Check NPM package licenses