> ## Documentation Index
> Fetch the complete documentation index at: https://zeropath.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# List unlicensed SCA packages

> List packages that deps.dev CONFIRMED have no license for the user's repositories. An unlicensed package is represented as the absence of a license — there is no synthetic 'Unknown' license. Packages whose license lookup FAILED transiently (deps.dev unreachable) are NOT included: their license is unknown, not absent, so they are excluded rather than mislabeled as unlicensed. Org-scoped: packages in repos outside the caller's access are never returned. Honest empty when the org has none.



## OpenAPI

````yaml https://zeropath.com/openapi/v1.yaml post /api/v1/sca/licenses/unlicensed
openapi: 3.1.0
info:
  title: ZeroPath API
  version: 1.0.0
  description: Public API for ZeroPath
servers:
  - url: https://zeropath.com
    description: Production server
    x-fern-server-name: Production
  - url: https://dev.branch.zeropath.com
    description: Development server
    x-fern-server-name: Development
security:
  - apiTokenId: []
    apiTokenSecret: []
tags:
  - name: Organizations
    description: Operations related to organizations
  - name: Stats
    description: Operations related to stats
  - name: Repositories
    description: Operations related to repositories
  - name: Installations
    description: Operations related to installations
  - name: Issues
    description: Operations related to issues
  - name: SCA
    description: Software Composition Analysis
  - name: Scans
    description: Operations related to scans
  - name: Rules
    description: Operations related to custom security rules
  - name: Referrals
    description: Operations related to referrals
paths:
  /api/v1/sca/licenses/unlicensed:
    post:
      tags:
        - SCA
      summary: List unlicensed SCA packages
      description: >-
        List packages that deps.dev CONFIRMED have no license for the user's
        repositories. An unlicensed package is represented as the absence of a
        license — there is no synthetic 'Unknown' license. Packages whose
        license lookup FAILED transiently (deps.dev unreachable) are NOT
        included: their license is unknown, not absent, so they are excluded
        rather than mislabeled as unlicensed. Org-scoped: packages in repos
        outside the caller's access are never returned. Honest empty when the
        org has none.
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ScaUnlicensedPackagesInput'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ScaUnlicensedPackagesResponse'
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
components:
  schemas:
    ScaUnlicensedPackagesInput:
      type: object
      properties:
        organizationId:
          type: string
        repositoryIds:
          type: array
          items:
            type: string
        cursor:
          type: string
          description: Package id cursor for pagination
        limit:
          type: integer
          minimum: 1
          maximum: 200
          default: 50
      required:
        - organizationId
    ScaUnlicensedPackagesResponse:
      type: object
      properties:
        packages:
          type: array
          items:
            $ref: '#/components/schemas/ScaPackage'
        hasMorePackages:
          type: boolean
        nextPackageCursor:
          type:
            - string
            - 'null'
      required:
        - packages
        - hasMorePackages
    ScaPackage:
      type: object
      properties:
        id:
          type: string
        name:
          type: string
        version:
          type:
            - string
            - 'null'
        ecosystem:
          type: string
        manifestPath:
          type:
            - string
            - 'null'
        manifestStartLine:
          type:
            - integer
            - 'null'
        manifestEndLine:
          type:
            - integer
            - 'null'
        manifestStartColumn:
          type:
            - integer
            - 'null'
        manifestEndColumn:
          type:
            - integer
            - 'null'
        repositoryId:
          type:
            - string
            - 'null'
        repositoryName:
          type:
            - string
            - 'null'
        branch:
          type:
            - string
            - 'null'
        commitSha:
          type:
            - string
            - 'null'
        count:
          type: integer
          description: Number of packages in this group
        items:
          type: array
          items:
            $ref: '#/components/schemas/ScaPackage'
      required:
        - id
        - name
        - ecosystem
  responses:
    BadRequest:
      description: Bad Request
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
    Unauthorized:
      description: Unauthorized
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
  securitySchemes:
    apiTokenId:
      type: apiKey
      in: header
      name: X-ZeroPath-API-Token-Id
      x-fern-header:
        name: apiTokenId
        env: ZEROPATH_API_TOKEN_ID
    apiTokenSecret:
      type: apiKey
      in: header
      name: X-ZeroPath-API-Token-Secret
      x-fern-header:
        name: apiTokenSecret
        env: ZEROPATH_API_TOKEN_SECRET

````