npmpackage.info

Gathering detailed insights and metrics for semantic-release-license

Gathering detailed insights and metrics for semantic-release-license

semantic-release-license - 1.0.3 | npmpackage.info

semantic-release-license

Automatically update your license copyright date with every new release.

1.0.3

3

MIT

TypeScript

14.25 kB

Installations

npm install semantic-release-license

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

12.22.1

NPM Version

7.12.0

Score

77.3

Supply Chain

88.5

Quality

75.7

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

2

Closed

0

Merged

1

Issues

Open

0

Total

2

Closed

2

Releases

7

v1.0.3

Updated on May 08, 2021

v1.0.2

Updated on Dec 12, 2020

v1.0.1

Updated on Dec 12, 2020

v1.0.0

Updated on Nov 24, 2020

v1.0.0-beta.4

Updated on Nov 24, 2020

v1.0.0-beta.3

Updated on Nov 24, 2020

View All 7 releases

Languages

3

TypeScript

JavaScript

Shell

TypeScript (78.73%)

JavaScript (19.26%)

Shell (2.01%)

Developer

cbhq

Download Statistics

Total Downloads

0

Last Day

0

Last Week

0

Last Month

0

Last Year

0

GitHub Statistics

MIT License

3 Stars

28 Commits

1 Forks

1 Watchers

1 Branches

2 Contributors

Updated on Apr 10, 2024

Maintainers

1

View All 2 Contributors

Package Meta Information

Latest Version

1.0.3

Package Id

semantic-release-license@1.0.3

Unpacked Size

14.25 kB

Size

4.99 kB

File Count

27

NPM Version

7.12.0

Node Version

12.22.1

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

0%

NaN

Compared to previous day

Last Week

0%

NaN

Compared to previous week

Last Month

0%

NaN

Compared to previous month

Last Year

0%

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

18

@semantic-release/changelog @semantic-release/exec @semantic-release/git @semantic-release/npm @types/node @types/semantic-release @typescript-eslint/eslint-plugin @typescript-eslint/parser eslint eslint-config-airbnb-base eslint-import-resolver-typescript eslint-plugin-import eslint-plugin-security jest rimraf semantic-release ts-jest typescript

semantic-release-license

semantic-release plugin to update your license file on new releases.

Step	Description
`verifyConditions`	Verify the presence of a license file and makes sur it can detect it
`prepare`	Update the license file based on its type

Install

1npm install -D semantic-release-license

Usage

The plugin can be configured in the semantic-release configuration file:

1module.exports = {
2  plugins: [
3    'semantic-release-license',
4    /*
5     * Use the git plugin to commit the updated license file
6     * Note: make sure semantic-release-license is run BEFORE the git plugin
7     * otherwise you git won't pick your updated LICENSE.
8     */
9    ['@semantic-release/git', {
10      assets: ['LICENSE']
11    }]
12  ]
13}

License updates

MIT

Copyright date

BSL

Licensed work version
Copyright date
Change date

Options

You can configure the plugin by passing options:

1module.exports = {
2  plugins: [
3    ['semantic-release-license', {
4      license: {
5        path: 'path/to/MY_LICENSE.txt'
6      }
7    }]
8  ]
9}

We use a license root property to avoid conflicts with semantic-release CLI options (see here).

Options	Description	Default
`license.path`	The path to your license path	The plugin tries to automatically detect it

Empty State

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Security-Policy

Determines if the project has published a security policy.

10

License

Determines if the project has defined a license.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

49 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-2h3h-q99f-3fhc
Warn: Project is vulnerable to: GHSA-gmw6-94gg-2rc2
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-5fw9-fq32-wv5p
Warn: Project is vulnerable to: GHSA-px4h-xg32-q955
Warn: Project is vulnerable to: GHSA-hj9c-8jmm-8c52
Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-x2pg-mjhr-2m5x
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Warn: Project is vulnerable to: GHSA-38fc-wpqx-33j7
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-6fc8-4gx4-v693
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q

Score

3.3

/10

Last Scanned on 2025-07-14

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.