Open mojoaxel opened 3 years ago
Bumping this PR, since the invalid SPDX expression makes license compatibility checks harder than necessary.
@gtanner Would you mind please taking a look? :) The "Apache 2.0" in the license field isn't a valid SPDX identifier because it's missing a dash https://spdx.org/licenses/Apache-2.0.html.
The missing dash makes license compliance scanning of dependencies troublesome. Most people will have Apache-2.0 on their allowed licenses list, but "Apache 2.0" with no dash is unexpected
Good morning. Thanks for the good job on qacode-terminal
. Any chance this could be fixed soon? As @yeldiRium said:
the invalid SPDX expression makes license compatibility checks harder than necessary.
This changes the license to a be a correct SPDX type. Currently the package.json is invalid.
The npm docs clearly state that a "licenses array" is (no longer?) valid: