Composer License Checker
Paste your composer.json and see the license of every PHP package, with copyleft and missing licenses flagged. Everything runs in your browser and you can export the list to CSV or Markdown.
Files are processed in your browser. Only package names and versions are sent to Packagist to look up their licenses.
How the Composer license check works
The checker reads require and require-dev from composer.json. With composer.lock it takes the exact versions, licenses and links straight from the lock file, without it it looks up each package on Packagist.
It lists the direct dependencies and skips PHP itself and its extensions. Dev dependencies are left out unless you include them.
Frequently asked questions
How do I list the licenses of Composer packages?
Paste composer.json into the checker, ideally together with composer.lock. It shows the license of every package and lets you export the list to CSV or Markdown.
What does a package with several licenses mean?
Composer lists several licenses when a package is dual licensed. You can use it under any one of them, so the checker joins them with OR.
Is my composer.json uploaded anywhere?
No. The files are processed in your browser. Without composer.lock only package names are sent to Packagist to look up their licenses.