I'm working on a website that I plan to release as open source, and also publish it to a web host so that people can actually use it. The website uses Angular, and I used Angular CLI to create it. In order to install Angular CLI, I used npm.
I'm at the point in development where I want to host the website, but I want to make sure I comply with the licenses. It seems that when I use
ng build --prod Angular CLI creates a
dist folder where it puts the build files. It automatically creates a file called
3rdpartylicenses.txt, which I assume is some attempt to collect the licenses for you.
However, it seems that the automatically generated
3rdpartylicenses.txt is missing some libraries. For example, if I do
npm ls --prod, the
3rdpartylicenses.txt only contains about half of those. For example, I'm pretty sure that rxjs is a dependency of Angular, but it isn't listed anywhere in
3rdpartylicenses.txt. Other libraries that I installed through npm are also missing (even though they show up in package.json).
I'm still new to npm and js, so maybe I am missing something, but does this mean that the only way to make sure you list all the licenses is to manually go through all the repositories and their dependencies and copy the licenses over each time? This seems like a very time consuming step and I'm guessing that other people must have run in to a similar workflow issue.