
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
license-types
Advanced tools
A rough classification of licenses such as by aspects of permissiveness (a
license will set these with a true boolean value when relevant), categories
adapted from https://github.com/delfrrr/npm-consider.:
publicDomain - Licenses effectively releasing into the public domainpermissive - Highly permissive, like MITweaklyProtective - Some protective aspects, like LGPL or MPLprotective - Protective, like GPLnetworkProtective - Protective, including over network use, like AGPLuseProtective - Has restrictions on usage (e.g., non-commercial), like
Creative Commons Non-Commercial licensesmodifyProtective - Prevents modification, like Creative Commons
No-Derivatives licensesThese categories have generally been defined to be mutually exclusive, though
useProtective and modifyProtective may be used together or one may be used
exclusive to the other.
See a JSON Schema file specifying this format.
A file types.json is also provided to suggest some English text and colors for the types (with greenish tones suggesting more permissive license types and reddish tones suggesting the need for more caution by users/sharers/modifiers of the code due to more stringent requirements, and darker tones indicating unclear or fully restricted uses).
The types.json file also has its own JSON schema.
Note that in addition to the types in the license types JSON, this latter file
also has entries for "unlicensed" (as "UNLICENSED" is used by npm for
copyright being reserved), "custom" (where "SEE LICENSE IN " prefixes an
entry in npm license), "uncategorized" (for any licenses we have yet to
categorize), and "missing" (for packages which simply don't list any license
type; while the copyright should need to be treated as reserved, it is distinct
in that the author may have inadvertently failed to specify it).
None of this is legal advice and none of this should be considered as a warranty, as final, or as authoritatively accurate. Pull requests are welcome to add new licenses and their metadata (providing a link).
npm i license-types
import getLicenseTypes from 'license-types';
const licenseTypes = await getLicenseTypes();
Brett Zamir and contributors.
MIT License, see the included LICENSE-MIT.md file.
FAQs
A rough classification of licenses such as by aspects of permissiveness
The npm package license-types receives a total of 126 weekly downloads. As such, license-types popularity was classified as not popular.
We found that license-types demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.