npmpackage.info

Gathering detailed insights and metrics for spdx-license-list

Other packages similar to spdx-license-list

spdx-license-ids

3.0.21

A list of SPDX license identifiers

spdx-exceptions

2.5.0

list of SPDX standard license exceptions

spdx-ranges

2.1.1

list of SPDX standard license ranges

get-spdx-license-ids

2.1.0

Get an array of the latest list of SPDX license IDs from spdx.org

Gathering detailed insights and metrics for spdx-license-list

spdx-license-list - 6.9.0 | npmpackage.info

spdx-license-list

List of SPDX licenses

6.9.0

CC0-1.0

JavaScript

9.50 MB

38,635,529 3.5

Installations

npm install spdx-license-list

Developer Guide

BETA

Typescript

Yes

Module System

N/A

Min. Node Version

>=8

Node Version

21.6.2

NPM Version

9.2.0 Pull Requests

Open

0

Total

11

Closed

3

Merged

8

Issues

Open

0

Total

11

Closed

11

Releases

v6.9.0

Updated on Feb 21, 2024

v6.8.0

Updated on Oct 30, 2023

v6.7.0

Updated on Aug 31, 2023

v6.6.0

Updated on Jun 09, 2022

v6.5.0

Updated on Apr 04, 2022

v6.4.0

Updated on Jan 24, 2021

View All 12 releases

Languages

JavaScript

TypeScript

JavaScript (82.73%)

TypeScript (17.27%)

Developer

sindresorhus

Download Statistics

Total Downloads

38,635,529

Last Day

76,365

Last Week

383,919

Last Month

1,579,358

Last Year

13,537,167

GitHub Statistics

CC0-1.0 License

89 Stars

63 Commits

16 Forks

8 Watchers

1 Branches

10 Contributors

Updated on Feb 13, 2025

Sponsor this package

https://github.com/sponsors/sindresorhus

Maintainers

View All 10 Contributors

Package Meta Information

Latest Version

6.9.0

Package Id

spdx-license-list@6.9.0

Unpacked Size

9.50 MB

Size

2.26 MB

File Count

650

NPM Version

9.2.0

Node Version

21.6.2

Published on

Feb 21, 2024

Total Downloads

Cumulative downloads

Total Downloads

38,635,529

Last Day

4.2%

76,365

Compared to previous day

Last Week

3.8%

383,919

Compared to previous week

Last Month

10.2%

1,579,358

Compared to previous month

Last Year

25.2%

13,537,167

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

ava got hard-rejection ora p-map tsd xo

spdx-license-list

List of SPDX licenses

The lists of licenses are just JSON files and can be used anywhere.

spdx.json contains just license metadata
spdx-full.json includes the license text too
spdx-simple.json only contains the license IDs

Using SPDX License List version 3.23 (2024-02-08)

Install

1npm install spdx-license-list

Usage

1const spdxLicenseList = require('spdx-license-list');
2
3console.log(spdxLicenseList.MIT);
4/*
5{
6	name: 'MIT License',
7	url: 'http://www.opensource.org/licenses/MIT',
8	osiApproved: true
9}
10*/

1const mitLicense = require('spdx-license-list/licenses/MIT');
2
3console.log(mitLicense.licenseText);
4//=> 'MIT License\r\n\r\nCopyright (c) <year> <copyright holders> …'

You can also get a version with the licence text included:

1const spdxLicenseList = require('spdx-license-list/full');
2
3console.log(spdxLicenseList.MIT);
4/*
5{
6	name: 'MIT License',
7	url: 'http://www.opensource.org/licenses/MIT',
8	osiApproved: true,
9	licenseText: '…'
10}
11*/

Or just the license IDs as a Set:

1const spdxLicenseList = require('spdx-license-list/simple');
2
3console.log(spdxLicenseList);
4//=> Set {'Glide', 'Abstyles', …}

API

spdxLicenseList

Type: object

The licenses are indexed by their identifier and contains a name property with the full name of the license, url with the URL to the license, and osiApproved boolean for whether the license is OSI Approved.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

3.5

/10

Last Scanned on 2025-03-24

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More