Workflow automatically updates license cache when package-lock.json changes (#155)

.github/workflows/check_license_status.yml

@@ -0,0 +1,32 @@
+# Fails if any of our dependencies have licenses that our incompatible with our
+# requirements (see .licensed.yml) OR if any of our dependencies have been
+# upgraded to a new version without us having updated their corresponding
+# license metadata file in .licenses/
+#
+# see https://github.com/actions/labeler/pull/91 for more context
+
+name: Check License Status
+
+on:
+  push:
+    branches:
+      - main
+      - licensed_cache_update
+  pull_request:
+    branches:
+      - main
+
+jobs:
+  check_license:
+    needs: update_licenses_cache
+    if: always() # always run after we update the license cache. if it failed, we will probably just fail as well
+    runs-on: ubuntu-latest
+    name: Check License Status
+    steps:
+      - uses: actions/checkout@v2
+      - uses: jonabc/setup-licensed@v1.0.2
+        with:
+          version: '2.x'
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+      - run: npm install
+      - run: licensed status