Tools to help audit dependencies, check licenses, and create bill-of-materials

golist is wrappers around the command "go list". It is meant to be generic.

• go-license golang package to detect OSS licenses

• goreportcard Online service to evaluate golang packages
• libraries.io Allows searching and filtering of golang libraries by license type
• github v3 API Github provides an API to guess the license of a repo blog

• godep golang tool to do "vendoring"
• licentia Manage and update license files
• anderson tool to white and blacklist licenses in your golang project

• Golang Vendor Experiments spec
• Original notes