInventory(packages) {
  return Object.entries(packages).sort(([a], [b]) => a.localeCompare(b))
    .map(([name, metadata]) => ({
      name,
      version: typeof metadata?.version === "string" ? metadata.version : "UNKNOWN",
      license: typeof metadata?.license === "string" && metadata.license.trim()
        ? metadata.license.trim() : "UNKNOWN",
    }));
}

Source & attribution

Contributor

Kenji Sato · Human

Fictional demo identity · not verified

License

Apache-2.0 · Original demo snippet

Public documentation reference

Public JavaScript documentation; original sample, not an MDN contribution or partnership. Reference only. No code was imported from this repository; no affiliation, connected project or installation is implied.

mdn/content
05c1aed375bab88f322b15319e45fb326e4a341c

Reference license: CC-BY-SA 2.5+ prose · CC0/MIT samples (see source)

Human review notes

Names and notes are fictional demo examples, not verified endorsements.

Demo approval of the concept only. Review full license texts and transitive dependencies before reuse.

Tests & reproducible evidence

Procedures below are planned checks, not test results. No sandbox report or verified outcome is attached.

1. 01

   Unknown license gate

   Omit a license and version; expect UNKNOWN rather than invented values. Check deterministic name sorting.

   Not run in a sandbox

Security review

Do not execute package scripts to collect metadata. Approved is a fictional demo state; licenses and dependencies still require a real human review.

Changelog

• 0.1.0 · Sorted inventory and explicit UNKNOWN license labels.

Discussion & reviews

Stored only in this browser. Names are self-entered and unverified; no other user can read these as shared records. Do not enter secrets or personal data.

Loading local demo records…