npmpackage.info

Gathering detailed insights and metrics for spdx-correct

Other packages similar to spdx-correct

@types/spdx-correct

3.1.3

TypeScript definitions for spdx-correct

Gathering detailed insights and metrics for spdx-correct

spdx-correct - 3.2.0 | npmpackage.info

spdx-correct

correct invalid SPDX identifiers

3.2.0

Apache-2.0

JavaScript

6.29 kB

6,600,535,720 3.6

Installations

npm install spdx-correct

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

18.14.2

NPM Version

9.5.0 Score

99.5

Supply Chain

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

29

Closed

13

Merged

15

Issues

Open

1

Total

14

Closed

13

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

jslicense

Download Statistics

Total Downloads

6,600,535,720

Last Day

1,736,710

Last Week

28,299,696

Last Month

123,076,962

Last Year

1,327,732,340

GitHub Statistics

Apache-2.0 License

34 Stars

119 Commits

23 Forks

3 Watchers

15 Branches

13 Contributors

Updated on Apr 18, 2025

Bundle Size

18.03 kB

Minified

6.29 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 13 Contributors

Package Meta Information

Latest Version

3.2.0

Package Id

spdx-correct@3.2.0

Unpacked Size

22.86 kB

Size

7.07 kB

File Count

NPM Version

9.5.0

Node Version

18.14.2

Published on

Mar 07, 2023

Total Downloads

Cumulative downloads

Total Downloads

6,600,535,720

Last Day

-8.1%

1,736,710

Compared to previous day

Last Week

-8.3%

28,299,696

Compared to previous week

Last Month

3.1%

123,076,962

Compared to previous month

Last Year

9.3%

1,327,732,340

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

spdx-expression-parse spdx-license-ids

Dev Dependencies

defence-cli replace-require-self standard standard-markdown tape

Usage

1var correct = require('spdx-correct')
2var assert = require('assert')
3
4assert.strictEqual(correct('mit'), 'MIT')
5
6assert.strictEqual(correct('Apache 2'), 'Apache-2.0')
7
8assert(correct('No idea what license') === null)
9
10// disable upgrade option
11assert(correct('GPL-3.0'), 'GPL-3.0-or-later')
12assert(correct('GPL-3.0', { upgrade: false }), 'GPL-3.0')

Contributors

spdx-correct has benefited from the work of several contributors. See the GitHub repository for more information.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.6

/10

Last Scanned on 2025-06-16

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More