Repo IP Auditor. Chain of title, in 30 seconds.
Audit a repository’s commit history, root license, and package manifests. Flag unassigned contributor commits and copyleft obligations before an investor’s counsel finds them. Runs entirely in your browser. Nothing is uploaded, stored, or logged.
Options
Leave blank and the auditor infers the domain from the dominant non-consumer email in the history. Subdomains of a declared domain count as on-domain.
Optional. Held in this tab only, never persisted and never sent anywhere but GitHub. Raises the limit from 60 calls an hour to 5,000 and reaches private repositories.
Chain of title
Every commit author identity in the history, grouped by email domain, with the ones that carry no assignment evidence separated out. It reads domains, not signed agreements.
Copyleft obligations
Declared dependencies from npm, PyPI, Go, Cargo, Composer and Bundler manifests, resolved against public registries and classified from AGPL down to permissive.
Root license clarity
Whether the repository declares a license, and whether that license is itself copyleft. File header scanning runs in the CLI, which reads every tracked source file.
Export
A score against a published rubric, a remediation list, and markdown, JSON and print output for a diligence folder.
The browser reads at most 500 commits and cannot open file headers. The CLI reads local git, scans every tracked source file for copyleft headers and third-party copyright notices, resolves .mailmap identities, picks up Co-authored-by trailers, walks installed dependency trees, and runs offline.
npx @beneficialtechnology/repo-ip-auditor . --domains acme.comPost the report to every pull request and fail the build below a score you set. Requires fetch-depth: 0 on checkout, or the history is incomplete.
uses: Beneficial-Technology/repo-ip-auditor@v0This tool produces an engineering signal, not a legal opinion. It reads commit metadata and declared dependency licenses. It cannot see signed agreements, employment records, contribution license agreements, or how a dependency is actually linked, and those facts change the answer. No attorney-client relationship is created by running an audit.