This should actually be fairly easy once we have reverse dependencies set up. If there is a package with a copyleft (GPL-ish) license, and it is depended on by something without a copyleft license, then there's a violation.