# Feluda

> Use this skill when the user wants to analyze project dependencies for license compliance, generate SBOMs, check for restrictive licenses, or create compliance files.

- Skill: `javimosch/feluda` (Agent Skill)
- Install (CLI): `npx skillmds@latest add javimosch/feluda`
- Raw SKILL.md: https://api.skillmd.com/api/skills/javimosch/feluda/raw
- Safety review: PASS (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: javimosch (https://skillmd.com/u/javimosch)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/javimosch/feluda

---


# Feluda Plugin

Detect license usage restrictions in your project. Written in Rust.

## Commands

### License Scanning
- `feluda scan licenses` — Analyze project dependencies and their licenses

### SBOM Generation
- `feluda sbom generate` — Generate Software Bill of Materials (SBOM)
- `feluda sbom validate` — Validate SBOM files

### Compliance Files
- `feluda generate compliance` — Generate NOTICE and THIRD_PARTY_LICENSES files

### Cache Management
- `feluda cache manage` — View or clear cache

## Usage Examples

Basic license scan:
```
feluda
feluda --path ./myproject
feluda --language rust
```

Output formats:
```
feluda --json
feluda --yaml
feluda --gist
feluda --verbose
```

Filter by OSI status:
```
feluda --osi approved
feluda --osi not-approved
feluda --osi unknown
```

Check license compatibility:
```
feluda --project-license MIT
feluda --incompatible
feluda --fail-on-incompatible
```

Generate SBOM:
```
feluda sbom
feluda sbom spdx --output sbom.json
feluda sbom cyclonedx --output sbom.json
```

Validate SBOM:
```
feluda sbom validate sbom.json
feluda sbom validate sbom.json --json --output report.json
```

Generate compliance files:
```
feluda generate
feluda generate --language rust --project-license MIT
```

## Installation

```bash
cargo install feluda
```

Or via package manager:
```bash
brew install feluda        # macOS
apt install feluda         # Debian/Ubuntu
paru -S feluda            # Arch Linux
```

## Key Features
- License analysis for multiple languages (Rust, Node, Go, Python, C/C++, R)
- Flags restrictive licenses (GPL, AGPL, LGPL, etc.)
- Checks license compatibility with project license
- Generates SBOM in SPDX and CycloneDX formats
- Validates SBOM files
- Creates compliance files (NOTICE, THIRD_PARTY_LICENSES)
- CI/CD integration with GitHub Actions and Jenkins support
- TUI mode for visual browsing
- GitHub API rate limit handling with token support