OSSLibraries

Appearance

OSSLibrariesfor HarmonyOS apps

Scans OHPM dependencies at build time and renders the resulting license list in the app.

Get Started
View on GitHub

  • End-to-end

    One pipeline from dependency scan to in-app display. The list reflects the dependencies that are actually packaged into the HAP.

  • Zero config

    Register the Hvigor plugin once. Every build regenerates the metadata from your current oh_modules.

  • Prebuilt UI

    An adaptive page with a list and a detail view built on ArkUI and UI Design Kit. Import the page and navigate by named route.

  • Accurate licenses

    SPDX expressions like Apache-2.0 OR MIT are parsed fully, and common misspellings are corrected.

  • Full license text

    Prefers the LICENSE file bundled in each package, and falls back to canonical SPDX text.

  • Custom UI

    Use the core package alone to load and parse the data, and render it however you like.

TIP

This library ships skills you can install so an AI agent can wire them into your project for you.

zsh
npx skills add composable-tu/osslibraries
zsh
pnx skills add composable-tu/osslibraries
zsh
yarn dlx skills add composable-tu/osslibraries
zsh
bunx skills add composable-tu/osslibraries
zsh
deno x npm:skills add composable-tu/osslibraries
zsh
vpx skills add composable-tu/osslibraries
zsh
vlx skills add composable-tu/osslibraries

What is SPDX?

SPDX (Software Package Data Exchange) is an open standard for communicating software bill of material information, including provenance, license, security, and other related information. SPDX reduces redundant work by providing common formats for organizations and communities to share important data, thereby streamlining and improving compliance, security, and dependability. The SPDX specification is recognized as the international open standard for security, license compliance, and other software supply chain artifacts as ISO/IEC 5962:2021.

OSSLibraries uses SPDX License List to identify and display the license of every dependency.