Gathering detailed insights and metrics for package-license-extractor
Gathering detailed insights and metrics for package-license-extractor
Gathering detailed insights and metrics for package-license-extractor
Gathering detailed insights and metrics for package-license-extractor
License extraction of npm packages used in package.json
npm install package-license-extractor
Typescript
Module System
Node Version
NPM Version
70.8
Supply Chain
92.9
Quality
74.4
Maintenance
100
Vulnerability
99.6
License
JavaScript (100%)
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
MIT License
8 Stars
42 Commits
1 Watchers
2 Branches
2 Contributors
Updated on Feb 09, 2022
Latest Version
1.0.0
Package Id
package-license-extractor@1.0.0
Unpacked Size
23.06 kB
Size
6.19 kB
File Count
6
NPM Version
6.4.1
Node Version
8.15.0
Cumulative downloads
Total Downloads
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
2
To find the license of all npm dependency used in your project.
Henceforth avoiding all legal challenges ahead, that may arise out of license conflict.
Feature:
Learn more on license: https://opensource.org/licenses
Global installation
1npm install package-license-extractor -g
Note: Doesn`t require to be installed as a dependency in your project
Flag | Possible Value | Default Value |
--projectScanType | multi, single | single |
Once globally installed. Based on your requirement, it can be used in following ways:
1extract-license
1extract-license --projectScanType=multi
Example (multiple projects):
exact-version-license: url will take you to the exact version's license file
latest-version-license: url will take you to the latest version's license file
exact-version-repository: url will take you to the exact version's git repository
latest-version-repository: url will take you to the latest version's git repository
exact-version-registry: url will take you to the exact version's npm registry
Note: Even though there is some programmatic limitation in finding URL, We try our best to make you arrive as closest as possible to the license URL. URL will be decided based on the validation order mentioned above. Once a particular URL is found and validated programmatically, further search for URL will stop. So higher the order, closest is the link.
Internet connection is required to make use of this package.
Total time required to depend on no of dependency info is being fetched and also on your internet connection speed.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
Reason
Found 0/13 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
Reason
project is not fuzzed
Details
Reason
branch protection not enabled on development/release branches
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Score
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More