As part of the Dependency-Track policy engine, component licenses can be evaluated against one or more policies.