2.12.0

What's Changed

Improvements

• Suggest how to resolve each policy violation by @dennisdoomen in #309
• Allow running without a configuration file by @dennisdoomen in #310
• Evaluate SPDX license expressions instead of plain identifiers by @dennisdoomen in #311
• Improve formatting of the dependencies command output by @dennisdoomen in #316
• Make explain always read the cache and never update it by @dennisdoomen in #315

Fixes

• Check npm package licenses against the policy for legal risk by @dennisdoomen in #314

Others

• Publish a package to GitHub Packages on every merge to main by @dennisdoomen in #313

Full Changelog: 2.11.2...2.12.0