Skip to content

fix: license in package.json to be spdx compatible#10

Open
mojoaxel wants to merge 1 commit into
shakyShane:masterfrom
mojoaxel:patch-1
Open

fix: license in package.json to be spdx compatible#10
mojoaxel wants to merge 1 commit into
shakyShane:masterfrom
mojoaxel:patch-1

Conversation

@mojoaxel
Copy link
Copy Markdown

The license/licenses key in the package.json must be SPDX compatible.
The String "Apache 2.0" is not a valid SPDX identifier. The correct string is "Apache 2.0".

This can cause errors e.g. in projects that have license checks. For me this caused a nx-workspace update to fail.

The license/licenses key in the package.json [must be SPDX compatible](https://docs.npmjs.com/cli/v10/configuring-npm/package-json#license).
The String "Apache 2.0" is not a valid [SPDX identifier](https://spdx.org/licenses/). The correct string is "Apache 2.0".
@inpercima
Copy link
Copy Markdown

inpercima commented Jan 17, 2024

Hey I have the same problem with a license-checker, the correct name is Apache-2.0, @mojoaxel in your commit this is correct.

@sdavids
Copy link
Copy Markdown

sdavids commented Feb 7, 2025

You might want to add this when while fixing CVE-2024-57075.

@sdavids sdavids mentioned this pull request Feb 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants