I made a small tool to check the licenses of your installed npm dependencies, which you can execute it by running this on the root of your project:
npx legally
It will search for licenses in the LICENSE file, Readme.md and package.json (and alt spellings) and make a small report of: what licenses are in use, and some anomalies. The repo:
Nice. We may use this. TBH, licenses in NPM seem like such an afterthought. And the past few companies I've worked at all took advantage of it, greatly. Mostly with SaaS, so they should be OK, but also with commercially distributed software.
https://github.com/franciscop/legally