Is spdx-licenses safe to use?

spdx-licenses has no known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 48/100 (high risk).

What is the latest version of spdx-licenses?

The latest version of spdx-licenses is 1.0.0, released 2019-03-19.

Does spdx-licenses have known vulnerabilities?

No known vulnerabilities on the latest version of spdx-licenses.

Is spdx-licenses deprecated?

No, spdx-licenses is actively maintained. Latest release: 1.0.0 (2019-03-19).

What are alternatives to spdx-licenses?

Popular alternatives to spdx-licenses in npm include: ?, minimatch, semver, ansi-styles, debug.

What license does spdx-licenses use?

spdx-licenses is licensed under MIT.

spdx-licenses

npmv1.0.0

Has a list of all the valid SPDX licenses, and for a given id, will return the full name and if OSI approved.

License MITpermissive4 versions1 maintainers2 deps6,120 weekly dl

stdarg/spdx-licenses

/ 100

Health

use with caution

[email protected] low health (48/100) — consider alternatives

Moderate health score (48/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

6/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (2)

debug is2

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/spdx-licenses