Review of components in use, transitive dependencies and license obligations so that risks and open items become visible early and approvals do not fail shortly before release.
- capture packages, sources and build artifacts systematically
- assess notable license combinations and obligations
- provide a solid basis for approvals and follow-up decisions