Is spdx-whitelisted safe to use?

spdx-whitelisted has no known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 39/100 (critical risk).

What is the latest version of spdx-whitelisted?

The latest version of spdx-whitelisted is 1.0.0, released 2019-03-28.

Does spdx-whitelisted have known vulnerabilities?

No known vulnerabilities on the latest version of spdx-whitelisted.

Is spdx-whitelisted deprecated?

No, spdx-whitelisted is actively maintained. Latest release: 1.0.0 (2019-03-28).

What are alternatives to spdx-whitelisted?

Popular alternatives to spdx-whitelisted in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does spdx-whitelisted use?

spdx-whitelisted is licensed under MIT.

spdx-whitelisted

npmv1.0.0

test whether SPDX expressions satisfy license whitelists

License MITpermissive1 versions1 maintainers2 deps

jslicense/spdx-whitelisted.js

/ 100

Health

use with caution

[email protected] low health (39/100) — consider alternatives

Low health score (39/100)

Health breakdown0 – 100

0/25

maintenance

0/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

7/10typed

Types from @types/spdx-whitelisted (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (2)

spdx-compare spdx-ranges

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/spdx-whitelisted