What are you building?
Where access is enforced
Desktop and CLI tools check inside their own process. SaaS protected operations require your authenticated backend. JavaScript means Node/Electron main, not a browser SDK. Customer-controlled plugins cannot protect your online resources without server authorization.
I just want to issue keys
Use Stage 12: Deliver licenses for manual issuance and the store/no-code routes. Sending a key needs no SDK; the software receiving it still needs a correct licensing integration.
Full architecture reference
The previous path reference preserves every earlier application, language and responsibility note.