npmpackage.info

spdx-correct

correct invalid SPDX identifiers

3.2.0

Apache-2.0

JavaScript

6.29 kB

6,071,473,533 3.6

Installations

npm install spdx-correct

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

18.14.2

NPM Version

9.5.0 Score

99.5

Supply Chain

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

29

Closed

13

Merged

15

Issues

Open

1

Total

14

Closed

13

Releases

Unable to fetch releases

Contributors

Unable to fetch Contributors

View all 13 contributors

Languages

JavaScript

JavaScript (100%)

Developer

jslicense

Download Statistics

Total Downloads

6,071,473,533

Last Day

4,739,721

Last Week

24,351,099

Last Month

83,740,601

Last Year

1,270,319,923

GitHub Statistics

32 Stars

119 Commits

22 Forks

4 Watching

15 Branches

13 Contributors

Bundle Size

18.03 kB

Minified

6.29 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

3.2.0

Package Id

spdx-correct@3.2.0

Unpacked Size

22.86 kB

Size

7.07 kB

File Count

NPM Version

9.5.0

Node Version

18.14.2

Publised On

07 Mar 2023

Total Downloads

Cumulative downloads

Total Downloads

6,071,473,533

Last day

7.6%

4,739,721

Compared to previous day

Last week

11%

24,351,099

Compared to previous week

Last month

-31.2%

83,740,601

Compared to previous month

Last year

6.7%

1,270,319,923

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

spdx-expression-parse spdx-license-ids

Dev Dependencies

defence-cli replace-require-self standard standard-markdown tape

Versions

Usage

1var correct = require('spdx-correct')
2var assert = require('assert')
3
4assert.strictEqual(correct('mit'), 'MIT')
5
6assert.strictEqual(correct('Apache 2'), 'Apache-2.0')
7
8assert(correct('No idea what license') === null)
9
10// disable upgrade option
11assert(correct('GPL-3.0'), 'GPL-3.0-or-later')
12assert(correct('GPL-3.0', { upgrade: false }), 'GPL-3.0')

Contributors

spdx-correct has benefited from the work of several contributors. See the GitHub repository for more information.

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.6

/10

Last Scanned on 2025-01-06

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to spdx-correct

@types/spdx-correct

3.1.3

TypeScript definitions for spdx-correct

Gathering detailed insights and metrics for spdx-correct