Is spdx-compare safe to use?

spdx-compare has no known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 59/100 (high risk).

What is the latest version of spdx-compare?

The latest version of spdx-compare is 1.0.0, released 2018-03-07.

Does spdx-compare have known vulnerabilities?

No known vulnerabilities on the latest version of spdx-compare.

Is spdx-compare deprecated?

No, spdx-compare is actively maintained. Latest release: 1.0.0 (2018-03-07).

What are alternatives to spdx-compare?

Popular alternatives to spdx-compare in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does spdx-compare use?

spdx-compare is licensed under MIT.

spdx-compare

npmv1.0.0

compare SPDX license expressions

License MITpermissive3 versions1 maintainers3 deps1,409,408 weekly dl

kemitchell/spdx-compare.js

/ 100

Health

use with caution

[email protected] low health (59/100) — consider alternatives

Moderate health score (59/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

16.0 KBminified

5.5 KB gzipped

3 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/spdx-compare (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (3)

array-find-index spdx-expression-parse spdx-ranges

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/spdx-compare