Check the current project's licenses.

The Hex administrators recommend setting a package's :licenses value to SPDX license identifiers. However, this is only a recommendation, and is not enforced in any way. This task will enforce the use of SPDX identifiers in your package, and will return an error code if the current project is using any unrecognized or non-OSI-approved licenses.

Configuration

• :package - contain a :licenses list, which must be a list containing SPDX license identifiers, for example ["MIT"]

Command line options

• --reuse - additionally check if the licenses declared in mix.exs match those in the LICENSES directory according to the REUSE specification.
• --osi - additionally check if all licenses are approved by the Open Source Initiative
• --update - pull down a fresh copy of the SPDX license list instead of using the version checked in with this tool.