Free to check. US$29 to prove it.
The CLI is free and stays free. Pay only when someone else has to trust the result: a buyer, a client or a security team.
Free CLI
US$0
For your own checks and your CI.
- A verdict per package for
saas,distributed,libraryorinternal - Fails CI when a dependency conflicts with how you ship
- CycloneDX SBOM and third-party notices
- The full report as an unsealed preview
Sealed report
US$29one report
For a sale, a client handover or a security questionnaire.
- A printable HTML report: summary, every flagged package explained, full inventory
- An Ed25519 seal and a public page to check it
- Anyone can verify the file with one command
- One payment, no account
Agency
US$149a year
For agencies and freelancers who hand code to clients.
- Unlimited sealed reports for 12 months
- One key for every project and your CI
- Doesn’t renew: pay again only if you want another year
Rather not run it yourself? The done-for-you licence review (US$149) returns a sealed report and a plain-language memo for your buyer or client within 48 hours. We only need your lockfile.
How sealing works
npx -y https://licensegate.org/dl/licensegate.tgz --mode saas --prod --report report.html --key YOUR_KEYAfter you pay, the next page shows your licence key once. The command writes report.html and asks licensegate.org to sign two sha256 hashes: one of the inventory and one of the report. The seal goes into the file with its own check page. Without a key, the same command writes an unsealed preview, so you can see the whole report before you buy.
What the seal proves
That the report was generated by a given version of licensegate, on a given date, and hasn’t been changed since. Whoever receives it runs npx -y https://licensegate.org/dl/licensegate.tgz verify report.html, or opens the address printed in the seal.
What it doesn’t prove
That the report is correct or complete, that the lockfile matches the code actually shipped, or that the project complies with any licence. A report is an inventory and a risk flag, not legal advice. Anyone relying on a report can run the free CLI on the code they receive, and verify --project compares the two.
What leaves your machine
Your licence key, the two hashes, the counts of ok, review and blocking packages, the mode and the tool version. Never source code, package names or file contents.
Refunds and terms
If a report or plan doesn’t work as described, write to us within 14 days of the purchase and we’ll fix it or refund you in full. Prices are in US dollars; taxes are added at checkout where the law requires it. Sold by MenuNode LLC through Stripe. Read the Terms of Service.