The "I am not a lawyer" bot, provides guidance on dependency licenses for developers during pull request reviews. It scans all pull requests for changes to known package manager files and reports on any new dependencies found.

Package managers supported

• npm
• pipfile
• requirements.txt
• SBT
• maven
• gradle
• pom.xml
• Gemfile
• Poetry

The bot only detects and looks up direct dependencies and therefore does not check transitive dependency licenses.

This bot reports data found on public package managers and is not to be considered legal advice.