v0.5.0

v0.5.0 - 2026-06-17

Changed

• Direct dependencies on envoy, gleam_regexp, and youid were removed in favor of standard string parsing and small Erlang FFI helpers.
• The sbom command now writes formatted JSON to output files.

Installation

Download the archive for your platform, extract it, and place licence_audit
somewhere on your PATH. The escript runs on any platform with a compatible
Erlang/OTP runtime.

With mise

If you use mise, install this release with the
github: provider:

mise use -g "github:tylerbutler/licence_audit@v0.5.0"

For a project-local install, omit -g. The escript still needs Erlang/OTP 28.x
or newer on your PATH; if you manage Erlang with mise, install it too:

mise use -g erlang@28

Linux / macOS

curl -fsSL -o licence_audit.tar.gz \
  "https://github.com/tylerbutler/licence_audit/releases/download/v0.5.0/licence_audit-v0.5.0.tar.gz"
tar -xzf licence_audit.tar.gz --strip-components=1
chmod +x licence_audit
./licence_audit --help

Verify the download

# Checksums (run from the directory containing the artifacts)
sha256sum -c checksums.txt

# Build provenance + SBOM attestations for the archive...
gh attestation verify licence_audit-v0.5.0.tar.gz --repo tylerbutler/licence_audit

# ...or for the bare escript binary
gh attestation verify licence_audit --repo tylerbutler/licence_audit