New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

spdx-license-list

Package Overview
Dependencies
Maintainers
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

spdx-license-list

SPDX License List as a Python dictionary

  • 3.26.0
  • PyPI
  • Socket score

Maintainers
1

Latest PyPI release Latest GitHub release Latest tag

License Python versions

pre-commit.ci status

Code style: black

SPDX License List

Provides the SPDX License List as a Python dictionary

Data source: spdx/license-list-data

Originally designed as a replacement for Michael Pöhn's spdx-license-list but does not have the same API

Installation

pip install spdx-license-list

API

spdx_license_list.LICENSES is a dictionary of all the licenses.

The dictionary uses the identifier (id) as the keys, and the values are (typed) named tuples with the following attributes:

  • id (str) - short identifier to identify a match to licenses in the context of an SPDX file, a source file, or elsewhere
  • name (str) - full name that should be the title found in the license file or consistent with naming from other well-known sources
  • deprecated_id (bool) - idendifier is deprecated
  • fsf_libre (bool) - license is listed as free by the FSF
  • osi_approved (bool) - license is OSI-approved

spdx_license_list.EXCEPTIONS is a dictionary of all the license exceptions.

The dictionary uses the identifier (id) as the keys, and the values are (typed) named tuples with the following attributes:

  • id (str) - short identifier to identify a match to license exceptions in the context of an SPDX file, a source file, or elsewhere
  • name (str) - full name that should be the title found in the license file or consistent with naming from other well-known sources
  • deprecated_id (bool) - idendifier is deprecated

FAQs


Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc