Mozilla Public License 2.0

What MPL material do you actually ship — and what must you answer?

ShipGate opens the exact published artifact (never executing it), identifies MPL-labelled material by its own bytes, and returns the questions that must be answered before any MPL obligation can be asserted. It does not guess an answer it has not earned.

npm package

version (optional)

Try dompurify (dual-licensed — you must elect), ical.js (unambiguous MPL), or express (no MPL material).