npmpackage.info

spdx-license-list

List of SPDX licenses

6.9.0

CC0-1.0

JavaScript

20.87 kB

36,171,131 3.5

Installations

npm install spdx-license-list

Developer Guide

BETA

Typescript

Yes

Module System

N/A

Min. Node Version

>=8

Node Version

21.6.2

NPM Version

9.2.0 Score

99.8

Supply Chain

92.9

Quality

76.8

Maintenance

100

Vulnerability

74.9

License

Pull Requests

Open

0

Total

11

Closed

3

Merged

8

Issues

Open

0

Total

11

Closed

11

Releases

v6.9.0

Updated on Feb 21, 2024

v6.8.0

Updated on Oct 30, 2023

v6.7.0

Updated on Aug 31, 2023

v6.6.0

Updated on Jun 09, 2022

v6.5.0

Updated on Apr 04, 2022

v6.4.0

Updated on Jan 24, 2021

View All 12 releases

Contributors

Unable to fetch Contributors

View All 10 Contributors

Languages

JavaScript

TypeScript

JavaScript (82.73%)

TypeScript (17.27%)

Love this project? Help keep it running — sponsor us today! 🚀

Developer

sindresorhus

Download Statistics

Total Downloads

36,171,131

Last Day

61,177

Last Week

345,339

Last Month

1,408,669

Last Year

12,705,296

GitHub Statistics

CC0-1.0 License

89 Stars

63 Commits

16 Forks

9 Watchers

1 Branches

10 Contributors

Updated on Feb 13, 2025

Bundle Size

91.79 kB

Minified

20.87 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/sindresorhus

Maintainers

Package Meta Information

Latest Version

6.9.0

Package Id

spdx-license-list@6.9.0

Unpacked Size

9.50 MB

Size

2.26 MB

File Count

650

NPM Version

9.2.0

Node Version

21.6.2

Published on

Feb 21, 2024

Total Downloads

Cumulative downloads

Total Downloads

36,171,131

Last Day

0.3%

61,177

Compared to previous day

Last Week

4.4%

345,339

Compared to previous week

Last Month

51.9%

1,408,669

Compared to previous month

Last Year

21.4%

12,705,296

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

ava got hard-rejection ora p-map tsd xo

spdx-license-list

List of SPDX licenses

The lists of licenses are just JSON files and can be used anywhere.

spdx.json contains just license metadata
spdx-full.json includes the license text too
spdx-simple.json only contains the license IDs

Using SPDX License List version 3.23 (2024-02-08)

Install

1npm install spdx-license-list

Usage

1const spdxLicenseList = require('spdx-license-list');
2
3console.log(spdxLicenseList.MIT);
4/*
5{
6	name: 'MIT License',
7	url: 'http://www.opensource.org/licenses/MIT',
8	osiApproved: true
9}
10*/

1const mitLicense = require('spdx-license-list/licenses/MIT');
2
3console.log(mitLicense.licenseText);
4//=> 'MIT License\r\n\r\nCopyright (c) <year> <copyright holders> …'

You can also get a version with the licence text included:

1const spdxLicenseList = require('spdx-license-list/full');
2
3console.log(spdxLicenseList.MIT);
4/*
5{
6	name: 'MIT License',
7	url: 'http://www.opensource.org/licenses/MIT',
8	osiApproved: true,
9	licenseText: '…'
10}
11*/

Or just the license IDs as a Set:

1const spdxLicenseList = require('spdx-license-list/simple');
2
3console.log(spdxLicenseList);
4//=> Set {'Glide', 'Abstyles', …}

API

spdxLicenseList

Type: object

The licenses are indexed by their identifier and contains a name property with the full name of the license, url with the URL to the license, and osiApproved boolean for whether the license is OSI Approved.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

3.5

/10

Last Scanned on 2025-02-03

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to spdx-license-list

spdx-license-ids

3.0.21

A list of SPDX license identifiers

spdx-exceptions

2.5.0

list of SPDX standard license exceptions

spdx-ranges

2.1.1

list of SPDX standard license ranges

get-spdx-license-ids

2.1.0

Get an array of the latest list of SPDX license IDs from spdx.org