GitHub open source license compliance is generally available, with a new API that lets coding agents check packages against the enterprise license policy
License checks move from a merge gate to before an agent even picks a package.
// Key points
- Generally available for GitHub Enterprise Cloud repositories with GitHub Code Security, including data-resident GHEC.
- Turned on by a new ruleset condition, Require license compliance results before merging: PRs that add or change dependencies get license checks and annotations on noncompliant ones.
- A new Enterprise Open-Source License Manager role approves exception requests, and license policy changes emit audit log events.
- A new API endpoint checks whether packages comply with policy, so coding agents can avoid recommending or adding packages that violate it.
Builder's takeCoding agents easily pull in a GPL dependency on the way, and getting blocked at the PR wastes a round. The API’s value is moving the check earlier: I’d add a check-license tool to the agent’s toolset and call it before choosing a package. Teams not on GHEC can follow the same idea with a license allowlist in their own agent.
// Background · from #Coding agents
Full timeline →- Oct 17 Reflection opens Beam under Apache 2.0: a 501B-total, 23B-active MoE for coding and agents with a 1M context
- Oct 17 Claude Code 2.1.302 turns on fork subagents by default in claude -p, the Agent SDK, the desktop app and VS Code, and warns that standalone Claude Design closes by December 14
- Oct 17 @GitHub in Slack and Teams now works across multiple repositories in one conversation and can use shared Slack messages and threads as context