Installations

npm install spdx-is-osi

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

8.11.3

NPM Version

5.6.0 Score

58.6

Supply Chain

56.7

Quality

74.5

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

0

Total

1

Closed

1

Issues

Open

0

Total

2

Closed

2

Releases

Unable to fetch releases

Contributors

7

Unable to fetch Contributors

View all 7 contributors

Languages

1

JavaScript

JavaScript (100%)

Developer

jslicense

Download Statistics

Total Downloads

4,317

Last Day

1

Last Week

9

Last Month

16

Last Year

106

GitHub Statistics

22 Commits

1 Forks

2 Watching

2 Branches

7 Contributors

Bundle Size

18.76 kB

Minified

6.18 kB

Minified + Gzipped

Bundlephobia

Maintainers

1

Package Meta Information

Latest Version

1.0.0

Package Id

spdx-is-osi@1.0.0

Unpacked Size

2.58 kB

Size

1.43 kB

File Count

4

NPM Version

5.6.0

Node Version

8.11.3

Total Downloads

Cumulative downloads

Total Downloads

4,317

Last day

0%

1

Compared to previous day

Last week

125%

9

Compared to previous week

Last month

166.7%

16

Compared to previous month

Last year

-12.4%

106

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

2

spdx-osi spdx-satisfies

Dev Dependencies

4

defence-cli replace-require-self standard standard-markdown

Versions

1var assert = require('assert')
2var isOSIApproved = require('spdx-is-osi')
3
4// The MIT License
5// Has an SPDX identifier
6// An OSI-approved license
7assert.strictEqual(isOSIApproved('MIT'), true)
8
9// Zope Public License 2.1
10// Has an SPDX identifier
11// Not an OSI-approved license
12assert.strictEqual(isOSIApproved('ZPL-2.1'), false)
13
14// Dual-licensing under MIT and Zope 2.1
15assert.strictEqual(isOSIApproved('(MIT OR ZPL-2.1)'), true)
16
17// Double-licensing under MIT and Zope 2.1
18assert.strictEqual(isOSIApproved('(MIT AND ZPL-2.1)'), false)
19
20// Licensing under current and subsequent versions.
21assert.strictEqual(isOSIApproved('(GPL-2.0+)'), true)

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

License

Determines if the project has defined a license.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

SAST

Determines if the project uses static code analysis.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

3

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More