Paste any code. We identify the upstream library, score the license risk, and emit a verifiable proof — in seconds.