You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The report will include node packages, but the they are missing license and maintainer information. For example:
express-4.18.1 (no license) maintained by nobody
It would be nice if derivations generated for each package included meta extracted from their package.jsons. Typically they will include license, author, and contributor information. According to the package.json docs, licenses should generally use SPDX identifiers, which should hopefully make them easily to translate to meta.license.
The text was updated successfully, but these errors were encountered:
I'm using the following to generate a basic BOM:
The report will include node packages, but the they are missing license and maintainer information. For example:
It would be nice if derivations generated for each package included meta extracted from their
package.json
s. Typically they will include license, author, and contributor information. According to the package.json docs, licenses should generally use SPDX identifiers, which should hopefully make them easily to translate tometa.license
.The text was updated successfully, but these errors were encountered: