Install the tools

All four released tools are on PyPI. Python 3.11 or newer. No account and no key. LitmusAI, RiskForge and the RAG Benchmarking retrieval metrics run with no network access. License Compliance Checker looks up licence data in public package registries during a scan.

Install everything

bashpip install license-compliance-checker riskforge rag-benchmarking litmus-screener

Or install individually

bashpip install license-compliance-checker # Article 53 · License Compliance Checker
pip install riskforge                  # Article 9 · RiskForge
pip install rag-benchmarking           # Article 15 · RAG Benchmarking
pip install litmus-screener            # Article 5 · LitmusAI

Verify

bashlitmus --version
riskforge --version
lcc --version

CI-friendly: every command returns conventional exit codes (0 pass, non-zero on findings) and writes machine-readable output (SARIF, JSON or SBOM).

Content verified 2026-10-04