npmpackage.info

Gathering detailed insights and metrics for spdx-license-ids

Other packages similar to spdx-license-ids

spdx-license-list

6.10.0

List of SPDX licenses

get-spdx-license-ids

2.1.0

Get an array of the latest list of SPDX license IDs from spdx.org

deprecated-spdx-license-ids

0.0.0

A list of SPDX license identifiers

joi-extension-spdx

0.2.0

SPDX License IDs plugin for Joi

Gathering detailed insights and metrics for spdx-license-ids

spdx-license-ids - 3.0.21 | npmpackage.info

spdx-license-ids

a list of SPDX license identifiers

3.0.21

JavaScript

3.51 kB

7,036,236,850 3.1

Installations

npm install spdx-license-ids

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

22.13.0

NPM Version

10.9.2 Score

99.9

Supply Chain

83.9

Quality

80.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

22

Closed

6

Merged

16

Issues

Open

0

Total

13

Closed

13

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

jslicense

Download Statistics

Total Downloads

7,036,236,850

Last Day

1,839,193

Last Week

30,226,662

Last Month

131,510,255

Last Year

1,429,886,276

GitHub Statistics

35 Stars

146 Commits

20 Forks

3 Watchers

7 Branches

9 Contributors

Updated on Feb 06, 2025

Bundle Size

9.09 kB

Minified

3.51 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 9 Contributors

Package Meta Information

Latest Version

3.0.21

Package Id

spdx-license-ids@3.0.21

Unpacked Size

12.59 kB

Size

4.51 kB

File Count

NPM Version

10.9.2

Node Version

22.13.0

Published on

Jan 15, 2025

Total Downloads

Cumulative downloads

Total Downloads

7,036,236,850

Last Day

-7.8%

1,839,193

Compared to previous day

Last Week

-8.3%

30,226,662

Compared to previous week

Last Month

2.5%

131,510,255

Compared to previous month

Last Year

10.9%

1,429,886,276

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

No dependencies detected.

spdx-license-ids

A list of SPDX license identifiers

Installation

Download JSON directly, or use npm:

npm install spdx-license-ids

Node.js API

require('spdx-license-ids')

Type: string[]

All license IDs except for the currently deprecated ones.

1const ids = require('spdx-license-ids');
2//=> ['0BSD', 'AAL', 'ADSL', 'AFL-1.1', 'AFL-1.2', 'AFL-2.0', 'AFL-2.1', 'AFL-3.0', 'AGPL-1.0-only', ...]
3
4ids.includes('BSD-3-Clause'); //=> true
5ids.includes('CC-BY-1.0'); //=> true
6
7ids.includes('GPL-3.0'); //=> false

require('spdx-license-ids/deprecated')

Type: string[]

Deprecated license IDs.

1const deprecatedIds = require('spdx-license-ids/deprecated');
2//=> ['AGPL-1.0', 'AGPL-3.0', 'GFDL-1.1', 'GFDL-1.2', 'GFDL-1.3', 'GPL-1.0', 'GPL-2.0', ...]
3
4deprecatedIds.includes('BSD-3-Clause'); //=> false
5deprecatedIds.includes('CC-BY-1.0'); //=> false
6
7deprecatedIds.includes('GPL-3.0'); //=> true

License

Creative Commons Zero v1.0 Universal

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Security-Policy

Determines if the project has published a security policy.

0

License

Determines if the project has defined a license.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.1

/10

Last Scanned on 2025-06-16

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More