SEE THE WHOLE SET
The packages behind your packages.
The dependencies you picked are only the beginning. Bring direct and transitive packages into the same review.
Explore your inventoryTHIRD-PARTY LICENSE COMPLIANCE
Your licenses.
Ready to share.
Turn your dependencies into a reviewed license page. Send it to your next customer. Keep it current as you ship.
Free to import and review. No credit card needed.
Starts with what you already use
GitHubGitLabAzure DevOpsLockfiles & SBOMs
A LIVING RECORD OF WHAT YOU SHIP
Every dependency has a story.
Keep the whole paper trail.
Know what’s in your product, what needs a decision, and what you can share.
LOOK INSIDE
Evidence beneath the label.
Open the actual package. Read its license text. Make the mismatch visible before someone else asks.
See how verification works
SHARE THE ANSWER
One review. Every way to share it.
A link for procurement. A PDF for counsel. Attribution files for your release. All from the same reviewed record.
Explore the outputs
KEEP THE THREAD
The next commit is part of the story.
Changes keep coming. Catch dependency drift and review what changed before publishing the next revision.
See repository syncFROM YOUR REPO TO THEIR INBOX
A clear process.
A record you can stand behind.
Start with the files you already have.
Finish with an answer you can send.
- 01
Import what you ship.
Connect your repository or bring a lockfile or SBOM. Gather direct and transitive dependencies in one inventory.
- 02
Review what matters.
Inspect the evidence, approve straightforward licenses in bulk, and resolve the packages that need a decision.
- 03
Publish your answer.
Share a branded license page or download your files. Nothing publishes before your team’s review.
LOOK PAST THE LABEL
The evidence is
inside the package.
A registry entry is a starting point. SourceTrust retrieves the package you actually ship, checks its integrity, and reads the license inside.
01
See how verification worksThe exact artifact. Checked against the registry’s digest.
02The license text. Kept alongside the review.
03Your team’s decision. Recorded with the published revision.
The label is a claim.The contents are evidence.
THE PRODUCT, END TO END
From first import to a shareable record.
See the review, publication, public page and readership record in one continuous flow.
05 / 06Static preview
- Import
- Verify
- Review
- Publish
- Share
- Measure
PRICING THAT GIVES BACK
Simple pricing.
Free for open source.
Start with the product you ship.
Bring your whole team.
YOUR PRODUCT. YOUR WHOLE TEAM.
Product plan
$29per product
per month
per month
Billed monthly. No fees per user.
Everything for a reviewed record that stays current.
- A branded, hosted license page
- Every export format
- Repository sync and drift checks
- Unlimited team members
Start for free
Import and review for free. Billing starts on first publish or export download.
FOR THE BUILDERS WHO SHARE
Open source
$0for your public
GitHub project
GitHub project
No credit card. No trial clock.
You share the code.
We’ll host the license page.
- Connect a public repo through our GitHub App
- Publish its license page for free
- Give readers a link back to your repository
Publish your project for free
For eligible public GitHub projects. Fair use applies. Free pages include SourceTrust attribution.
LIVE WALKTHROUGH
Let’s walk through it.
See how import, review and publishing fit your workflow.
Request a live walkthrough