npmpackage.info

Gathering detailed insights and metrics for spdx-exceptions

Other packages similar to spdx-exceptions

alt-spdx-exceptions

1.0.0

The npm package `spdx-exceptions` is a package that contains a list of SPDX exceptions. This repository contains an alternative list (ideally at least as up-to-date) of exceptions.

spdx-license-exceptions

0.0.2

Lookup SPDX license exception identifiers.

Gathering detailed insights and metrics for spdx-exceptions

spdx-exceptions - 2.5.0 | npmpackage.info

spdx-exceptions

list of SPDX standard license exceptions

2.5.0

JavaScript

3.39 kB

6,037,275,555 3.4

Installations

npm install spdx-exceptions

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

20.11.0

NPM Version

10.2.4 Pull Requests

Open

1

Total

6

Closed

4

Merged

1

Issues

Open

0

Total

7

Closed

7

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

kemitchell

Download Statistics

Total Downloads

6,037,275,555

Last Day

5,452,340

Last Week

28,481,706

Last Month

122,416,348

Last Year

1,324,720,228

GitHub Statistics

16 Stars

44 Commits

11 Forks

3 Watchers

1 Branches

8 Contributors

Updated on Mar 30, 2025

Maintainers

View All 8 Contributors

Package Meta Information

Latest Version

2.5.0

Package Id

spdx-exceptions@2.5.0

Unpacked Size

3.39 kB

Size

1.58 kB

File Count

NPM Version

10.2.4

Node Version

20.11.0

Published on

Feb 15, 2024

Total Downloads

Cumulative downloads

Total Downloads

6,037,275,555

Last Day

3.2%

5,452,340

Compared to previous day

Last Week

0.3%

28,481,706

Compared to previous week

Last Month

1.7%

122,416,348

Compared to previous month

Last Year

12.9%

1,324,720,228

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

No dependencies detected.

The package exports an array of strings. Each string is an identifier for a license exception under the Software Package Data Exchange (SPDX) software license metadata standard.

Copyright and Licensing

SPDX

"SPDX" is a federally registered United States trademark of The Linux Foundation Corporation.

From version 2.0 of the SPDX specification:

Copyright © 2010-2015 Linux Foundation and its Contributors. Licensed under the Creative Commons Attribution License 3.0 Unported. All other rights are expressly reserved.

The Linux Foundation and the SPDX working groups are good people. Only they decide what "SPDX" means, as a standard and otherwise. I respect their work and their rights. You should, too.

This Package

I created this package by copying exception identifiers out of the SPDX specification. That work was mechanical, routine, and required no creativity whatsoever. - Kyle Mitchell, package author

United States users concerned about intellectual property may wish to discuss the following Supreme Court decisions with their attorneys:

Baker v. Selden, 101 U.S. 99 (1879)
Feist Publications, Inc., v. Rural Telephone Service Co., 499 U.S. 340 (1991)

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

License

Determines if the project has defined a license.

0

SAST

Determines if the project uses static code analysis.

Score

3.4

/10

Last Scanned on 2025-03-31

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More