Package Health Score

73 / 100

security
No known security issues
popularity
Influential project
maintenance
Sustainable
community
Limited

Explore Similar Packages

Security

No known security issues

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
3.0.20	\|	08/2024	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L
2.0.1	\|	02/2017		0 C 0 H 0 M 0 L	0 H 0 M 0 L
1.2.2	\|	07/2016		0 C 0 H 0 M 0 L	0 H 0 M 0 L
0.0.0	\|	05/2015		0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

CC0-1.0

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Influential project

Weekly Downloads (22,109,833)

GitHub Stars: 35
Forks: 19
Contributors: 4

Direct Usage Popularity

The npm package spdx-license-ids receives a total of 22,109,833 downloads a week. As such, we scored spdx-license-ids popularity level to be Influential project.

Based on project statistics from the GitHub repository for the npm package spdx-license-ids, we found that it has been starred 35 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Limited

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 4
Funding: No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like spdx-license-ids is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Sustainable

Commit Frequency

Open Issues: 0
Open PR: 0
Last Release: 4 months ago
Last Commit: 4 months ago

Further analysis of the maintenance status of spdx-license-ids based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that spdx-license-ids demonstrates a positive version release cadence with at least one new version released in the past 12 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 10 years
Dependencies: 0 Direct
Versions: 34
Install Size: 13 kB
Dist-tags: 2
# of Files: 4
Maintainers: 2
TS Typings: No

spdx-license-ids has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Not sure how to use spdx-license-ids?

To help you get started, we've collected the most common ways that spdx-license-ids is being used within popular public projects.

OpenUserJS / OpenUserJS.org / controllers / scriptStorage.js View on Github

aInnerCallback(new statusError({
          message: '`@license` must match in UserScript and UserLibrary metadata blocks.',
          code: 400
        }), null);
        return;
      }

      if (!isLib) {
        userKeyset = masterKeyset;
      } else {
        userKeyset = slaveKeyset;
      }

      if (userKeyset) {
        thatSPDX = userKeyset[userKeyset.length - 1].split('; ')[0];
        if (SPDX.indexOf(thatSPDX) === -1 || blockSPDX.indexOf(thatSPDX) > -1) {
          // No valid OSI primary e.g. last key... reject
          aInnerCallback(new statusError({
            message: '`@license` is not OSI primary and compatible in the metadata block(s).',
            code: 400
          }), null);
          return;
        }

        for (i = 0; userKey = userKeyset[i++];) {
          thisKeyComponents = userKey.split('; ');
          if (thisKeyComponents.length > 2) {
            // Too many parts... reject
            aInnerCallback(new statusError({
              message: '`@license` has too many parts in the metadata block(s).',
              code: 400
            }), null);

View more ways to use spdx-license-ids

spdx-license-ids

A list of SPDX license identifiers

Installation

Download JSON directly, or use npm:

npm install spdx-license-ids

Node.js API

require('spdx-license-ids')

Type: string[]

All license IDs except for the currently deprecated ones.

const ids = require('spdx-license-ids');
//=> ['0BSD', 'AAL', 'ADSL', 'AFL-1.1', 'AFL-1.2', 'AFL-2.0', 'AFL-2.1', 'AFL-3.0', 'AGPL-1.0-only', ...]

ids.includes('BSD-3-Clause'); //=> true
ids.includes('CC-BY-1.0'); //=> true

ids.includes('GPL-3.0'); //=> false

require('spdx-license-ids/deprecated')

Type: string[]

Deprecated license IDs.

const deprecatedIds = require('spdx-license-ids/deprecated');
//=> ['AGPL-1.0', 'AGPL-3.0', 'GFDL-1.1', 'GFDL-1.2', 'GFDL-1.3', 'GPL-1.0', 'GPL-2.0', ...]

deprecatedIds.includes('BSD-3-Clause'); //=> false
deprecatedIds.includes('CC-BY-1.0'); //=> false

deprecatedIds.includes('GPL-3.0'); //=> true

License

Creative Commons Zero v1.0 Universal

spdx-license-ids development dependencies

@shinnn/eslint-config eslint eslint-formatter-codeframe rmfr tape

FAQs

What is spdx-license-ids?

A list of SPDX license identifiers. Visit Snyk Advisor to see a full health score report for spdx-license-ids, including popularity, security, maintenance & community analysis.

Is spdx-license-ids popular?

The npm package spdx-license-ids receives a total of 22,109,833 weekly downloads. As such, spdx-license-ids popularity was classified as an influential project. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is spdx-license-ids well maintained?

We found indications that spdx-license-ids maintenance is sustainable demonstrating some project activity. We saw a total of 4 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is spdx-license-ids safe to use?

The npm package spdx-license-ids was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 21 December-2024, at 02:23 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

spdx-license-ids

A list of SPDX license identifiers For more information about how to use this package see README

Ensure you're using the healthiest npm packages

Package Health Score

Explore Similar Packages

Security

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Popularity

Weekly Downloads (22,109,833)

Direct Usage Popularity

Community

Embed Package Health Score Badge

Maintenance

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Package

Not sure how to use spdx-license-ids?

spdx-license-ids

Installation

Node.js API

require('spdx-license-ids')

require('spdx-license-ids/deprecated')

License

spdx-license-ids development dependencies

FAQs

What is spdx-license-ids?

Is spdx-license-ids popular?

Is spdx-license-ids well maintained?

Is spdx-license-ids safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Explore Similar Packages

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (22,109,833)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Not sure how to use spdx-license-ids?

spdx-license-ids

Installation

Node.js API

require('spdx-license-ids')

require('spdx-license-ids/deprecated')

License

spdx-license-ids development dependencies

FAQs

What is spdx-license-ids?

Is spdx-license-ids popular?

Is spdx-license-ids well maintained?

Is spdx-license-ids safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues