Installations

npm install @ovyerus/licenses

Score

79.6

Supply Chain

95.3

Quality

75.6

Maintenance

100

Vulnerability

69.9

License

Pull Requests

Open

0

Total

0

Closed

0

Issues

Open

1

Total

2

Closed

1

Releases

3

v6.4.0

Published on 20 Feb 2020

v6.3.0

Published on 20 Feb 2020

6.2.2

v6.2.2

Published on 29 Jan 2020

View all 3 releases

Contributors

1

View all 1 contributors

Developer

ovyerus

Module System

BETA

CommonJS

Statistics

7 Stars

75 Commits

1 Forks

2 Watching

1 Branches

1 Contributors

Updated on 07 Dec 2023

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

86,759

Last day

21.1%

46

Compared to previous day

Last week

52.6%

490

Compared to previous week

Last month

21%

2,238

Compared to previous month

Last year

19.3%

28,226

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

13

@typescript-eslint/eslint-plugin @typescript-eslint/parser ava colorette eslint eslint-config-clarity eslint-plugin-import eslint-plugin-prettier eslint-plugin-react eslint-plugin-react-hooks got ora prettier

Versions

licenses

List of SPDX licenses with predictable placeholder strings for copyright info.

This is a fork of spdx-license-list with added placeholders in the copyright strings (of most of the licenses) to make it easy for machines to create licenses with user-given info.

Some licenses are skipped due to being overly specific for that particular product or company, however most generic, OSI-approved licenses should have them just fine.

(If you want to add support for a license that hasn't received placeholders yet, feel free to submit a PR 😃)

The lists of licenses are just JSON files and can be used anywhere.

spdx.json contains just license metadata
spdx-full.json includes the license text too
spdx-simple.json only contains the license IDs

Using SPDX License List version 3.8 (2020-02-09)

Install

$ npm install @ovyerus/licenses

Usage

1const spdxLicenseList = require('@ovyerus/licenses');
2
3console.log(spdxLicenseList.MIT);
4/*
5{
6	name: 'MIT License',
7	url: 'http://www.opensource.org/licenses/MIT',
8	osiApproved: true
9}
10*/

1const mitLicense = require('@ovyerus/licenses/licenses/MIT');
2
3console.log(mitLicense.licenseText);
4//=> 'MIT License\r\n\r\nCopyright (c) <year> <copyright holders> …'

You can also get a version with the licence text included:

1const spdxLicenseList = require('@ovyerus/licenses/full');
2
3console.log(spdxLicenseList.MIT);
4/*
5{
6	name: 'MIT License',
7	url: 'http://www.opensource.org/licenses/MIT',
8	osiApproved: true,
9	licenseText: '…'
10}
11*/

Or just the license IDs as a Set:

1const spdxLicenseList = require('@ovyerus/licenses/simple');
2
3console.log(spdxLicenseList);
4//=> Set {'Glide', 'Abstyles', …}

API

spdxLicenseList

Type: Object

The licenses are indexed by their identifier and contains a name property with the full name of the license, url with the URL to the license, and osiApproved boolean for whether the license is OSI Approved.

No vulnerabilities found.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

1.7

/10

Last Scanned on 2024-11-11

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More