search

mscdex / busboy

A streaming parser for HTML form data for node.js
MIT License
2.84k stars 213 forks source link

licenses in package.json is deprecated #337

Closed tobysmith568 closed 1 year ago

tobysmith568 commented 1 year ago

Hey

The use of the licenses key in package.json files is deprecated.

Would you please consider switching to an SPDX expression in the license key instead and then pushing out a patch release?

As of right now the npmjs.com website shows busboy as being unlicensed which means that no one can use it unless they double check the repo on GitHub for a license.

image

Thanks :)

mscdex commented 1 year ago

I prefer keeping the direct URL to the license for now.

lukeed commented 7 months ago

Preference or not, it's deprecated & unsupported by any/all tools that are run audits to gather this metadata. It's not supported by npm itself, either.

Suggest keeping your licenses field w/ direct link, but add the "license" field since that actually is what holds meaning.

Currently, busboy and streamsearch are both flagged as "unlicensed" which also affects all their dependents.