{"library":"spdx-satisfies","type":"library","category":null,"description":"The `spdx-satisfies` library provides a robust utility for programmatically validating whether a given SPDX license expression is satisfied by a predefined list of approved licenses. Currently at version 6.0.0, this package is a direct successor to the deprecated `spdx.js` and focuses specifically on accurate satisfaction checks against the SPDX specification. It supports complex license expressions involving `OR` and `WITH` operators for the license expression being checked, but strictly requires that the 'approved licenses' list contains only simple identifiers, plus-ranges (e.g., `GPL-2.0+`), or licenses with exceptions (e.g., `Apache-2.0 WITH LLVM`), prohibiting compound expressions in the approved list. This strictness makes it a critical tool for open-source license compliance, software supply chain security, and automated dependency scanning, offering precise and machine-readable license verification.","language":"javascript","status":"active","version":"6.0.0","tags":["javascript","SPDX","law","legal","license","metadata","package","package.json","standards"],"install":[{"cmd":"npm install spdx-satisfies","imports":["import satisfies from 'spdx-satisfies';","const satisfies = require('spdx-satisfies');"]},{"cmd":"yarn add spdx-satisfies","imports":[]},{"cmd":"pnpm add spdx-satisfies","imports":[]}],"homepage":null,"github":"https://github.com/kemitchell/spdx-satisfies.js","docs":null,"changelog":null,"pypi":null,"npm":"https://www.npmjs.com/package/spdx-satisfies","openapi_spec":null,"status_page":null,"smithery":null,"compatibility":{"summary":{"python_range":"18–22","success_rate":0,"avg_install_s":null,"avg_import_s":null,"wheel_type":null},"url":"https://checklist.day/v1/registry/spdx-satisfies/compatibility"},"provenance":{"verified_status":null,"verified_at":null,"last_verified":"Wed Jun 17","next_check":"Sat Jul 18","install_tag":null}}