Problem / motivation
The repository, npm payload, browser artifact, and build dependencies require a verified license posture before release.
Scope
- audit repository/package license consistency
- audit runtime and development dependency licenses and browser-bundle implications
- add NOTICE/third-party documentation only if actually required
- ensure intended release materials include project licensing
Non-goals
- copying every third-party license unnecessarily
- SBOM infrastructure for appearance alone
Acceptance criteria
- runtime dependency count remains zero
- dependency license audit is repeatable and clean
- required project/third-party notices are present and packaged appropriately
Problem / motivation
The repository, npm payload, browser artifact, and build dependencies require a verified license posture before release.
Scope
Non-goals
Acceptance criteria