npmpackage.info

Gathering detailed insights and metrics for spdx-license-ids

Other packages similar to spdx-license-ids

spdx-license-list

6.9.0

List of SPDX licenses

get-spdx-license-ids

2.1.0

Get an array of the latest list of SPDX license IDs from spdx.org

deprecated-spdx-license-ids

0.0.0

A list of SPDX license identifiers

joi-extension-spdx

0.2.0

SPDX License IDs plugin for Joi

spdx-license-ids

a list of SPDX license identifiers

3.0.21

JavaScript

3.51 kB

6,413,858,487 3.1

Installations

npm install spdx-license-ids

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

22.13.0

NPM Version

10.9.2 Score

99.9

Supply Chain

83.9

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

22

Closed

6

Merged

16

Issues

Open

0

Total

13

Closed

13

Releases

Unable to fetch releases

Contributors

Unable to fetch Contributors

View all 9 contributors

Languages

JavaScript

JavaScript (100%)

Developer

jslicense

Download Statistics

Total Downloads

6,413,858,487

Last Day

1,993,042

Last Week

12,340,733

Last Month

99,425,312

Last Year

1,362,575,708

GitHub Statistics

36 Stars

146 Commits

20 Forks

4 Watching

7 Branches

9 Contributors

Bundle Size

9.09 kB

Minified

3.51 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

3.0.21

Package Id

spdx-license-ids@3.0.21

Unpacked Size

12.59 kB

Size

4.51 kB

File Count

NPM Version

10.9.2

Node Version

22.13.0

Publised On

15 Jan 2025

Total Downloads

Cumulative downloads

Total Downloads

6,413,858,487

Last day

-16.2%

1,993,042

Compared to previous day

Last week

-42.9%

12,340,733

Compared to previous week

Last month

-24.2%

99,425,312

Compared to previous month

Last year

8.6%

1,362,575,708

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

No dependencies detected.

Versions

spdx-license-ids

A list of SPDX license identifiers

Installation

Download JSON directly, or use npm:

npm install spdx-license-ids

Node.js API

require('spdx-license-ids')

Type: string[]

All license IDs except for the currently deprecated ones.

1const ids = require('spdx-license-ids');
2//=> ['0BSD', 'AAL', 'ADSL', 'AFL-1.1', 'AFL-1.2', 'AFL-2.0', 'AFL-2.1', 'AFL-3.0', 'AGPL-1.0-only', ...]
3
4ids.includes('BSD-3-Clause'); //=> true
5ids.includes('CC-BY-1.0'); //=> true
6
7ids.includes('GPL-3.0'); //=> false

require('spdx-license-ids/deprecated')

Type: string[]

Deprecated license IDs.

1const deprecatedIds = require('spdx-license-ids/deprecated');
2//=> ['AGPL-1.0', 'AGPL-3.0', 'GFDL-1.1', 'GFDL-1.2', 'GFDL-1.3', 'GPL-1.0', 'GPL-2.0', ...]
3
4deprecatedIds.includes('BSD-3-Clause'); //=> false
5deprecatedIds.includes('CC-BY-1.0'); //=> false
6
7deprecatedIds.includes('GPL-3.0'); //=> true

License

Creative Commons Zero v1.0 Universal

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

License

Determines if the project has defined a license.

0

Security-Policy

Determines if the project has published a security policy.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.1

/10

Last Scanned on 2025-01-06

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More