npmpackage.info

Gathering detailed insights and metrics for spdx-exceptions

Other packages similar to spdx-exceptions

alt-spdx-exceptions

1.0.0

The npm package `spdx-exceptions` is a package that contains a list of SPDX exceptions. This repository contains an alternative list (ideally at least as up-to-date) of exceptions.

spdx-license-exceptions

0.0.2

Lookup SPDX license exception identifiers.

spdx-exceptions

list of SPDX standard license exceptions

2.5.0

JavaScript

654.00 B

5,726,779,807 3.4

Installations

npm install spdx-exceptions

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

20.11.0

NPM Version

10.2.4 Score

99.9

Supply Chain

74.5

Quality

77.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

6

Closed

4

Merged

1

Issues

Open

0

Total

7

Closed

7

Releases

Unable to fetch releases

Contributors

Unable to fetch Contributors

View all 8 contributors

Languages

JavaScript

JavaScript (100%)

Developer

kemitchell

Download Statistics

Total Downloads

5,726,779,807

Last Day

4,571,511

Last Week

24,651,069

Last Month

85,389,883

Last Year

1,295,707,941

GitHub Statistics

15 Stars

44 Commits

11 Forks

4 Watching

1 Branches

8 Contributors

Bundle Size

1.66 kB

Minified

654.00 B

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

2.5.0

Package Id

spdx-exceptions@2.5.0

Unpacked Size

3.39 kB

Size

1.58 kB

File Count

NPM Version

10.2.4

Node Version

20.11.0

Publised On

15 Feb 2024

Total Downloads

Cumulative downloads

Total Downloads

5,726,779,807

Last day

5.4%

4,571,511

Compared to previous day

Last week

29.9%

24,651,069

Compared to previous week

Last month

-28.9%

85,389,883

Compared to previous month

Last year

13.1%

1,295,707,941

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

No dependencies detected.

Versions

The package exports an array of strings. Each string is an identifier for a license exception under the Software Package Data Exchange (SPDX) software license metadata standard.

Copyright and Licensing

SPDX

"SPDX" is a federally registered United States trademark of The Linux Foundation Corporation.

From version 2.0 of the SPDX specification:

Copyright © 2010-2015 Linux Foundation and its Contributors. Licensed under the Creative Commons Attribution License 3.0 Unported. All other rights are expressly reserved.

The Linux Foundation and the SPDX working groups are good people. Only they decide what "SPDX" means, as a standard and otherwise. I respect their work and their rights. You should, too.

This Package

I created this package by copying exception identifiers out of the SPDX specification. That work was mechanical, routine, and required no creativity whatsoever. - Kyle Mitchell, package author

United States users concerned about intellectual property may wish to discuss the following Supreme Court decisions with their attorneys:

Baker v. Selden, 101 U.S. 99 (1879)
Feist Publications, Inc., v. Rural Telephone Service Co., 499 U.S. 340 (1991)

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

License

Determines if the project has defined a license.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

3.4

/10

Last Scanned on 2025-01-06

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More