qrcode-terminal icon indicating copy to clipboard operation
qrcode-terminal copied to clipboard

chore: fix license to be valid SPDX

Open mojoaxel opened this issue 3 years ago • 3 comments

This changes the license to a be a correct SPDX type. Currently the package.json is invalid.

The npm docs clearly state that a "licenses array" is (no longer?) valid:

// Not valid metadata
{
  "licenses" : [
    {
      "type": "MIT",
      "url": "https://www.opensource.org/licenses/mit-license.php"
    },
    {
      "type": "Apache-2.0",
      "url": "https://opensource.org/licenses/apache2.0.php"
    }
  ]
}

mojoaxel avatar May 14 '21 09:05 mojoaxel

Bumping this PR, since the invalid SPDX expression makes license compatibility checks harder than necessary.

yeldiRium avatar Jul 14 '21 09:07 yeldiRium

@gtanner Would you mind please taking a look? :) The "Apache 2.0" in the license field isn't a valid SPDX identifier because it's missing a dash https://spdx.org/licenses/Apache-2.0.html.

The missing dash makes license compliance scanning of dependencies troublesome. Most people will have Apache-2.0 on their allowed licenses list, but "Apache 2.0" with no dash is unexpected

sethidden avatar Aug 02 '23 10:08 sethidden

Good morning. Thanks for the good job on qacode-terminal. Any chance this could be fixed soon? As @yeldiRium said:

the invalid SPDX expression makes license compatibility checks harder than necessary.

xjunior avatar Aug 15 '23 10:08 xjunior