
Security News
vlt 1.5.0 Adds Agent Skills Management
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.
alt-spdx-exceptions
Advanced tools
The npm package `spdx-exceptions` is a package that contains a list of SPDX exceptions. This repository contains an alternative list (ideally at least as up-to-date) of exceptions.
The npm package spdx-exceptions is a package that contains a list of SPDX exceptions. This repository contains an alternative list (ideally at least as up-to-date) of exceptions.
I found ways to improve the original implementation of collecting the data. However, as spdx-exceptions is licensed under CC-BY-3.0, I did not want to contribute to the original.
By adding the following to your package.json you can use this package:
{
"overrides": {
"spdx-exceptions": "npm:alt-spdx-exceptions"
}
}
This package is licensed under MIT, just like the XML list that it uses.
The only thing that this package borrows is the format of exporting, to remain compatible.
Linux Foundation is a registered trademark of The Linux Foundation. Linux is a registered trademark of Linus Torvalds.
FAQs
The npm package `spdx-exceptions` is a package that contains a list of SPDX exceptions. This repository contains an alternative list (ideally at least as up-to-date) of exceptions.
The npm package alt-spdx-exceptions receives a total of 0 weekly downloads. As such, alt-spdx-exceptions popularity was classified as not popular.
We found that alt-spdx-exceptions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.

Security News
vlt 1.5.0 links skills from JavaScript dependencies to coding agents, with lockfile versioning and Socket data to filter out known malicious packages.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.