Skip to main content
We are excited to introduce the latest features and enhancements in Endor Labs.

License notice reports

Beta New You can now generate a license notice report that lists the open source dependencies in your projects and packages, along with their license texts and copyright notices. Use it to meet attribution obligations when you distribute software built on open source. For more information, see Create a license notice report and Generate a license notice report for a project.

Configurable fail-open and fail-closed behavior

New Package Firewall now lets you decide what happens when it cannot complete a policy check, such as when the malware feed or an upstream registry is unreachable. Choose Warn (Fail-open) to allow the package and record the event, or Block (Fail-close) to reject it. You can set the action once at your root namespace, send Slack notifications for these events, and filter the logs by the Package not evaluated reason. For more information, see Action when a policy cannot be evaluated.